This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa
File: CpRBVACibwm3_2GxedTo5wyXmWo.roa (raw, json)
Hash identifier: vt5oSHfF0roihuDiaaK88SXEJWdGIsN3pKbNNcaMN8A=
Subject key identifier: 0A:94:41:54:00:A2:6F:09:B7:FF:61:B1:79:D4:E8:E7:0C:97:99:6A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019B797EC940C99878E5C1FEA5B63C8DE051
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa
Signing time: Thu 01 Jan 2026 12:18:30 +0000
ROA not before: Thu 01 Jan 2026 12:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 178.253.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c9:40:c9:98:78:e5:c1:fe:a5:b6:3c:8d:e0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 12:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a94415400a26f09b7ff61b179d4e8e70c97996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:a7:ef:80:d0:16:9e:c9:0f:85:18:08:a8:
e2:04:09:8e:53:c3:b9:e7:2b:0b:4b:4b:68:91:7b:
fe:5a:f3:03:60:06:a4:a0:17:85:9d:41:35:34:bc:
ed:d0:86:e2:89:11:e2:f3:59:a7:e6:59:80:a1:c5:
96:be:0c:71:24:84:1a:1b:75:81:71:c7:64:79:93:
e1:8c:e4:70:76:f0:7b:8e:b6:35:7b:3e:1d:3b:8a:
5b:d5:f4:31:94:17:cc:c3:37:21:fc:56:89:ae:d6:
b1:20:f5:ed:e9:5d:59:43:ee:a5:58:14:9a:59:c0:
16:0a:4d:61:c4:59:94:0b:87:cd:ed:23:87:0c:89:
15:0f:8d:ed:fe:d3:91:6e:58:34:a4:b1:27:e1:dd:
35:45:5d:e9:60:d1:95:7a:7d:27:c4:90:33:48:cb:
a8:1e:de:11:0b:89:83:08:10:d6:6f:74:50:8d:27:
78:e0:38:24:22:e5:a9:d0:bf:fe:ec:e7:fe:1c:dd:
d1:9e:ff:d3:14:53:88:82:03:a4:28:bf:35:44:e1:
dc:86:db:9e:ce:ed:6a:41:4c:ca:4e:85:78:f0:df:
b2:0b:60:0f:ed:9c:0f:bf:3f:48:c5:3c:31:cf:24:
c1:8e:39:e9:9e:44:7c:39:db:5a:c3:85:a0:a6:90:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:41:54:00:A2:6F:09:B7:FF:61:B1:79:D4:E8:E7:0C:97:99:6A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:46:26:4d:7d:27:d4:c1:86:e3:16:fe:40:5e:9f:95:e7:4c:
eb:43:ed:21:15:2e:36:7f:71:2a:49:83:e6:7f:6c:ad:6f:2b:
c5:4d:8e:99:8a:c9:6b:a0:94:08:c1:d8:dd:a9:4c:a1:6c:1e:
e1:f2:82:60:f8:19:c1:38:67:c1:31:46:07:f2:65:56:29:49:
f8:90:cc:40:04:79:3e:83:14:ec:d0:41:f8:37:92:11:16:de:
91:97:ba:1e:ac:7b:3d:cd:76:c9:ac:8b:a4:71:bb:54:a6:c1:
77:2d:28:b1:81:bd:65:0f:df:58:c9:d4:5f:64:f7:83:34:9e:
f9:84:ec:37:62:34:25:e1:98:61:99:af:28:5f:8b:7b:fa:90:
af:f7:3e:9a:a0:87:be:04:fb:6d:d1:b6:50:46:9f:86:0c:08:
b3:ae:dc:7d:33:a4:63:ff:92:c6:df:7a:66:39:93:a4:4a:95:
5c:4d:86:2d:8d:c1:82:06:88:f9:03:0b:6f:70:3a:d3:34:52:
28:13:00:72:94:ec:9d:8a:6d:8d:c6:70:eb:fc:2a:8b:78:46:
a6:e7:6b:f3:76:4c:fa:76:d9:33:96:51:20:f0:54:0f:f3:c4:
7c:91:04:79:37:7a:c9:a4:7e:d4:69:9c:8a:4d:46:4d:07:22:
43:ff:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:53:25 2026 by rpki-client