This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa
File: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (raw, json)
Hash identifier: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=
Subject key identifier: 06:53:96:29:CE:63:F3:4E:39:2A:0A:43:F1:4D:45:F4:8A:B9:12:CD
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019B76EAC9C16565693892A8207E1A32B4CC
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa
Signing time: Thu 01 Jan 2026 00:17:37 +0000
ROA not before: Thu 01 Jan 2026 00:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206922
IP address blocks: 185.171.246.0/24 maxlen: 24
185.171.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:c9:c1:65:65:69:38:92:a8:20:7e:1a:32:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06539629ce63f34e392a0a43f14d45f48ab912cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:af:69:86:df:fd:2f:cf:1e:47:4e:25:28:
d5:ee:c2:cc:82:1b:1d:f8:85:70:c2:28:f7:31:fd:
bf:40:32:f3:22:6c:3d:60:2a:94:e5:5f:c2:6b:8e:
7b:6d:9e:bf:b2:5b:76:fa:2b:6d:15:ac:ec:fb:67:
75:12:3c:16:2a:b4:c3:14:f9:c7:71:0c:85:40:f7:
a9:19:f3:4f:88:aa:d8:4d:d6:f6:26:0d:b7:ce:03:
96:60:c7:be:38:2f:18:d6:db:4f:d6:62:d8:5a:c1:
50:b4:90:92:58:6e:32:48:3b:a9:13:09:6c:6c:ac:
ae:cd:d8:d2:04:fd:70:c8:b7:f7:1a:19:d1:7c:ef:
3c:b4:c5:e0:d7:25:f5:7d:4f:16:79:a8:1a:3c:88:
51:ab:68:93:49:01:56:91:8a:50:f9:26:13:c9:9b:
96:83:3b:bf:53:66:77:f2:55:f5:0a:89:3d:99:e3:
55:e6:34:92:d9:3e:f4:9e:1b:da:e8:4d:e2:44:c7:
e1:66:c8:10:c6:d7:92:6e:fa:ee:bf:4e:aa:16:d0:
78:7e:92:68:ee:88:30:6f:0f:00:4c:a3:10:d3:d6:
1f:e9:b8:36:a8:93:2a:a5:4a:11:63:1c:28:1a:67:
eb:60:b8:44:54:92:b7:69:72:e0:e8:7d:30:57:2b:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:96:29:CE:63:F3:4E:39:2A:0A:43:F1:4D:45:F4:8A:B9:12:CD
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/BlOWKc5j8045KgpD8U1F9Iq5Es0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.246.0/23
Signature Algorithm: sha256WithRSAEncryption
00:67:89:b0:c5:10:50:01:3a:70:0a:77:6c:f2:2b:c9:90:7e:
02:78:2e:bc:8e:75:ac:09:6d:a6:79:d0:17:88:89:04:3e:b4:
28:5d:87:a0:83:91:53:a4:87:d4:ac:c0:24:be:c5:d2:dc:e3:
95:a1:39:6c:20:28:8f:85:cf:06:05:20:05:b3:70:b9:00:a3:
be:35:33:d4:44:f1:58:a9:f9:b3:5b:2e:54:5a:ac:61:65:8a:
1f:9f:e3:e0:3b:76:cc:93:a3:36:1f:54:49:15:4e:d2:ff:f9:
02:e0:84:69:ef:cd:5c:35:00:8b:13:4e:31:de:51:97:ce:9c:
ae:e7:63:cb:83:28:b9:df:2c:c7:06:8b:b8:cc:8d:b7:44:06:
50:67:56:3e:66:49:34:f5:c9:68:50:1e:00:e7:9c:9f:e5:f2:
9b:75:b8:09:6e:b5:a3:ce:37:88:7f:43:6a:07:12:06:9f:06:
f5:d8:28:4e:10:06:76:27:3c:30:cb:af:58:eb:c9:1d:23:af:
1f:08:ce:cd:bf:0c:8c:b8:95:12:15:92:ae:ef:8e:9b:d9:ce:
c7:ef:51:c3:1f:b5:bf:92:ca:1e:b1:37:0b:9d:ba:ff:78:4f:
6c:00:6a:a3:5e:78:c6:a1:7f:d7:2c:25:7a:84:f8:53:3f:14:
a5:0e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:27 2026 by rpki-client