This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa
File: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (raw, json)
Hash identifier: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=
Subject key identifier: BC:80:BD:38:9A:7A:BF:08:56:A9:D7:3C:D6:3D:78:26:84:14:2B:1F
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 019B7C803B4C030960E8501FB89B945DD129
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa
Signing time: Fri 02 Jan 2026 02:18:57 +0000
ROA not before: Fri 02 Jan 2026 02:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209345
IP address blocks: 85.208.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:3b:4c:03:09:60:e8:50:1f:b8:9b:94:5d:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Jan 2 02:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc80bd389a7abf0856a9d73cd63d782684142b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:25:bb:b6:61:68:ae:90:36:bf:f8:17:8d:c1:
c4:4b:c9:73:a8:04:6b:84:b6:58:8f:bf:aa:02:47:
9e:e9:66:56:a7:a9:b7:07:31:a6:87:59:3a:9f:f0:
77:0d:05:26:d8:dc:b9:fd:39:49:83:cc:86:5a:62:
0f:d4:76:30:bc:d7:90:c6:ca:b2:04:35:08:f9:ce:
5a:19:a7:97:dc:13:63:08:b7:1f:fb:fa:c7:53:6f:
52:dc:5d:f5:75:7d:a6:84:31:0c:c6:48:66:f3:f8:
be:9d:71:90:4a:95:40:ac:de:d2:a4:4f:5a:53:c4:
6f:0e:54:76:53:2a:42:0a:3e:05:a0:63:2c:6c:ac:
56:06:2b:98:5e:2d:06:b8:12:33:6c:bc:d8:17:49:
35:b9:ab:5c:6e:97:6f:d8:d4:d9:48:75:7c:c3:42:
c1:12:b9:7c:d3:e6:5e:d1:3f:b8:f9:77:6e:b4:62:
1d:c0:5c:0a:a7:d6:e3:9b:89:e1:15:7a:4f:63:8f:
3f:03:36:3d:b7:5e:44:0e:62:cd:6f:fe:04:8f:2f:
df:b2:44:27:d0:80:74:4a:86:39:53:83:4d:a4:6f:
03:b1:9c:c2:fa:80:94:42:8f:83:b0:c2:3b:4a:40:
9b:62:52:74:d6:83:f0:bb:36:ad:ea:b8:7b:12:b3:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:80:BD:38:9A:7A:BF:08:56:A9:D7:3C:D6:3D:78:26:84:14:2B:1F
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/vIC9OJp6vwhWqdc81j14JoQUKx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:88:f0:12:84:43:97:61:8d:2d:db:d4:37:3b:6f:d6:51:28:
df:54:fa:c2:e1:f4:4e:fa:4f:b5:2a:60:c6:c2:bc:a1:45:9d:
92:a1:9b:a2:94:8c:d2:c2:14:d4:a9:a1:e8:fa:61:ce:d0:a4:
c9:f9:23:7d:cf:9b:47:71:41:37:ac:02:cc:f7:bd:fb:e8:f6:
95:96:0d:4c:0b:51:9d:08:a9:dd:9a:be:34:60:86:c9:e7:b3:
5d:30:49:58:98:2a:a9:18:81:9a:1c:6e:33:69:6b:92:60:c7:
48:55:a2:fd:4f:e0:f3:53:42:02:cb:22:aa:26:c2:00:e1:da:
4b:ae:bd:5d:ed:72:10:a1:12:d6:30:0c:d9:a5:8b:53:19:a2:
1d:1d:f8:a2:57:06:fb:ad:c3:c1:c7:b9:ae:06:c4:94:a8:da:
0a:71:1d:9d:b5:e6:0c:89:b2:22:a0:e9:0f:fa:e0:4c:50:dd:
44:b2:a5:59:4b:e9:56:87:ee:8c:19:d7:ad:75:33:76:57:b1:
98:5c:fd:20:10:6b:f1:13:d4:e3:4a:e3:b4:16:08:33:95:c5:
e1:77:40:d3:02:8d:6b:c9:2a:56:f0:bf:c2:99:2b:e7:e8:45:
49:25:d5:86:8b:66:7a:80:b5:47:d2:7b:1c:85:0d:a3:fb:1e:
62:94:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:02:51 2026 by rpki-client