This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa
File: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (raw, json)
Hash identifier: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=
Subject key identifier: 48:16:B1:10:A9:FA:A2:63:37:22:A8:6B:4B:B2:B4:5A:87:7C:18:30
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019B7D5C0AF7CCE69B1E874E4DAEB6F01CF2
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa
Signing time: Fri 02 Jan 2026 06:19:02 +0000
ROA not before: Fri 02 Jan 2026 06:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13189
IP address blocks: 82.100.64.0/18 maxlen: 18
185.199.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:0a:f7:cc:e6:9b:1e:87:4e:4d:ae:b6:f0:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Jan 2 06:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4816b110a9faa2633722a86b4bb2b45a877c1830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:c4:24:97:c8:67:93:d5:ea:aa:43:3a:47:
df:fe:39:51:ca:8a:60:0d:5a:35:e8:ec:1a:20:0d:
30:2b:6d:d1:be:f2:0b:5f:f7:ed:e3:22:52:ec:5b:
58:0c:50:da:80:2c:c8:0c:c0:f8:a1:d8:20:b4:35:
89:29:b3:cd:b0:d7:4d:d1:55:4d:c9:92:76:d7:18:
93:78:ab:7e:11:03:33:e1:49:6f:01:ec:b0:bb:a5:
a1:63:95:c9:1a:0a:0a:b3:85:ca:3d:30:d7:8c:94:
52:66:be:e2:a2:4d:b1:66:0c:ab:43:bd:69:42:5a:
99:cc:4a:b1:5b:9d:2b:ee:04:46:ad:72:b5:5d:2b:
77:c4:a7:82:81:ce:df:46:6f:48:52:e7:8c:67:8f:
89:9a:8a:ea:bb:f1:b1:0a:4b:42:71:f7:c0:42:9e:
64:ff:f0:e7:0b:29:be:cd:e1:a2:d3:51:2a:61:59:
a9:94:31:1b:f6:5e:d1:fc:fb:ab:3b:cd:d4:3f:c5:
b4:ca:85:a7:70:c2:d2:15:28:3f:73:e9:eb:37:f2:
2a:6c:b2:34:f6:18:65:3f:0f:5d:b7:f3:34:62:09:
19:c8:9c:f0:41:09:86:7c:b4:e0:96:5b:1a:74:73:
3f:df:d5:20:82:f4:2b:11:22:01:14:82:66:c8:b1:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:16:B1:10:A9:FA:A2:63:37:22:A8:6B:4B:B2:B4:5A:87:7C:18:30
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/SBaxEKn6omM3IqhrS7K0Wod8GDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.100.64.0/18
185.199.136.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:13:12:e2:ac:66:26:b5:0b:c3:ce:41:e2:3b:69:fc:03:13:
79:11:11:dc:60:ee:a2:07:4e:5c:44:7d:2e:4a:3f:28:51:4c:
40:77:c0:d7:da:b3:f2:83:f4:4e:1d:05:6a:03:4a:96:85:c4:
96:a2:7d:75:dd:df:c5:34:12:6f:2c:ba:d9:cc:57:5c:ed:58:
e9:20:0c:22:a8:82:ac:94:8b:02:56:7c:2c:ac:5a:40:6d:11:
3e:81:3a:59:35:77:23:41:9b:92:81:9f:f1:27:7d:3a:77:22:
d3:f0:84:ff:9f:40:12:18:20:ec:de:31:e1:ba:15:e2:52:13:
79:34:83:95:0d:ad:73:4c:76:7c:ab:d2:77:93:5e:e8:03:f1:
b3:fa:44:5f:b8:9b:b9:e5:d8:a5:3c:8d:9d:25:25:80:fe:84:
0a:fa:0e:c5:80:82:53:b6:d5:a9:19:95:15:e2:03:5f:b7:96:
2f:68:62:92:68:a9:bd:9e:6b:68:72:da:7f:55:db:71:8e:1b:
90:dc:87:ea:c8:bc:f5:42:1c:e5:4d:73:7b:43:b9:fb:77:05:
2b:c0:08:9d:c2:77:2f:e0:48:f2:81:fd:78:81:da:74:4c:8f:
0d:8b:2a:5c:ac:45:2d:ad:bb:6c:e3:8f:e7:a9:46:ba:19:a6:
63:17:5d:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt9XAr3zOabHodOTa628BzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjYwMTAyMDYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE2YjExMGE5ZmFhMjYzMzcyMmE4NmI0YmIyYjQ1YTg3N2MxODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPPEJJfIZ5PV6qpDOkff/jlRyopg
DVo16OwaIA0wK23RvvILX/ft4yJS7FtYDFDagCzIDMD4odggtDWJKbPNsNdN0VVN
yZJ21xiTeKt+EQMz4UlvAeywu6WhY5XJGgoKs4XKPTDXjJRSZr7iok2xZgyrQ71p
QlqZzEqxW50r7gRGrXK1XSt3xKeCgc7fRm9IUueMZ4+Jmorqu/GxCktCcffAQp5k
//DnCym+zeGi01EqYVmplDEb9l7R/PurO83UP8W0yoWncMLSFSg/c+nrN/IqbLI0
9hhlPw9dt/M0YgkZyJzwQQmGfLTgllsadHM/39UggvQrESIBFIJmyLEFUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEgWsRCp+qJjNyKoa0uytFqHfBgwMB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvU0JheEVLbjZvbU0zSXFoclM3SzBXb2Q4R0RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGUmRAAwQC
uceIMA0GCSqGSIb3DQEBCwUAA4IBAQDNExLirGYmtQvDzkHiO2n8AxN5ERHcYO6i
B05cRH0uSj8oUUxAd8DX2rPyg/ROHQVqA0qWhcSWon113d/FNBJvLLrZzFdc7Vjp
IAwiqIKslIsCVnwsrFpAbRE+gTpZNXcjQZuSgZ/xJ306dyLT8IT/n0ASGCDs3jHh
uhXiUhN5NIOVDa1zTHZ8q9J3k17oA/Gz+kRfuJu55dilPI2dJSWA/oQK+g7FgIJT
ttWpGZUV4gNft5YvaGKSaKm9nmtoctp/VdtxjhuQ3IfqyLz1QhzlTXN7Q7n7dwUr
wAidwncv4Ejygf14gdp0TI8NiypcrEUtrbts44/nqUa6GaZjF10C
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:27 2026 by rpki-client