This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/U0T21bHsT2j1MueUQfzfVxTuFZQ.roa
File: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (raw, json)
Hash identifier: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=
Subject key identifier: 53:44:F6:D5:B1:EC:4F:68:F5:32:E7:94:41:FC:DF:57:14:EE:15:94
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 019B7D5C9A822F05F2F4E3943619155E82AF
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/U0T21bHsT2j1MueUQfzfVxTuFZQ.roa
Signing time: Fri 02 Jan 2026 06:19:39 +0000
ROA not before: Fri 02 Jan 2026 06:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 185.148.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:9a:82:2f:05:f2:f4:e3:94:36:19:15:5e:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 06:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5344f6d5b1ec4f68f532e79441fcdf5714ee1594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:5b:92:65:62:68:29:5d:ff:a2:25:10:ab:
fa:67:60:1e:17:04:a1:51:bf:3d:23:5a:93:90:de:
9f:1b:c3:75:4a:05:3e:1c:79:72:a2:f6:b5:4c:97:
0d:80:9b:4d:cf:05:0d:69:67:00:00:ab:04:92:66:
cd:94:f1:24:25:d8:af:a0:be:ca:a1:80:bd:3f:11:
fb:55:1a:5f:9c:e4:bb:74:10:88:50:18:9a:77:ce:
18:9d:a8:6f:46:e1:35:87:82:47:32:50:dc:6c:3d:
e5:58:d7:b9:8c:30:28:b6:f3:14:bf:e9:e1:ff:61:
9a:b1:1f:b4:3d:f0:93:69:e4:5c:87:e0:da:e0:ef:
a3:35:53:aa:dc:59:2e:6d:ec:3b:c5:48:ef:e4:e8:
e8:af:ec:e9:7c:cf:19:fd:cc:19:c5:db:c8:21:72:
e6:4d:6b:03:3f:92:03:c8:c5:80:1f:74:da:90:a4:
d2:d3:65:8e:8d:59:c7:17:97:66:d4:62:e7:7d:60:
b2:e2:ef:fd:6b:2e:15:00:d8:62:03:36:57:55:c4:
f2:b3:af:ff:b3:89:72:e2:af:b0:9b:37:68:c2:28:
c9:ec:e7:5a:08:3a:b9:66:df:49:2b:78:8f:26:c2:
33:b1:7b:fc:11:8c:3c:b5:34:96:e5:20:75:7f:71:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:F6:D5:B1:EC:4F:68:F5:32:E7:94:41:FC:DF:57:14:EE:15:94
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/U0T21bHsT2j1MueUQfzfVxTuFZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.70.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5c:8f:72:dd:a6:7e:de:1e:82:5a:59:fd:2a:7e:77:8c:56:
fa:ee:ff:f5:d6:87:89:1d:21:29:3b:86:62:31:ca:b7:c7:13:
68:c4:4d:d5:2d:0e:7e:57:cd:ae:9b:58:3f:93:0c:5c:b3:4b:
c2:6f:54:c1:a6:62:d0:5a:7e:b7:76:ec:0e:ca:20:e1:ad:70:
58:eb:4e:ce:a0:4b:0d:35:52:52:53:b7:25:d9:4e:77:80:39:
d6:80:79:f7:c0:30:84:95:90:af:01:d7:a9:70:fe:ee:29:80:
8c:bf:69:1f:72:01:a5:c2:44:58:a8:31:71:53:9a:41:48:10:
e5:ed:7e:6d:e1:84:c9:ea:5e:0e:d8:9f:08:05:7b:ae:3e:42:
30:b7:13:2e:d1:2b:b1:79:ff:dc:f9:bc:13:e1:27:05:59:a9:
22:6e:87:a4:fb:93:c1:5a:1e:61:e3:c4:c1:25:da:d3:97:be:
18:74:0a:48:15:9a:b0:4f:6b:62:e5:92:a4:2e:d6:5b:fb:5c:
7e:c5:a1:af:b6:ff:e3:d1:8c:de:fa:52:16:06:16:94:53:85:
7e:10:58:ae:01:33:11:6e:4f:9c:03:f2:87:32:aa:e1:10:7e:
29:49:bc:a0:cf:9e:7d:fc:aa:02:21:16:44:0c:80:d8:8e:7a:
47:94:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:29:55 2026 by rpki-client