This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa
File: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (raw, json)
Hash identifier: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=
Subject key identifier: 7B:2D:CC:AF:C2:73:6C:55:AA:A6:2F:F3:A4:41:E9:65:F7:0F:55:32
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 019B7E37DF538D600E20CD1640BEE5F1A9C9
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa
Signing time: Fri 02 Jan 2026 10:19:09 +0000
ROA not before: Fri 02 Jan 2026 10:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.223.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 21:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:df:53:8d:60:0e:20:cd:16:40:be:e5:f1:a9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Jan 2 10:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b2dccafc2736c55aaa62ff3a441e965f70f5532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:23:39:36:68:9d:33:b6:c1:87:96:e9:18:
e7:e2:d3:e2:ad:f0:43:39:3f:9f:a0:00:fa:5c:78:
24:15:78:f9:8f:5d:66:24:0e:01:0a:7a:55:f2:25:
62:60:27:fa:c0:d2:c5:e9:16:7d:aa:16:ff:9b:89:
b0:ed:5c:0f:ad:41:ad:cc:d2:7d:1b:be:fa:32:e0:
10:a2:48:7d:5f:08:61:1a:f3:c7:86:3f:b2:02:18:
f0:d7:31:da:a8:6f:d8:3c:46:0e:1d:68:85:30:f3:
01:6a:31:46:0b:45:70:84:49:7a:cf:d0:51:e0:56:
65:ae:35:33:2e:a2:ec:75:47:06:75:c6:a3:06:ba:
db:33:0c:eb:78:c8:3e:df:4d:21:69:57:67:c7:90:
43:51:16:bd:d0:25:e8:dc:2f:ed:52:c2:23:af:65:
c4:11:3c:f6:ad:e4:ce:b6:77:bd:2a:29:a5:f3:97:
82:12:2e:53:8c:35:58:4d:09:25:30:9f:6f:18:fa:
2a:e2:69:89:47:12:fe:f1:0e:de:06:5d:27:09:4a:
99:56:08:d6:8a:96:bd:eb:b1:30:08:e8:f9:31:e8:
74:22:3e:4c:d8:7d:ce:b8:54:dc:13:75:7a:6c:0b:
77:df:5f:07:a5:36:b8:86:e8:53:69:33:45:d9:1e:
78:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:CC:AF:C2:73:6C:55:AA:A6:2F:F3:A4:41:E9:65:F7:0F:55:32
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c2:13:d1:8c:cb:ed:b8:b7:00:d4:83:5b:ea:a6:10:fb:2b:
67:23:e6:62:97:e4:58:de:e5:55:40:2e:aa:b0:74:da:5f:50:
69:88:31:3b:6a:67:38:14:b3:65:1a:bb:07:1d:d2:cd:75:f2:
f1:99:9b:2b:7f:27:0b:d0:f3:e2:a9:94:07:6d:94:0d:7b:39:
29:9f:a7:7d:8e:81:cd:55:87:e1:3f:aa:cf:57:34:2f:81:35:
f9:84:91:f2:1a:1b:7a:83:9e:c1:85:b0:03:10:1d:0a:1d:cf:
81:e2:56:32:78:33:06:5e:9c:70:a0:cd:27:3b:69:bf:3c:2f:
ad:d8:c8:00:c6:17:94:57:48:22:eb:8e:62:8e:f9:97:3b:95:
f7:8b:93:31:b7:c7:0c:59:44:85:bb:cc:b6:15:13:82:ef:e4:
54:86:31:de:7e:5e:8d:78:29:f5:7d:36:01:94:91:cb:f6:13:
17:80:95:4a:f7:69:c4:43:17:26:a7:17:6a:96:59:5d:cd:bd:
87:ae:ce:52:04:c4:5e:1d:b1:6b:7b:6c:8a:85:83:29:c6:df:
71:dd:39:2e:be:72:5e:83:f8:ca:15:52:2d:88:32:1c:0e:a0:
f3:73:e9:02:7b:a2:0d:ff:04:82:fc:a7:30:15:62:52:08:4a:
e9:68:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:22:16 2026 by rpki-client