This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa
File: 1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa (raw, json)
Hash identifier: ZjDRguZyQdRbgGDx2inGal0RnrWBMwUNKvj3z1ggLfA=
Subject key identifier: FB:F4:01:EA:4A:8D:BA:AD:04:A6:0A:28:DE:DF:F6:C3:F8:F5:5C:C7
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 019B77C6776AF8D2E1BB4C4A5E9F68443E65
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa
Signing time: Thu 01 Jan 2026 04:17:33 +0000
ROA not before: Thu 01 Jan 2026 04:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 185.132.80.0/22 maxlen: 22
185.132.80.0/23 maxlen: 23
185.132.80.0/24 maxlen: 24
185.132.81.0/24 maxlen: 24
185.132.82.0/23 maxlen: 23
185.132.82.0/24 maxlen: 24
185.132.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:77:6a:f8:d2:e1:bb:4c:4a:5e:9f:68:44:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 1 04:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbf401ea4a8dbaad04a60a28dedff6c3f8f55cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:8f:de:df:61:25:f9:ad:fe:b4:44:84:e7:
2d:00:f0:04:99:5d:01:98:e2:38:40:64:b8:5a:99:
2c:71:4a:8e:49:06:d6:20:16:17:8c:9b:2e:0a:df:
35:01:b3:1c:2d:eb:b3:eb:0d:d4:ce:32:b4:22:d0:
ab:dd:19:a6:34:5e:60:25:7a:e9:9b:ad:c3:ea:39:
aa:7b:df:cd:d4:ae:a5:f0:a4:98:4c:81:40:1b:5d:
24:69:27:37:66:bd:73:8a:ee:78:c2:55:86:9c:d6:
0e:be:90:6f:2b:52:61:cd:b6:85:63:c8:0c:ef:55:
0b:81:35:7e:84:27:6a:14:5e:77:15:2a:f6:81:d4:
d7:42:03:7e:62:70:a5:52:4e:3d:7a:43:3d:54:b7:
3e:62:3f:7a:f7:81:7a:81:23:40:66:1c:7c:6d:53:
9b:93:09:9a:10:bb:4e:30:50:57:d3:5a:6b:03:04:
50:5a:fa:47:1d:fc:8c:95:46:01:f0:64:94:26:a0:
93:bc:2e:99:3c:f7:19:8a:82:85:73:a8:71:11:60:
1b:f4:d1:bf:8c:69:79:c7:db:1a:1f:00:e0:bf:56:
45:3e:68:45:a5:69:c6:a8:b2:27:8b:62:db:f4:df:
36:9e:40:23:b3:b7:67:bd:1d:47:75:ff:e6:de:35:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:01:EA:4A:8D:BA:AD:04:A6:0A:28:DE:DF:F6:C3:F8:F5:5C:C7
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.80.0/22
Signature Algorithm: sha256WithRSAEncryption
01:59:eb:c1:ff:3c:85:a1:27:68:23:4b:98:23:bb:ae:8e:09:
8a:46:74:c1:d6:67:5c:ef:24:b5:a2:17:4d:5c:a5:65:31:41:
e0:01:ef:41:91:35:9b:e9:71:13:7a:6c:10:b1:3c:a4:f8:a0:
ff:27:66:42:a8:4e:0f:48:8b:ad:4a:f6:f3:a6:12:fc:b3:be:
72:35:e9:90:9e:57:b3:9d:c0:5e:16:3d:40:52:11:b5:6d:0f:
d2:74:24:01:91:a6:90:27:6e:d3:54:3a:10:ba:65:8d:b1:57:
00:ed:fa:d3:bc:67:ed:c8:9e:5d:49:e0:d4:de:8b:8a:7e:92:
4e:cb:2a:71:5e:10:20:f9:97:0d:c8:0e:f9:2a:f5:9e:65:1f:
0f:b8:55:e6:6d:d2:57:c9:3c:52:a6:88:1b:66:e2:a8:ad:a5:
55:f8:a8:85:49:03:26:79:2e:55:97:58:50:c3:4c:23:44:1c:
76:8e:ff:83:ce:04:d5:b2:56:e8:af:56:cf:2c:6f:ce:fb:c9:
4f:23:01:49:3a:ca:14:9b:f5:b6:b5:50:96:df:48:10:77:e4:
c4:a3:fd:55:cf:37:03:d4:23:1c:04:a1:e5:8e:db:e4:f6:6c:
52:e6:7b:90:21:31:f7:65:32:c8:4f:d2:4a:c6:c7:15:50:58:
1c:0c:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:00:56 2026 by rpki-client