This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/SGmRPs7E_Ar65qS0PZ3szYEetUo.roa
File: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (raw, json)
Hash identifier: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=
Subject key identifier: 48:69:91:3E:CE:C4:FC:0A:FA:E6:A4:B4:3D:9D:EC:CD:81:1E:B5:4A
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019B7CEE1EBE29936F0A649F5F98164CDCEC
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/SGmRPs7E_Ar65qS0PZ3szYEetUo.roa
Signing time: Fri 02 Jan 2026 04:18:58 +0000
ROA not before: Fri 02 Jan 2026 04:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197731
IP address blocks: 185.67.224.0/22 maxlen: 22
185.67.224.0/24 maxlen: 24
185.67.225.0/24 maxlen: 24
185.67.226.0/24 maxlen: 24
185.67.227.0/24 maxlen: 24
185.148.20.0/22 maxlen: 22
185.148.20.0/24 maxlen: 24
185.148.21.0/24 maxlen: 24
185.148.22.0/24 maxlen: 24
185.148.23.0/24 maxlen: 24
2a03:27a0::/32 maxlen: 32
2a03:27a0::/48 maxlen: 48
2a03:27a0:1::/48 maxlen: 48
2a03:27a0:2::/48 maxlen: 48
2a03:27a0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:1e:be:29:93:6f:0a:64:9f:5f:98:16:4c:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jan 2 04:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4869913ecec4fc0afae6a4b43d9deccd811eb54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:ea:68:b7:16:cb:55:6e:55:72:57:8d:b4:
a9:79:57:a2:57:71:37:02:77:c3:8b:52:bd:f6:01:
d1:70:03:c2:76:b3:8a:b6:35:5c:51:cd:ae:11:e3:
24:dc:4a:1c:ee:73:e2:31:e9:5a:1e:85:ec:ee:25:
23:8c:74:e1:90:e5:3e:18:08:63:65:af:96:58:a9:
f8:9b:25:7d:4d:fc:cd:e7:69:d9:16:6e:eb:14:56:
88:48:f6:59:77:eb:93:90:0d:75:49:27:89:a8:88:
85:ac:17:59:75:62:74:a0:8a:a2:67:e4:0a:5e:7b:
3c:95:58:5e:f8:6c:77:d4:79:7e:5a:01:db:89:64:
ea:df:13:00:80:d7:4e:31:1c:e9:69:ac:bd:f0:9e:
68:a6:89:07:16:92:22:ea:da:f7:24:0c:58:d3:1a:
22:f1:8d:09:35:23:28:54:e4:7f:9e:6a:da:87:bf:
31:b4:b4:c3:a3:62:71:c5:61:b1:d0:46:18:40:31:
29:93:c6:aa:4f:43:89:42:a5:82:eb:86:b9:87:c5:
1a:e3:fa:9f:56:cc:ec:ab:ca:8e:0e:98:2c:1c:0e:
48:c3:e8:27:3d:f6:d7:40:35:c1:77:b7:a4:01:ac:
3d:c9:57:3c:98:f8:be:ea:30:0d:03:a8:f6:b4:fb:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:91:3E:CE:C4:FC:0A:FA:E6:A4:B4:3D:9D:EC:CD:81:1E:B5:4A
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/SGmRPs7E_Ar65qS0PZ3szYEetUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.224.0/22
185.148.20.0/22
IPv6:
2a03:27a0::/32
Signature Algorithm: sha256WithRSAEncryption
80:da:75:84:53:80:3f:69:f7:20:d3:8a:fd:0d:bf:50:be:93:
cf:e4:61:bf:c0:c4:62:b1:fd:2d:b5:36:b4:7d:71:20:31:95:
13:7b:0d:fa:c3:39:e5:77:a2:ef:60:d0:31:c5:e0:05:97:60:
92:4d:c1:fb:6d:69:0e:f1:80:f8:10:2e:45:13:b1:5c:bc:3e:
f4:80:fb:33:24:ff:32:94:32:5c:0c:7b:d3:ba:a3:ea:87:53:
6a:c6:95:a7:da:54:90:d5:ad:e4:9f:1d:c2:ba:42:b4:73:a3:
29:4f:12:08:2d:90:f9:56:37:e7:aa:6b:91:a6:0b:24:3b:3d:
95:3d:5f:f2:cb:ba:ab:3a:45:54:27:85:e3:5c:5e:11:36:5a:
70:37:97:d8:ff:2f:e4:02:8e:e0:45:b0:ce:77:ec:c0:4e:fe:
42:8c:d2:6b:01:95:dd:8c:7c:ca:32:f7:57:c8:1a:e7:5b:0e:
e8:a8:66:3c:e5:1e:e2:3f:14:8d:92:14:a5:d8:2b:f9:32:ab:
58:a1:c4:2c:a9:82:9a:03:03:dc:21:68:7b:cb:9d:b6:17:89:
10:80:c4:e2:8a:b2:89:fd:41:96:8e:3e:a9:18:e7:14:4f:34:
bc:c1:9f:ec:57:db:01:66:7c:56:52:b8:f9:22:7d:47:21:d0:
99:7c:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:11 2026 by rpki-client