This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa
File: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (raw, json)
Hash identifier: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=
Subject key identifier: 6D:B7:8D:B8:27:49:5E:A0:98:21:4B:72:53:66:D3:1E:78:5E:D2:93
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019B7C80C49857243A6CC89B57BD391F5529
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa
Signing time: Fri 02 Jan 2026 02:19:32 +0000
ROA not before: Fri 02 Jan 2026 02:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214378
IP address blocks: 95.169.209.0/24 maxlen: 24
2a01:4a40:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c4:98:57:24:3a:6c:c8:9b:57:bd:39:1f:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 2 02:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db78db827495ea098214b725366d31e785ed293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:18:0c:bf:61:8c:42:f0:56:e8:2c:11:ae:
80:7b:3d:55:60:f5:00:17:d0:ee:aa:bb:ca:2c:71:
53:17:aa:cc:5c:ff:ab:5a:f7:39:e7:24:13:2d:9c:
2b:35:df:7a:78:34:5a:f8:b6:97:3c:fd:5f:cb:0b:
78:c2:8d:60:81:80:f8:2e:0f:01:50:36:87:53:2f:
6f:06:59:6c:d7:1b:d9:a5:ad:77:e1:02:35:00:99:
d6:dd:f4:10:4c:e3:66:03:39:3b:cf:6b:a9:1f:94:
f7:2b:bc:7b:43:c2:bf:a5:f2:4b:b7:b4:d0:cb:9f:
fa:08:46:e5:ec:e7:f8:44:2a:ff:ee:a7:41:d9:21:
97:b8:7b:79:6e:b9:ba:c2:cc:ae:77:03:fb:0d:80:
60:31:38:4b:b0:17:22:c0:22:19:c3:57:ab:b4:bb:
fb:81:2c:f8:c9:a8:bb:eb:69:ed:8c:4c:89:6c:66:
a0:42:ab:b1:0e:00:f8:c9:f2:d3:2d:3e:6c:1f:3b:
bd:d1:93:61:50:70:b0:da:e1:45:44:9f:99:d2:3d:
7d:04:dc:83:51:fe:80:80:6d:e6:7f:94:7a:44:a5:
6d:04:15:2d:1a:37:d8:e2:0f:7e:45:b6:21:73:69:
0b:67:3f:09:3c:45:ca:d0:59:66:2c:98:f3:6b:75:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:8D:B8:27:49:5E:A0:98:21:4B:72:53:66:D3:1E:78:5E:D2:93
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.209.0/24
IPv6:
2a01:4a40:101::/48
Signature Algorithm: sha256WithRSAEncryption
79:86:b7:fc:d4:a6:99:15:a6:9a:6f:56:0e:b3:d0:bc:cb:40:
5f:78:c8:76:40:9a:b6:9f:18:7c:49:8d:0d:a1:90:15:b6:08:
04:ec:30:26:81:92:bd:9a:fa:ec:43:86:34:49:f2:43:67:36:
c0:f3:41:bc:8f:0f:a4:ac:1e:59:64:9b:40:86:17:e6:ea:97:
26:85:85:70:7e:99:88:00:c9:83:78:ab:c9:03:44:82:d6:2f:
71:d3:a1:42:9e:09:db:4c:0c:2d:6f:c7:71:ee:fd:a8:35:1b:
f8:f7:cb:a6:1c:8b:62:46:1a:c0:6f:fe:52:f9:20:f2:6c:2e:
ff:f1:8f:aa:0d:da:c7:94:ed:fb:a9:ef:ff:8b:51:3d:95:c4:
21:a1:a2:46:d2:a6:2d:2e:08:e6:bb:66:3c:79:e4:6b:72:77:
fc:00:9f:36:3d:6e:b5:67:59:e3:6f:2c:70:17:51:c5:29:17:
cc:39:82:f6:c8:3c:06:22:ce:fc:f8:4f:8d:5e:dd:ed:43:88:
e5:6f:4e:fe:83:70:81:ff:7e:c5:9a:19:46:a4:c1:6d:dc:e1:
65:b2:ee:47:a0:49:a5:f2:69:b8:81:b5:9a:19:fe:0f:0d:fc:
d2:7a:66:46:ab:6c:84:80:f2:38:5a:13:28:4c:8b:f9:66:0e:
34:62:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:56 2026 by rpki-client