This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa
File: UB6s7CmMOtswxn98ROn4ig7vXNc.roa (raw, json)
Hash identifier: /qiCV/72s937dMEO7sUwjJZUa0JO5HvdoJ9oTmFqF+s=
Subject key identifier: 50:1E:AC:EC:29:8C:3A:DB:30:C6:7F:7C:44:E9:F8:8A:0E:EF:5C:D7
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019B7EA70BC953EC5DD39B52262F91A15914
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa
Signing time: Fri 02 Jan 2026 12:20:35 +0000
ROA not before: Fri 02 Jan 2026 12:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41872
IP address blocks: 185.244.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:0b:c9:53:ec:5d:d3:9b:52:26:2f:91:a1:59:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jan 2 12:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=501eacec298c3adb30c67f7c44e9f88a0eef5cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:fb:51:30:e8:4a:14:d9:7e:1f:f2:3f:96:
a3:5e:7e:9e:61:7f:47:1d:fb:38:8c:45:81:b5:2e:
a2:ff:32:52:40:bf:af:c8:8d:13:1c:f0:0e:69:1f:
65:95:be:3a:16:09:33:13:11:83:99:2a:9f:1e:9d:
ee:59:7c:26:8c:04:ca:b5:66:95:cd:1f:c4:12:5d:
08:fc:11:b3:db:91:3e:29:df:9b:d0:da:bb:ba:04:
60:78:e4:42:e1:2d:7d:89:fc:76:60:13:ee:01:80:
1f:22:d8:6c:01:e9:a7:62:48:1e:03:72:07:ab:2b:
b7:aa:9c:d5:db:b4:42:ba:aa:4f:b2:0f:61:18:d7:
56:77:a9:65:cd:dd:d2:23:af:44:5a:86:5f:e0:12:
06:e1:8f:78:72:d8:5b:80:a9:85:1e:3e:3f:96:4b:
d2:7e:44:c9:8a:18:b6:d6:a6:b4:e2:2b:c2:53:ce:
12:e3:19:db:ef:fa:56:44:0a:d2:fd:a7:96:88:f9:
e5:95:fd:cb:fe:03:8c:bb:18:52:cd:c9:cc:12:0c:
88:af:66:3b:be:64:b9:ad:64:40:ad:69:ef:85:49:
1f:ab:b4:bd:ca:24:b0:00:20:d1:52:bd:ad:a1:72:
27:76:af:42:78:38:c5:0c:86:23:52:e0:f3:c0:5d:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:AC:EC:29:8C:3A:DB:30:C6:7F:7C:44:E9:F8:8A:0E:EF:5C:D7
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/UB6s7CmMOtswxn98ROn4ig7vXNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:88:f7:ec:1e:74:66:e8:75:49:ae:4f:74:e5:15:ff:11:86:
1e:b2:05:53:62:b2:d0:b8:5a:e2:c3:fe:5e:53:a5:de:37:87:
12:4e:13:01:d1:db:fd:26:cc:5b:77:61:90:d0:9f:71:49:44:
c6:78:32:7c:82:3b:95:ec:0f:57:7c:76:76:88:87:86:3b:33:
62:7e:82:d6:e2:f6:32:e7:ae:55:da:4f:fa:07:85:7c:68:64:
88:b9:b3:3e:78:54:de:2c:49:bf:41:36:d8:46:29:3e:c5:c5:
40:fb:1f:06:e8:25:79:89:bd:f2:af:ca:96:da:e2:e3:e6:43:
9a:6a:34:7e:3e:02:4c:d8:59:39:6c:37:0e:0a:70:45:f5:da:
09:64:3f:42:51:09:4a:c2:07:62:cd:bf:b6:fe:5f:4b:05:d6:
8a:ba:7f:17:2c:1f:e3:24:5b:15:18:c4:b4:6f:f0:4a:e1:91:
a2:ea:69:b9:fb:3f:4f:a4:9c:1b:c3:ea:62:bb:14:d6:29:7d:
e8:ee:5f:8f:69:5f:f6:2a:60:0d:4c:97:1e:3f:45:76:ae:0b:
c2:0b:31:c5:2d:1c:ed:72:12:71:97:3a:d2:fb:a3:67:9f:49:
1b:81:29:b5:81:05:ec:55:2d:cf:c6:d0:21:1e:f1:55:e8:4a:
d9:fa:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:15 2026 by rpki-client