This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/P24w_jLhUQYot-hYm7zVBeSYmLE.roa
File: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (raw, json)
Hash identifier: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=
Subject key identifier: 3F:6E:30:FE:32:E1:51:06:28:B7:E8:58:9B:BC:D5:05:E4:98:98:B1
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 019B79ED3E4E19457397C69B29114620EC8D
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/P24w_jLhUQYot-hYm7zVBeSYmLE.roa
Signing time: Thu 01 Jan 2026 14:19:09 +0000
ROA not before: Thu 01 Jan 2026 14:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199831
IP address blocks: 185.30.0.0/22 maxlen: 22
185.45.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:3e:4e:19:45:73:97:c6:9b:29:11:46:20:ec:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Jan 1 14:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f6e30fe32e1510628b7e8589bbcd505e49898b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:c0:b3:5e:a5:d1:af:18:95:97:97:0d:5a:
28:eb:58:cb:b8:26:6b:8b:03:4d:d6:97:7f:dc:58:
c9:87:0d:94:5e:f5:ab:86:32:34:04:72:21:43:ad:
8f:b3:e2:98:37:3b:ab:1b:98:8e:7b:35:1e:a3:56:
12:34:cc:cb:78:02:f4:54:1b:fc:08:36:ec:55:ee:
ed:36:02:0d:de:c7:d6:c8:f4:6c:2a:ba:50:52:f9:
24:d8:69:e2:31:92:ea:da:bd:a9:0b:b8:36:93:f2:
2d:d9:3c:05:33:7c:2c:84:72:9c:e7:47:5e:71:ea:
77:3d:f1:7e:12:44:ef:3a:da:04:29:f5:a4:b2:df:
ba:d1:bb:f4:5a:9b:9b:a6:21:66:0d:47:c4:84:68:
bd:4e:90:83:2b:19:ed:0e:bf:5f:91:44:c7:a2:46:
e4:90:27:ce:2e:0e:ae:b8:45:84:73:b5:90:87:2f:
11:ad:4b:0c:50:f6:d2:87:86:5f:0a:f2:db:69:97:
54:d9:52:6e:eb:6a:9f:a2:77:bd:a4:a4:30:1b:fe:
79:3e:c1:e7:cd:04:d1:d0:21:4e:2c:00:dc:63:58:
48:7d:90:72:17:10:45:7c:87:93:4f:3d:22:0b:30:
be:8b:88:12:a7:61:a1:22:c7:3f:04:4d:06:42:c9:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:30:FE:32:E1:51:06:28:B7:E8:58:9B:BC:D5:05:E4:98:98:B1
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/P24w_jLhUQYot-hYm7zVBeSYmLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.0.0/22
185.45.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:b7:fb:45:22:1e:a7:44:f4:c1:23:26:b8:35:29:64:86:9c:
68:1d:7e:43:d0:c5:55:32:bb:1a:c7:c1:69:0d:0d:c5:69:50:
b3:e9:80:78:c7:80:4a:f0:b8:7d:24:6b:aa:0d:34:a0:2e:79:
09:8c:c1:9c:d5:61:a3:2d:39:6a:b3:fa:97:ea:c2:de:2c:11:
98:47:4e:ab:d6:69:77:b3:1d:66:90:27:c4:99:76:3b:12:aa:
3c:90:46:c0:cc:0c:87:bb:e6:5a:40:6b:06:05:cb:5c:03:e3:
2e:fb:53:78:8f:06:29:db:31:a4:53:37:c2:43:93:ab:34:73:
78:f2:43:fb:1e:f8:f0:50:b3:df:da:1d:58:4b:c7:cc:6d:39:
18:eb:f7:e0:7b:f7:ae:89:db:47:24:5a:e6:64:00:e8:c8:61:
64:a7:5f:c9:1f:80:e3:47:1c:ba:8e:f6:80:4d:97:cf:65:0f:
bf:ec:e7:fb:37:6b:a0:00:ce:e5:b9:96:60:1d:bb:f7:50:cf:
45:61:77:15:63:0a:39:34:9f:68:e2:a6:ae:3b:51:fd:a3:58:
9c:6f:a6:30:ce:ac:e8:6c:e2:4b:55:bf:f3:13:8f:e4:f8:ca:
82:6f:47:cf:f1:54:41:52:f1:f7:6f:c4:0f:8e:3c:b7:b2:a0:
5d:15:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:03 2026 by rpki-client