This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa
File: 93ujOdlhvkLDrlQTo0WR0HGkUOA.roa (raw, json)
Hash identifier: CSiF98tZ8HUGXFu9Nj6Ewi7SDw/vSSQkj6eyMK8B53I=
Subject key identifier: F7:7B:A3:39:D9:61:BE:42:C3:AE:54:13:A3:45:91:D0:71:A4:50:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 019B7EA68958A421019DF7DC5A35AF652EEA
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa
Signing time: Fri 02 Jan 2026 12:20:01 +0000
ROA not before: Fri 02 Jan 2026 12:20:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207026
IP address blocks: 185.168.104.0/22 maxlen: 22
185.168.104.0/23 maxlen: 23
185.168.104.0/24 maxlen: 24
185.168.105.0/24 maxlen: 24
185.168.106.0/23 maxlen: 23
185.168.106.0/24 maxlen: 24
185.168.107.0/24 maxlen: 24
2a0b:fe00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:89:58:a4:21:01:9d:f7:dc:5a:35:af:65:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Jan 2 12:20:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f77ba339d961be42c3ae5413a34591d071a450e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:35:5e:02:af:c6:74:3f:8f:c4:a9:6c:66:
12:9e:bb:3b:f4:f8:b5:51:72:6e:43:c9:f7:ca:65:
75:c8:2b:f4:8d:c8:cf:fa:be:25:0b:1a:f4:81:fc:
0c:e9:3d:f9:f0:37:b3:d8:67:ac:09:30:08:75:3b:
69:9e:d3:ae:ce:5a:1a:5d:25:c2:63:89:d8:59:0e:
2e:8e:3b:66:fc:77:89:e6:c8:50:86:14:b8:a4:df:
3d:8a:3d:45:61:d5:dc:ac:4e:a1:03:2c:94:15:df:
ae:e4:78:a8:75:77:88:08:87:3f:9f:c8:2e:55:2e:
02:66:e1:0e:43:27:14:5e:09:65:45:e8:4e:17:c9:
61:9a:27:79:e2:a8:a3:31:32:c9:2e:40:6b:cd:f3:
96:d2:a2:aa:eb:07:be:e4:0a:1b:e3:e4:56:44:cf:
f0:2a:3b:56:5b:02:7f:19:fd:65:98:5a:0d:ff:19:
1c:b2:b4:03:70:8c:02:d5:d7:25:8d:c2:64:5a:2f:
0e:2e:05:db:d8:5a:4c:cf:43:36:0a:16:81:d5:13:
1a:1e:f5:c0:ab:28:60:0b:13:5a:64:f1:1d:b8:6c:
80:bc:01:5e:af:1a:4b:0a:2e:76:07:0a:3d:3e:e8:
78:76:ca:94:11:3d:2b:83:a1:84:48:85:ca:fd:8c:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:A3:39:D9:61:BE:42:C3:AE:54:13:A3:45:91:D0:71:A4:50:E0
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.104.0/22
IPv6:
2a0b:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
53:38:54:9d:1a:9b:29:da:10:5f:e3:71:56:18:b7:fe:74:a3:
de:d6:40:ec:e6:47:1b:65:aa:33:e6:75:6a:4a:16:3d:76:b2:
e2:8b:6c:3c:d3:e1:b7:cc:0f:8d:59:61:ed:4d:07:f3:61:f3:
f2:23:c2:e1:98:cd:92:dc:8a:38:aa:33:01:f6:8b:d5:c2:56:
3a:01:0d:12:c2:ed:1d:2c:9d:86:b5:5f:74:d8:c4:b4:b3:c8:
eb:f5:73:aa:2a:46:f2:0a:e7:e4:f1:76:27:42:9d:f2:df:90:
02:14:3d:90:77:72:69:30:94:6c:44:76:53:d9:ec:a1:a0:5a:
8f:09:9d:b7:64:fa:8d:1d:96:95:9b:79:20:b1:54:4f:54:16:
ed:b0:28:15:3d:58:a1:3d:0a:e0:8a:36:d7:f9:07:aa:89:0b:
51:92:ab:7a:f9:19:d2:8d:71:c5:31:ac:2c:cb:41:ff:21:b1:
81:b3:95:52:cd:e8:aa:b2:7b:ea:de:92:b9:e7:7e:d8:01:9b:
94:5a:d1:9d:23:7f:00:63:78:52:5e:c8:1f:62:34:38:c8:30:
b1:14:81:78:b1:5e:63:8b:3f:ce:61:f9:ef:c8:c4:d0:94:8d:
c0:65:c6:5d:a0:db:1b:60:02:f8:c7:b8:84:0b:a1:e1:93:b7:
61:38:a8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:57 2026 by rpki-client