This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lSpAp1H9vE_k7voroljnMLVCaVs.roa
File: lSpAp1H9vE_k7voroljnMLVCaVs.roa (raw, json)
Hash identifier: avB2/pNnA6e8iGCuIygNfpzXyLbc2RGW2gwWy4Toq4E=
Subject key identifier: 95:2A:40:A7:51:FD:BC:4F:E4:EE:FA:2B:A2:58:E7:30:B5:42:69:5B
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA40FC26BD5FD53C8494A78CF9BE233
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lSpAp1H9vE_k7voroljnMLVCaVs.roa
Signing time: Thu 01 Jan 2026 22:18:28 +0000
ROA not before: Thu 01 Jan 2026 22:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204173
IP address blocks: 185.106.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:0f:c2:6b:d5:fd:53:c8:49:4a:78:cf:9b:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=952a40a751fdbc4fe4eefa2ba258e730b542695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:41:75:53:88:d0:8d:46:5c:20:96:91:63:
47:32:42:73:0d:16:ca:d0:b5:3d:db:df:ec:08:07:
7b:88:3d:30:b2:59:ee:c3:99:9e:07:3b:b2:52:46:
8c:dc:bf:d2:d0:7d:49:40:52:1b:b6:9f:2d:89:76:
3b:d7:a8:e8:63:40:ca:6a:23:2b:06:4c:73:3a:cd:
56:44:f9:7c:5f:e0:0d:b8:ba:0b:d1:b0:a2:01:55:
2c:e2:09:ed:56:68:42:b0:6c:ec:23:22:d9:8e:3b:
02:b3:72:98:05:4d:13:71:07:81:90:75:62:73:cf:
9a:30:97:75:5c:81:a7:54:6f:57:99:d8:21:95:5a:
ab:2d:80:3f:49:1f:29:8e:ff:90:83:6b:de:d5:e0:
46:2f:03:10:12:5c:3f:df:8e:5a:8c:70:5b:90:34:
3f:82:fc:8e:40:11:7c:af:f5:f6:50:d0:97:0a:2b:
af:03:5e:d0:0c:11:55:41:85:64:1f:31:6a:14:5b:
3f:92:aa:d2:fa:a7:1b:ad:8f:15:dc:b7:90:78:2e:
2d:b7:eb:2c:a9:29:94:13:75:04:7c:10:79:c9:87:
dd:66:f8:24:85:ca:35:35:fb:52:34:57:36:18:18:
67:0b:49:b8:0b:4c:35:8a:a1:14:d8:21:41:b5:4b:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:40:A7:51:FD:BC:4F:E4:EE:FA:2B:A2:58:E7:30:B5:42:69:5B
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/lSpAp1H9vE_k7voroljnMLVCaVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.106.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d4:9d:16:48:69:1f:eb:2d:80:b8:72:35:9d:81:d5:84:24:
40:25:03:98:59:55:f7:56:cb:38:8f:ad:a5:a2:a2:94:55:21:
b0:21:4c:4f:14:9c:f5:68:63:af:25:19:3d:15:7f:38:84:8d:
c6:8c:09:a0:f2:7f:35:f5:9b:a1:7a:79:6a:0e:65:b8:ae:d1:
2d:a1:b4:ab:80:03:ad:1e:23:6b:c1:9b:4d:03:ea:24:ee:54:
02:de:7a:0d:66:c2:84:9b:79:45:92:d2:ab:c1:28:e9:17:38:
3e:20:73:16:bc:02:67:53:60:fe:bf:3f:d1:28:4e:21:f7:7f:
4f:7d:66:7c:f8:ee:47:26:ae:dd:ee:2e:db:aa:6e:5a:57:61:
ad:c7:ac:34:0e:6e:15:38:9c:8e:2d:ef:f4:f5:c6:ad:eb:37:
d5:1b:fa:4f:f6:b7:f3:6a:30:5d:c1:62:1e:24:2c:72:a2:fd:
69:e0:11:47:92:f7:02:46:3f:8a:fb:b7:47:93:99:9d:a6:47:
e3:3b:87:b9:6f:91:78:54:a6:16:1a:cf:14:31:3e:18:20:57:
bf:f3:30:03:18:52:e5:65:e7:a2:de:24:2f:4e:bb:9b:c4:a4:
ba:32:95:e2:10:86:d7:83:af:ba:0a:a9:0d:c5:9d:3d:17:d5:
8f:42:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:44:58 2026 by rpki-client