This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa
File: v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa (raw, json)
Hash identifier: oRN0RpTL9cEOLFpMfM+oW8RC/6m7RJC5l8CQ7D2QtoI=
Subject key identifier: BF:FD:40:D9:AF:E4:6B:0E:5C:F5:C0:A0:47:C8:E5:1C:CB:97:67:CF
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019B7758A8E00936F447967B6E94D1C00A78
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa
Signing time: Thu 01 Jan 2026 02:17:37 +0000
ROA not before: Thu 01 Jan 2026 02:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60465
IP address blocks: 185.30.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:a8:e0:09:36:f4:47:96:7b:6e:94:d1:c0:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 1 02:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffd40d9afe46b0e5cf5c0a047c8e51ccb9767cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:4e:50:50:64:c4:0c:a4:4a:70:9b:45:50:
25:f6:cf:ae:6a:29:47:41:bf:33:0a:93:a1:2d:0f:
f8:52:6e:54:e7:4b:b1:d1:3e:24:c8:dc:11:85:88:
47:2d:a4:89:f1:47:14:a5:3b:5b:1a:70:fa:de:54:
ec:5d:da:c7:4c:42:ff:7f:34:8c:c6:f3:d6:15:21:
a9:e3:18:40:2f:b0:47:a4:9f:b9:85:83:4a:36:2f:
14:2d:55:38:e9:83:b0:f5:c4:49:31:53:35:16:c6:
d9:89:68:5d:5f:4a:aa:04:07:28:aa:cd:28:d5:de:
76:38:02:b3:4f:71:e7:62:71:fc:82:e6:9c:5a:d7:
b0:49:06:26:d5:91:33:a6:f7:f4:f8:9a:a8:07:ca:
bb:ab:76:4e:90:d2:d9:89:ce:f4:a4:8a:a8:2a:26:
ea:cb:ac:36:35:bf:a7:56:78:8f:47:76:0b:f5:47:
65:2b:9d:bc:14:25:0f:b2:08:3d:d3:2a:a0:7c:da:
9b:dc:72:ef:8f:69:55:69:8d:42:22:f8:41:28:e3:
cb:57:72:56:52:25:c1:0d:ae:48:41:ba:1c:d1:7d:
88:9f:78:f1:19:1e:d9:0a:66:4a:68:72:d8:70:1a:
bd:5d:11:78:9a:93:87:e3:ab:79:90:cb:85:ff:42:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:40:D9:AF:E4:6B:0E:5C:F5:C0:A0:47:C8:E5:1C:CB:97:67:CF
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:6b:0a:61:c1:b3:e1:34:24:61:54:a7:92:c8:75:d3:0d:c4:
a5:4d:78:17:14:74:be:ec:a4:0c:07:0d:67:25:f6:4c:59:b3:
ea:b9:34:a8:a8:7d:5e:58:87:3f:f7:20:dc:d8:e2:3e:b4:1f:
33:20:3b:99:42:b9:e1:b8:cc:e9:d6:b5:cc:42:57:d7:f1:fe:
ce:19:ae:e5:57:38:d1:c2:19:47:4b:83:a1:1b:26:83:69:84:
c5:9b:51:ef:98:fa:7a:73:50:ee:fc:e4:e4:29:43:a9:60:4a:
7f:25:7b:d8:d4:24:21:3f:ce:ba:2d:51:35:77:0a:85:77:a2:
02:f3:ba:61:31:11:b8:42:af:11:6b:00:05:67:cb:e7:d9:60:
ee:4d:45:93:16:11:4d:af:cb:5d:07:f1:c9:c9:3e:dd:fa:2d:
9b:3a:91:61:17:3c:86:9c:2e:31:aa:c2:2e:70:1f:3d:e6:5d:
b1:e4:4b:36:76:72:d1:f8:e4:9b:25:e9:6e:dd:79:97:21:97:
fe:63:77:81:b2:7e:9e:d9:ea:9a:3b:20:c7:af:d9:ec:99:c3:
82:f2:14:22:3b:75:77:b2:f3:23:e2:3f:b6:a4:b8:67:c9:47:
ce:ca:50:09:12:03:be:6c:66:41:cb:fc:01:04:f6:3a:bf:e4:
14:28:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:21 2026 by rpki-client