This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/IjS_Z548A1wrkDIKm6AdtHOccVA.roa
File: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (raw, json)
Hash identifier: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=
Subject key identifier: 22:34:BF:67:9E:3C:03:5C:2B:90:32:0A:9B:A0:1D:B4:73:9C:71:50
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019B76EB83D421B90BC0CBD6FA90FC8BDCFB
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/IjS_Z548A1wrkDIKm6AdtHOccVA.roa
Signing time: Thu 01 Jan 2026 00:18:24 +0000
ROA not before: Thu 01 Jan 2026 00:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201333
IP address blocks: 185.100.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:83:d4:21:b9:0b:c0:cb:d6:fa:90:fc:8b:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jan 1 00:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2234bf679e3c035c2b90320a9ba01db4739c7150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:a8:c2:fc:44:fb:48:5a:03:0f:ff:d6:2b:
c6:1e:c8:37:70:be:b9:90:ab:d3:09:f5:5a:c9:b9:
21:8f:ac:72:57:83:55:b2:9d:7a:71:9b:51:81:a8:
5e:68:0b:fd:9e:8f:9d:56:b9:18:b2:0c:e3:4b:16:
50:ec:58:55:7d:15:92:35:d6:7c:ed:a9:b8:a4:f7:
28:40:b7:e7:3c:ef:e3:00:05:1d:8f:32:bc:80:3a:
6e:fd:87:54:25:e5:cc:6c:ef:a9:d6:57:65:fc:67:
41:c7:a0:58:3f:15:cb:ae:9c:a7:71:33:8b:d2:dd:
ca:72:8d:b8:a7:af:68:2b:70:d0:88:1e:7e:a5:35:
52:97:02:35:15:b9:18:44:53:d4:84:40:93:54:b6:
fa:8e:3f:83:c3:0b:ce:ad:3d:b9:14:9e:3f:83:fe:
6a:0f:64:4b:09:79:a6:73:c6:3a:f2:65:38:63:f6:
a0:bf:0f:bb:c5:56:70:13:2d:c1:9a:78:e9:7c:b9:
7a:2f:d7:94:0d:b8:e5:f3:ef:d9:df:f7:98:c1:93:
bf:87:05:24:36:65:6f:67:a1:c2:30:fd:55:5d:9d:
4f:e6:6c:6d:92:06:57:97:3d:76:fc:5e:61:6c:bf:
4d:02:da:39:86:bb:6c:d6:84:b3:67:2a:7f:e2:ee:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:34:BF:67:9E:3C:03:5C:2B:90:32:0A:9B:A0:1D:B4:73:9C:71:50
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/IjS_Z548A1wrkDIKm6AdtHOccVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.16.0/23
Signature Algorithm: sha256WithRSAEncryption
66:14:d4:9a:e0:01:d1:a1:c7:eb:60:22:f8:08:38:20:f0:09:
a8:01:1f:73:5d:bf:95:56:e4:3d:eb:54:20:df:6a:c2:cd:13:
e9:05:a7:fe:85:2c:0c:bc:82:51:d4:40:8b:06:e6:cb:1e:a1:
a6:e8:2f:3b:27:ce:10:52:0b:24:e5:f0:f3:de:a4:e6:3e:05:
3c:54:ce:c0:68:51:b7:10:93:71:26:bb:7e:41:d4:37:80:7c:
3b:98:da:63:1b:e7:db:b6:49:57:3e:e1:c9:ce:fa:8e:47:d2:
5a:8d:37:4a:0b:1d:56:ea:d9:45:84:99:2d:b5:34:3c:a6:30:
34:e7:69:df:de:3e:21:c0:48:f4:81:5c:c8:e4:72:a4:c3:89:
31:7c:0b:60:bb:b7:13:25:a3:c4:b3:ef:72:1e:bc:a1:bd:35:
c5:b0:b6:74:c7:91:1d:f0:7d:e8:60:7d:7f:fc:87:06:9c:57:
33:dd:d2:f2:a9:35:de:7c:6b:50:85:75:39:a4:5d:65:9b:29:
69:53:27:f4:be:e1:64:97:c8:40:59:78:16:98:af:27:f0:fc:
fb:73:28:2c:fb:fd:ae:3c:79:a6:d9:8e:b8:e9:82:2c:15:be:
a0:0a:fd:4e:da:5c:06:94:8b:b2:b6:ae:48:b5:2e:f9:37:77:
2c:4e:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:19 2026 by rpki-client