This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa
File: _rvy-296w0a-j-Nw33bBfHPQ78Q.roa (raw, json)
Hash identifier: Bg8gLL5anRmVsyv6lsSlg5Xf04g+qeE2nvlaXoMSo6g=
Subject key identifier: FE:BB:F2:FB:6F:7A:C3:46:BE:8F:E3:70:DF:76:C1:7C:73:D0:EF:C4
Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial: 019B7834B0BD12F0CE7BD687A52F1F554019
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa
Signing time: Thu 01 Jan 2026 06:17:57 +0000
ROA not before: Thu 01 Jan 2026 06:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216293
IP address blocks: 185.208.202.0/24 maxlen: 24
212.46.60.0/24 maxlen: 24
2a13:d9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:b0:bd:12:f0:ce:7b:d6:87:a5:2f:1f:55:40:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Validity
Not Before: Jan 1 06:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=febbf2fb6f7ac346be8fe370df76c17c73d0efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:f6:04:ad:1b:95:d1:fa:3f:c7:ec:67:56:
c5:16:3e:d8:88:a9:f9:eb:66:f4:ca:5b:b5:20:98:
c1:74:e2:e5:df:a6:f4:aa:8c:70:26:6c:e2:cb:0c:
b6:00:b2:72:16:fa:40:d2:87:ac:f9:e1:8b:65:a7:
59:08:e8:9a:e2:ef:7e:b3:43:3f:95:21:6e:8c:87:
73:bd:5c:3f:8c:ea:11:1d:b7:f0:1c:4d:81:dd:25:
0e:d1:a7:55:40:3c:b1:40:25:a0:fe:b8:4d:86:9d:
84:0a:e5:88:1a:08:da:69:d9:8f:5c:7d:6d:5b:b2:
9f:1d:d7:67:6b:38:23:f9:32:23:dd:93:b3:e6:a8:
1b:05:73:95:8b:d5:8b:0b:61:37:d9:02:c2:67:3f:
ca:a8:7b:41:2c:47:b5:f5:55:3b:5c:ff:b3:92:0a:
c9:d0:0e:b0:94:b9:2b:b8:49:62:c1:d6:91:f6:56:
cb:e3:7c:ff:f4:03:57:54:04:ea:56:85:09:ee:6e:
22:6b:51:e9:f5:bc:07:b6:f7:2e:40:a3:c9:fc:04:
af:47:f1:ad:f7:f2:01:02:de:0b:47:bb:16:27:29:
de:28:dc:0a:90:02:ea:64:86:24:17:4d:3d:7b:20:
30:1d:90:f4:84:a0:45:f2:c8:a4:c9:94:f7:1b:22:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:F2:FB:6F:7A:C3:46:BE:8F:E3:70:DF:76:C1:7C:73:D0:EF:C4
X509v3 Authority Key Identifier:
keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.202.0/24
212.46.60.0/24
IPv6:
2a13:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:6a:f3:49:86:29:9f:ac:39:fe:f7:e5:d5:e5:ea:b1:26:e1:
6e:9c:fa:d9:14:1f:05:d7:a3:44:3d:7f:0e:2f:70:c4:09:23:
3c:e8:3e:e5:e3:4d:f0:99:de:eb:0f:45:d0:fe:b4:a4:16:da:
06:69:3a:b5:94:83:d4:7c:69:08:08:e5:5d:4d:92:9b:3a:57:
f5:91:95:5a:17:7f:b6:f4:ce:fa:81:73:bb:b6:40:f3:28:63:
7e:48:e5:20:90:9e:7f:37:10:61:eb:4c:4b:0a:38:11:e6:79:
2a:7f:59:fb:f6:d8:db:88:48:05:08:ac:2f:0d:a0:1b:81:67:
39:bd:84:41:6e:92:20:59:c0:04:15:c6:d0:eb:e4:eb:43:1e:
66:85:ea:f5:c9:92:63:a4:61:95:f7:6f:03:71:8a:4b:32:6f:
d5:2a:3f:7b:fb:d0:2f:0d:ad:75:26:e4:a2:d8:46:53:39:08:
26:27:90:a0:dc:2d:23:1d:df:d5:c7:49:bc:ae:9e:ab:0e:27:
4e:3f:4d:ef:2f:e2:cb:0f:cb:11:df:b2:ed:98:f2:16:d6:84:
2b:f0:d9:e0:43:25:a8:24:8b:08:93:cc:18:88:8d:65:26:a3:
7c:f2:5e:d1:be:3d:66:29:1d:ec:d3:ba:05:17:1e:a0:86:dd:
a2:e0:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:28 2026 by rpki-client