This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa
File: 01aDFcgwpP0gaeNsCEBXvu9EqVo.roa (raw, json)
Hash identifier: X2qj0FduSAsiEFG0pH2Wl6RB6wezxtiHDycSdWfuHyg=
Subject key identifier: D3:56:83:15:C8:30:A4:FD:20:69:E3:6C:08:40:57:BE:EF:44:A9:5A
Certificate issuer: /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial: 019B7E37D77BA6761369D5419B0E53774709
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa
Signing time: Fri 02 Jan 2026 10:19:07 +0000
ROA not before: Fri 02 Jan 2026 10:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38955
IP address blocks: 81.19.144.0/20 maxlen: 27
178.23.80.0/21 maxlen: 23
185.16.188.0/22 maxlen: 24
185.16.188.0/24 maxlen: 32
185.16.190.0/24 maxlen: 24
185.115.184.0/23 maxlen: 23
185.115.186.0/23 maxlen: 23
185.164.4.0/23 maxlen: 23
185.164.6.0/23 maxlen: 23
185.173.140.0/22 maxlen: 24
2a00:1a68::/32 maxlen: 34
2a0a:7c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:d7:7b:a6:76:13:69:d5:41:9b:0e:53:77:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Validity
Not Before: Jan 2 10:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3568315c830a4fd2069e36c084057beef44a95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:7c:bd:30:70:c1:13:6f:23:06:aa:bd:5b:
b9:56:24:41:38:91:19:02:e4:7a:04:f8:ac:22:9c:
82:78:e4:ef:43:80:64:61:f7:a2:6f:4c:c6:86:de:
3d:d0:8b:bf:36:9e:d4:44:43:76:3b:4f:6c:89:0a:
0a:75:81:4e:2f:ef:51:b3:38:23:52:ff:59:cc:e9:
f2:16:37:df:55:d8:f7:24:8a:5e:d1:f7:29:cb:1d:
7b:63:62:7e:de:b3:db:25:38:c3:a7:ac:d5:6c:dd:
8f:e9:bf:3b:c9:ea:6d:c7:96:31:70:82:d5:53:7f:
0f:ac:da:0f:a0:f4:fc:5e:e4:94:7a:c9:c9:b4:6c:
9f:2b:d0:26:a6:d0:55:c0:8b:b1:ba:77:c5:dd:44:
50:16:dd:6a:e6:29:86:7f:03:a0:a4:1d:53:0f:12:
75:10:91:33:65:4f:58:51:53:12:1a:60:60:9d:98:
34:79:a4:bb:b4:c0:c2:8f:31:53:63:7a:fe:3f:55:
05:3d:8f:ae:ec:76:b7:f6:58:90:90:fe:d3:8f:0b:
d9:63:ba:b1:4f:2c:40:a0:cb:3d:dd:ec:90:67:8c:
42:14:ac:57:cd:e1:f0:59:ae:af:da:a1:b6:a4:09:
3d:11:bb:cc:66:a9:22:29:ca:65:f7:6c:96:28:69:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:83:15:C8:30:A4:FD:20:69:E3:6C:08:40:57:BE:EF:44:A9:5A
X509v3 Authority Key Identifier:
keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.144.0/20
178.23.80.0/21
185.16.188.0/22
185.115.184.0/22
185.164.4.0/22
185.173.140.0/22
IPv6:
2a00:1a68::/32
2a0a:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
54:01:dd:65:c3:e2:f6:ee:98:f5:1c:43:ab:13:b4:b3:96:5b:
58:bd:42:21:65:3f:58:5d:72:ca:e6:a0:b8:a2:9d:56:34:28:
08:c3:05:dc:9e:6a:af:d7:36:81:b7:04:73:e4:8d:11:63:e9:
7e:6e:9c:9f:db:dd:b0:a6:b4:6b:c0:e0:67:81:17:2b:b0:4d:
41:f7:c1:3f:ec:28:ca:8b:18:f5:15:58:f4:dd:54:71:5d:42:
a5:ca:4f:0a:14:f7:ac:03:39:58:b4:df:99:50:79:27:d6:a6:
97:ce:6d:95:fe:b2:71:12:53:3a:14:d7:9c:31:9b:12:c7:05:
b0:a7:a5:91:bc:61:ad:f1:f2:a2:17:5e:30:d8:bf:78:3f:d3:
33:c8:d9:23:0a:f0:3e:33:0e:63:57:b7:fc:57:50:53:46:4a:
fc:0f:17:ee:02:29:6f:6c:2c:76:80:b3:81:f6:10:d9:7d:ee:
21:d1:3b:76:7c:c2:39:5d:b4:62:91:02:26:9f:a7:e0:41:d1:
19:0e:ed:71:57:d2:73:52:99:b0:b4:a5:7e:80:a1:22:c0:77:
90:3e:ae:93:47:5f:9d:c0:ad:fd:c5:e3:74:79:3f:98:35:21:
c8:b4:47:0a:1d:6a:be:7b:c6:9f:6f:07:79:c5:1b:e1:93:3c:
31:f3:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:25 2026 by rpki-client