This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa
File: HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa (raw, json)
Hash identifier: oZWuIu54uOtv30XUphqHrr6wzKAadRn0thnex/98uK4=
Subject key identifier: 1D:64:A8:13:87:C7:F3:3E:DC:A5:09:8C:80:24:23:1E:0E:E9:92:AE
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 019B7AC8ABEB3ACCE26A1395707101215E0C
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa
Signing time: Thu 01 Jan 2026 18:18:50 +0000
ROA not before: Thu 01 Jan 2026 18:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207218
IP address blocks: 185.28.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:ab:eb:3a:cc:e2:6a:13:95:70:71:01:21:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Jan 1 18:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d64a81387c7f33edca5098c8024231e0ee992ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:5e:92:06:a7:58:e1:26:8b:7c:fc:52:f1:
96:a2:80:d2:f3:1a:92:d1:18:81:ce:ba:71:bb:ac:
b9:a4:c4:78:9f:3b:a0:fb:54:9c:bf:3f:89:1b:c0:
c7:14:f0:18:e8:c2:b9:46:1c:65:36:11:58:15:44:
59:da:79:b8:44:d5:21:9f:05:29:ef:9d:01:a2:3a:
b5:8a:ac:09:13:63:4d:1e:a2:df:84:f9:e9:ae:6e:
2f:c9:b5:f4:90:2a:0a:89:50:b6:04:08:38:60:46:
36:50:b8:fd:41:64:83:28:62:8c:51:9f:74:a4:3f:
e9:df:3c:2b:4a:aa:5e:f3:0a:7e:e7:99:34:bc:10:
a8:f5:f3:cd:55:10:df:d8:ee:0f:de:06:e6:88:58:
9c:54:b9:9f:38:86:e8:ad:25:e8:61:4f:fb:ab:45:
a8:91:da:2c:f9:de:0a:f7:07:66:bf:96:5d:93:72:
31:72:67:1f:df:46:cc:f3:ad:69:66:85:6b:d3:ff:
33:0e:64:f5:9c:52:73:b9:57:2b:24:97:19:39:6c:
cf:a6:cf:28:fa:93:10:62:86:87:15:54:e2:c9:c6:
88:a0:6c:a0:83:3f:c5:c3:c7:02:c9:45:f4:7c:06:
ce:48:8c:0a:67:f5:12:35:d6:0d:73:56:4a:a9:25:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:A8:13:87:C7:F3:3E:DC:A5:09:8C:80:24:23:1E:0E:E9:92:AE
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HWSoE4fH8z7cpQmMgCQjHg7pkq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e5:3e:d5:31:57:f5:c6:17:55:0b:68:cf:10:9a:b5:d4:2e:
2b:54:13:34:f8:6e:33:44:dd:b7:60:1a:46:26:8e:04:1e:08:
4b:ea:0e:e6:a4:97:48:de:2c:6b:26:0c:8f:a9:b7:84:b2:0b:
c1:e2:a9:67:66:73:71:9f:9f:9b:74:8c:30:0c:d5:ec:31:9a:
96:a8:14:90:47:1f:4a:64:cd:93:43:17:a1:7d:dd:0d:91:6d:
60:7c:ed:04:dd:ac:31:3e:08:ed:cd:7c:e8:32:6c:e9:1d:57:
e5:58:cc:41:8d:84:03:c3:18:4e:df:90:06:8a:93:f1:51:74:
57:ca:7b:67:f7:b7:6e:cf:0b:bf:47:f3:4e:4a:36:04:eb:56:
b6:80:ba:90:a6:34:dc:bb:78:ce:e0:a6:dd:c0:45:39:41:ff:
5d:05:ea:ed:e8:30:17:81:31:7f:6b:63:00:85:6c:76:0c:df:
59:28:5f:f9:a1:f2:28:9f:ba:c7:db:bd:18:7c:b0:5b:36:4a:
e4:c2:15:5b:0d:02:18:1a:57:d5:ec:de:72:f1:86:f3:5e:e3:
39:68:b3:a4:4c:6a:40:ff:4b:85:dc:ca:6c:45:06:99:30:75:
ed:39:06:be:60:ea:60:aa:de:9c:30:58:26:eb:e2:d4:a3:c9:
19:7f:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:13 2026 by rpki-client