This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa
File: 0Mk6g443uhaEabXaAD6dU9N3yHw.roa (raw, json)
Hash identifier: fRaGRjNpQYMekAmpIw8L9DTZDmjanRkZfHvE1ApZdc0=
Subject key identifier: D0:C9:3A:83:8E:37:BA:16:84:69:B5:DA:00:3E:9D:53:D3:77:C8:7C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019B9BA3AF5C1CE022B56EB782105E309898
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa
Signing time: Thu 08 Jan 2026 03:25:54 +0000
ROA not before: Thu 08 Jan 2026 03:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209178
IP address blocks: 185.233.19.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9b:a3:af:5c:1c:e0:22:b5:6e:b7:82:10:5e:30:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 8 03:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0c93a838e37ba168469b5da003e9d53d377c87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:f0:3a:91:56:e7:c2:37:5d:41:70:a7:aa:
19:22:68:db:91:be:15:0d:f2:83:34:43:ed:d7:6f:
06:1e:44:be:62:85:75:6b:7b:12:95:d7:38:e4:6b:
ff:8d:80:6c:d6:a2:e2:0c:2b:f1:fc:48:86:bc:36:
5d:1f:e2:78:16:2c:de:51:4f:8d:2f:5d:14:68:6e:
54:d6:69:82:77:4d:e8:4c:9e:c4:a3:c6:ee:c0:19:
49:31:3a:be:33:6b:ca:75:b1:82:7a:92:19:39:dd:
a4:7d:20:1d:91:a4:56:9f:19:18:6d:aa:18:b5:99:
95:b4:42:a8:9b:b3:b5:e0:77:26:04:b3:24:cf:af:
e1:18:0c:f1:bf:8c:61:75:24:93:a9:73:87:3e:67:
9a:73:07:36:22:8e:77:0f:55:81:79:2b:85:f0:55:
d8:7e:9d:dd:ed:5e:0a:d9:63:a7:9c:31:15:85:4c:
a6:ea:5f:70:b2:d4:83:f6:f1:c6:37:7b:e2:22:36:
f5:a5:f1:7f:36:b6:3a:ab:d9:77:52:23:08:3b:b8:
71:f6:55:0f:15:f8:53:15:77:d6:f2:d4:29:60:f1:
72:ec:57:f1:0f:95:65:dd:59:ca:64:08:4b:32:5e:
d1:6a:6e:eb:0c:35:64:0c:96:18:e1:73:ca:47:46:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:3A:83:8E:37:BA:16:84:69:B5:DA:00:3E:9D:53:D3:77:C8:7C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.19.0/24
185.235.164.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:7f:7e:79:4d:c8:59:7c:02:53:54:76:55:f7:0c:e9:8e:18:
b7:1f:05:68:db:ec:44:0b:89:b2:33:f7:b7:88:a8:fd:8d:51:
e8:6b:16:24:8b:c7:a1:2f:5b:f2:5d:2c:ce:24:6d:17:15:4c:
eb:3c:0f:60:d6:a4:a6:03:53:4a:63:3a:65:84:4e:98:be:78:
6b:93:4a:4a:78:de:e3:95:e8:1b:f5:80:d1:f4:b0:03:01:d5:
4e:04:56:be:6e:ab:59:26:77:e9:c9:23:d8:77:7c:30:d0:a4:
e5:37:a6:57:50:26:ae:49:99:05:0a:2d:a5:85:3e:9f:c1:ff:
27:ca:ef:66:7f:f8:f4:1b:44:ee:e4:fd:da:d7:45:0f:5a:97:
0d:89:7d:e4:a7:4b:bd:c4:85:8b:8f:80:b0:05:e0:1d:1d:5d:
01:2c:b0:57:da:27:02:3d:b1:42:86:d1:d3:20:f7:68:61:bb:
13:a0:8e:4d:4d:f9:3a:df:13:3f:55:f3:a6:bf:aa:74:9a:4d:
f4:5d:0b:6a:3f:99:bf:43:48:74:27:32:33:19:fb:99:ab:d9:
d9:b6:20:be:90:4b:03:f1:b2:9f:ca:56:cd:9a:44:bc:4a:62:
e6:22:6c:b4:ba:fd:2e:db:cf:21:fe:17:57:08:44:ea:fa:c8:
41:c8:8f:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZubo69cHOAitW63ghBeMJiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjYwMTA4MDMyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGM5M2E4MzhlMzdiYTE2ODQ2OWI1ZGEwMDNlOWQ1M2QzNzdjODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8fwOpFW58I3XUFwp6oZImjbkb4V
DfKDNEPt128GHkS+YoV1a3sSldc45Gv/jYBs1qLiDCvx/EiGvDZdH+J4FizeUU+N
L10UaG5U1mmCd03oTJ7Eo8buwBlJMTq+M2vKdbGCepIZOd2kfSAdkaRWnxkYbaoY
tZmVtEKom7O14HcmBLMkz6/hGAzxv4xhdSSTqXOHPmeacwc2Io53D1WBeSuF8FXY
fp3d7V4K2WOnnDEVhUym6l9wstSD9vHGN3viIjb1pfF/NrY6q9l3UiMIO7hx9lUP
FfhTFXfW8tQpYPFy7FfxD5Vl3VnKZAhLMl7Ram7rDDVkDJYY4XPKR0YD+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNDJOoOON7oWhGm12gA+nVPTd8h8MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvME1rNmc0NDN1aGFFYWJYYUFENmRVOU4zeUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuekTAwQB
ueukMA0GCSqGSIb3DQEBCwUAA4IBAQAMf355TchZfAJTVHZV9wzpjhi3HwVo2+xE
C4myM/e3iKj9jVHoaxYki8ehL1vyXSzOJG0XFUzrPA9g1qSmA1NKYzplhE6Yvnhr
k0pKeN7jlegb9YDR9LADAdVOBFa+bqtZJnfpySPYd3ww0KTlN6ZXUCauSZkFCi2l
hT6fwf8nyu9mf/j0G0Tu5P3a10UPWpcNiX3kp0u9xIWLj4CwBeAdHV0BLLBX2icC
PbFChtHTIPdoYbsToI5NTfk63xM/VfOmv6p0mk30XQtqP5m/Q0h0JzIzGfuZq9nZ
tiC+kEsD8bKfylbNmkS8SmLmImy0uv0u288h/hdXCETq+shByI//
-----END CERTIFICATE-----
Generated at Wed Jan 21 09:24:15 2026 by rpki-client