This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa
File: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (raw, json)
Hash identifier: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=
Subject key identifier: D7:76:D2:01:BB:DB:BC:60:D6:50:EE:72:BE:D4:AC:29:79:E5:2B:DE
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019B7B367D48DBCF1CA3DDDE166E1E12337B
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa
Signing time: Thu 01 Jan 2026 20:18:47 +0000
ROA not before: Thu 01 Jan 2026 20:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398464
IP address blocks: 77.247.116.0/22 maxlen: 22
185.217.166.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
2a10:d501::/32 maxlen: 32
2a10:d503::/32 maxlen: 32
2a10:d505::/32 maxlen: 32
2a14:2500::/29 maxlen: 29
2a14:2700::/29 maxlen: 29
2a14:2b00::/29 maxlen: 29
2a14:2d00::/29 maxlen: 29
2a14:2f00::/29 maxlen: 29
2a14:3300::/29 maxlen: 29
2a14:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:7d:48:db:cf:1c:a3:dd:de:16:6e:1e:12:33:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jan 1 20:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d776d201bbdbbc60d650ee72bed4ac2979e52bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:bd:7b:4e:ea:04:2e:b0:3d:ae:e2:6f:da:
0d:3d:9f:e3:2a:e7:74:c9:22:59:61:63:f2:7d:a3:
02:e1:87:cc:3b:fc:3d:69:a1:49:09:5f:ea:57:6c:
d5:fe:55:20:d7:1d:22:c6:ce:2a:80:76:2f:8a:db:
0e:bc:fa:5d:ef:27:76:c5:76:59:6d:0b:ff:cf:2b:
87:99:d8:c9:c2:4f:80:88:d2:90:01:8e:62:da:f3:
5e:a7:bd:7d:72:f9:4c:93:da:a6:ce:54:63:36:d0:
23:42:84:af:bb:0b:1e:81:be:cf:92:63:f0:ad:78:
ad:84:6c:c0:96:0f:4a:08:89:f8:82:ea:ec:cd:ba:
40:10:e5:6c:bc:ec:68:47:ab:d5:72:9f:e3:b5:76:
81:3a:16:88:99:c8:9d:53:db:d5:0e:95:93:32:20:
56:59:ef:5f:5d:60:73:e0:c3:d7:e4:b9:45:dd:63:
bf:20:43:41:0d:fa:c6:a4:3e:0d:cb:10:96:93:d5:
52:5e:a9:83:d9:51:6f:9d:46:cb:91:44:05:9d:10:
ab:16:41:23:e1:11:f3:79:07:e2:21:56:62:47:e3:
db:cc:46:94:33:16:7d:63:ab:b3:29:e1:de:f7:2a:
c7:52:9a:60:67:99:6c:c0:c6:5b:3a:23:72:9f:9b:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:D2:01:BB:DB:BC:60:D6:50:EE:72:BE:D4:AC:29:79:E5:2B:DE
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/13bSAbvbvGDWUO5yvtSsKXnlK94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.116.0/22
185.217.166.0/24
195.64.122.0/24
IPv6:
2a10:d501::/32
2a10:d503::/32
2a10:d505::/32
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
07:92:76:c5:e0:7d:35:0a:8f:23:09:2e:1e:0f:4c:fe:5f:d8:
5c:ea:74:21:a3:7c:b5:29:8a:da:c8:1b:36:39:da:c9:08:12:
c6:46:e6:95:f7:53:95:02:e2:0e:d1:c7:15:38:df:a5:2b:69:
cd:9f:97:1f:71:df:1b:32:c4:0b:dc:cb:9e:15:68:a8:66:6d:
86:af:dc:86:e2:b6:35:53:f2:75:9e:a5:1c:de:7b:82:a4:a6:
9b:be:09:7c:86:71:eb:ef:4b:8f:4e:1b:02:c3:1d:ca:01:d8:
d9:28:ec:1a:1f:bf:48:5b:39:63:24:c1:5e:1a:9a:ac:2a:12:
14:83:17:5e:35:71:c2:de:92:3d:35:56:a0:5e:9b:ee:14:11:
03:4a:5d:c0:76:d8:dc:f0:ca:57:93:02:35:a7:2a:cd:cf:ab:
d3:de:50:63:86:1e:ad:5c:87:c2:49:1a:7b:89:23:02:12:bb:
57:89:c5:1e:31:bf:49:87:76:ed:76:10:c1:25:67:5a:44:5d:
61:73:bd:5d:7d:7d:d4:88:3e:db:11:06:89:9b:c3:cc:19:26:
94:e2:35:4b:04:65:9e:ea:9a:ec:72:be:e8:91:d6:a0:29:71:
0c:ec:ac:57:7d:da:1e:92:db:68:f9:98:a8:50:ed:d3:92:a0:
6b:4d:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:56 2026 by rpki-client