This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/CbbyPFwOxRt_djihEbyH4dswgkU.roa
File: CbbyPFwOxRt_djihEbyH4dswgkU.roa (raw, json)
Hash identifier: zzZiYXhJH80jdIaDpqCJXODjR57XtJuUcOZwLqkue/Y=
Subject key identifier: 09:B6:F2:3C:5C:0E:C5:1B:7F:76:38:A1:11:BC:87:E1:DB:30:82:45
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019B7F159B86DA06FFEEFF4317AEEF3DB535
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/CbbyPFwOxRt_djihEbyH4dswgkU.roa
Signing time: Fri 02 Jan 2026 14:21:20 +0000
ROA not before: Fri 02 Jan 2026 14:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204499
IP address blocks: 185.251.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:9b:86:da:06:ff:ee:ff:43:17:ae:ef:3d:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Jan 2 14:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09b6f23c5c0ec51b7f7638a111bc87e1db308245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:76:18:c0:b9:b1:b4:72:bc:20:12:20:65:
e2:02:7f:13:f0:c8:b8:6a:55:bf:d3:02:81:db:a9:
21:e1:6e:57:65:58:bc:be:59:5d:b7:8d:de:00:69:
8b:d0:31:15:3a:ce:a7:4a:85:66:08:3f:5c:5a:c8:
ff:41:7e:cd:4d:a2:4e:e4:ce:93:f3:f4:a3:7e:44:
83:9e:cb:f8:48:f8:af:8f:87:44:79:af:6b:fe:a8:
9b:08:9b:12:48:69:f8:c2:19:d6:e5:ba:4f:bc:c0:
58:59:bd:fc:ba:56:49:00:8a:64:ba:65:ed:f8:a4:
96:9a:3b:b4:2c:13:2a:81:1a:8a:88:d1:c3:bc:b7:
0a:1c:16:83:ee:95:2b:48:d9:d2:6b:4f:35:a7:27:
80:d4:b5:ed:20:9d:39:57:e1:f0:bf:42:da:bc:f9:
1e:76:7d:bf:8c:52:36:61:07:76:52:29:94:8b:d0:
7e:3a:fc:f4:e5:84:10:87:57:e2:06:de:7e:14:e3:
d5:5b:11:60:f7:5f:15:7b:6c:76:0b:cd:ad:ea:a4:
75:ae:ac:b7:2a:fd:b4:22:be:b0:6f:31:dd:5f:bb:
a5:2e:d2:14:7f:8c:9a:8a:b0:d4:3f:98:39:c1:1c:
75:69:e5:31:00:fb:75:e0:2d:96:7c:32:c7:60:0b:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B6:F2:3C:5C:0E:C5:1B:7F:76:38:A1:11:BC:87:E1:DB:30:82:45
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/CbbyPFwOxRt_djihEbyH4dswgkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1e:b5:06:a2:70:2f:da:22:97:f9:ab:78:25:e7:6d:97:44:
09:7a:01:bb:cf:4e:26:8e:42:2a:4e:a7:c8:ac:6e:a0:fd:74:
5e:9d:e4:83:bb:10:e5:e0:52:f6:4f:e7:9d:da:01:c3:49:cd:
76:64:ef:6c:74:b3:97:bb:cc:6d:6c:91:ef:23:12:54:c7:62:
e1:da:48:d1:08:da:e8:b2:6f:18:e9:e7:fc:d4:25:8a:da:c4:
0f:7a:56:17:e8:5f:4f:92:17:2b:cd:1a:6c:3a:86:91:e2:27:
37:d2:37:18:d9:02:d6:97:27:80:87:a4:e5:64:70:26:4c:fd:
99:c2:ed:df:d3:48:82:0d:0d:78:16:eb:a7:b1:17:b3:00:dd:
36:c4:59:d0:08:bc:49:74:55:71:31:06:64:12:1a:96:be:ac:
01:34:29:82:79:fe:19:b1:6c:4c:dd:8d:87:78:40:08:75:b7:
05:70:3e:5e:bd:19:1b:3f:96:01:8f:52:9d:33:db:f8:9f:e3:
30:06:ad:38:ff:99:9b:a2:11:a4:fd:3e:2c:9c:22:ac:58:bf:
72:a9:09:b0:32:ad:13:79:54:af:94:d5:33:ad:30:02:64:26:
a1:82:0c:95:91:63:3c:11:e3:e4:12:4f:55:b5:bc:56:a0:e9:
ba:a8:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:19 2026 by rpki-client