This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa
File: k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa (raw, json)
Hash identifier: 7U/P0XBJOG36kibHl1+nAbvsI31pDTNTQ+rTrF6SsdE=
Subject key identifier: 93:63:4B:46:81:86:B3:FD:7F:B4:F2:C1:A5:5B:90:DA:D4:1A:3D:7F
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019B7834DEF200209454F6D8FBFBFF2AD319
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa
Signing time: Thu 01 Jan 2026 06:18:09 +0000
ROA not before: Thu 01 Jan 2026 06:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203375
IP address blocks: 185.136.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:de:f2:00:20:94:54:f6:d8:fb:fb:ff:2a:d3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 1 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93634b468186b3fd7fb4f2c1a55b90dad41a3d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:38:fe:46:f5:55:73:32:97:35:d1:08:54:
95:80:a8:73:bb:6c:5a:45:61:bd:83:d5:39:b7:93:
86:83:c6:72:e9:3c:ad:c1:88:6c:30:45:2a:30:fb:
0b:65:53:cd:06:13:16:0b:85:29:28:26:aa:c8:9c:
f5:f2:a3:15:d9:60:3a:41:18:55:95:3a:f1:42:7c:
d0:36:e0:a4:60:26:e9:37:37:7f:4b:84:d0:f9:1d:
13:96:42:89:24:6f:c3:d6:d9:9b:ad:2d:1f:89:f5:
06:9f:52:f1:b8:14:89:69:4f:c7:48:84:dd:8d:70:
61:a3:8b:9e:b6:a5:04:a8:b2:21:ba:99:39:ad:43:
1f:aa:95:65:eb:e9:d4:62:98:02:03:a1:e6:86:62:
4f:2a:40:75:34:f5:46:0d:ec:12:92:64:d9:a2:91:
50:66:09:ac:f2:9f:4e:ba:bd:6b:46:7b:03:5a:0d:
48:8e:78:86:4e:7f:b1:34:06:36:51:c8:c6:c8:73:
9b:22:a4:c2:ce:d9:40:62:8c:ef:70:0b:98:62:f5:
48:4a:b2:d6:3a:8b:c1:74:d5:ae:e4:c1:6f:54:8a:
85:32:92:9c:1a:94:56:b3:8b:7c:94:98:f9:da:57:
41:9f:2b:66:7f:a1:df:c2:6e:24:d4:0e:84:b8:f0:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:63:4B:46:81:86:B3:FD:7F:B4:F2:C1:A5:5B:90:DA:D4:1A:3D:7F
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.224.0/23
Signature Algorithm: sha256WithRSAEncryption
98:0d:77:6c:44:e0:47:1a:dd:c3:58:4c:11:30:e4:77:fb:e4:
e9:8e:23:ad:26:a8:1d:22:a0:84:59:f6:9b:66:50:3a:41:dc:
3b:84:eb:f3:21:8e:e7:0b:3a:1c:17:70:44:f2:4d:65:f5:82:
f7:0c:f6:bc:33:de:87:ee:3e:76:aa:77:51:6f:3a:2a:84:93:
65:f6:66:40:8b:b5:4b:07:f0:43:6e:80:11:d0:f9:d4:67:37:
7f:eb:7b:33:03:e8:0a:9d:0f:36:3b:02:44:86:b7:00:7b:1e:
7f:99:5c:e9:18:44:8e:07:ea:c7:2f:f7:ec:55:f0:fe:26:ef:
7f:39:bb:3e:9f:13:cc:b9:02:6b:9f:5a:a0:25:f3:4b:2b:39:
dd:29:47:62:cd:59:f2:30:51:f3:6b:2f:22:8b:44:47:04:7f:
6a:74:bc:de:a5:c7:55:7d:02:3f:84:1d:d4:cf:80:5d:fe:bb:
4c:19:60:02:d2:4e:b7:00:85:ec:64:6f:9f:de:8d:f2:01:37:
e0:ba:ff:68:3a:e9:57:30:d5:29:76:db:4f:f9:d0:92:d0:64:
f7:a8:8b:da:2f:fa:93:41:81:c5:3d:75:46:fe:f4:7a:61:23:
d5:84:0a:e9:7b:02:da:6c:b8:ad:e8:22:30:17:f7:4b:0b:f6:
46:eb:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:41 2026 by rpki-client