This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa
File: b2w6O9WirtRCdzK66va1rPliDCM.roa (raw, json)
Hash identifier: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=
Subject key identifier: 6F:6C:3A:3B:D5:A2:AE:D4:42:77:32:BA:EA:F6:B5:AC:F9:62:0C:23
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 019B78A243AC9E4CFB92E1569D2AD8577021
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa
Signing time: Thu 01 Jan 2026 08:17:38 +0000
ROA not before: Thu 01 Jan 2026 08:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22612
IP address blocks: 185.61.152.0/22 maxlen: 24
2a02:77e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:43:ac:9e:4c:fb:92:e1:56:9d:2a:d8:57:70:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Jan 1 08:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6c3a3bd5a2aed4427732baeaf6b5acf9620c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:ed:6c:7c:20:63:89:3a:3a:3b:4f:de:23:
5a:57:f1:84:f1:23:df:86:e9:c8:83:a5:55:0e:90:
6c:1b:e0:68:75:40:16:a9:b1:5c:e2:37:d5:19:b3:
63:85:fc:a7:5c:21:79:c5:64:4a:d1:b1:1c:aa:79:
ee:ed:70:92:05:2b:08:27:19:5e:2d:d1:57:6b:7a:
a9:09:e6:82:60:46:00:69:6e:6c:1f:71:c8:d5:2b:
60:9f:75:06:09:63:33:ac:41:e6:b4:73:a9:0c:4d:
b7:92:3c:20:f7:01:25:85:6e:57:f0:66:80:83:91:
79:42:c7:1f:1d:27:4b:96:38:15:46:d0:ce:cc:8b:
ee:ef:8e:bb:fe:56:3e:10:7e:2e:72:03:de:f0:4a:
63:70:38:7d:f2:e4:30:61:d4:4c:ec:7a:b5:1d:07:
15:c5:a0:06:fb:cc:4e:b6:1f:7c:4a:a2:51:a1:bc:
03:a2:1f:2f:c6:b3:8e:71:be:72:a2:b2:46:0c:60:
ec:e6:a4:25:d0:13:56:9e:83:93:a0:9d:cf:f3:ff:
03:e3:32:c6:3a:5d:0c:3f:7a:97:5d:fe:54:11:9f:
df:ec:f3:78:3f:e3:92:ca:cf:1f:01:cc:07:3a:61:
4a:f8:c7:0a:15:ed:32:75:10:b5:26:24:b5:97:dc:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6C:3A:3B:D5:A2:AE:D4:42:77:32:BA:EA:F6:B5:AC:F9:62:0C:23
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/b2w6O9WirtRCdzK66va1rPliDCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.152.0/22
IPv6:
2a02:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:16:87:1e:1d:54:1a:6c:f9:c4:3c:c3:22:4d:00:ae:97:fb:
44:6c:14:2b:b9:09:c9:56:ec:e4:9a:ff:bb:f3:cb:22:21:d2:
53:9a:28:3a:bd:0f:53:6f:98:ea:e4:a5:61:37:77:a2:e6:a7:
56:dd:72:9f:db:00:a7:d6:e3:9e:bd:bb:e1:c3:6f:64:35:49:
f1:23:53:61:53:f5:43:11:24:7e:42:90:93:2d:e1:f8:56:61:
10:83:2e:08:b6:66:fe:ee:06:99:40:b3:90:8b:f6:53:0f:86:
d4:5d:bc:9b:8a:8a:4b:82:86:82:c7:81:8f:2a:cb:f7:9a:f3:
ba:25:e7:41:53:41:3c:cf:26:1f:b8:b6:90:4e:dd:2e:f5:07:
30:5d:c5:5d:65:90:f6:60:ff:77:36:50:1a:61:0e:37:82:92:
9d:f3:cc:5a:12:67:bf:1b:1f:02:94:d4:67:22:de:f7:dc:7b:
44:49:58:36:7d:29:7f:c6:14:8f:39:5d:30:68:99:62:57:a6:
ce:e4:37:ed:29:6a:5a:b1:ff:35:9a:56:9f:32:14:f4:39:6d:
06:7a:03:cf:3a:c3:a2:1e:60:4c:c9:a9:f5:56:a1:03:eb:76:
97:c6:02:eb:00:4e:0e:7d:09:08:dd:94:f3:df:96:85:62:00:
fc:21:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:10 2026 by rpki-client