This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa
File: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (raw, json)
Hash identifier: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=
Subject key identifier: 6F:61:70:CD:7C:0F:03:88:78:72:0C:2D:9F:27:3A:D0:EB:53:6B:CF
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019B79EBC7DF9DE998954824FBB49A9DCC1A
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa
Signing time: Thu 01 Jan 2026 14:17:33 +0000
ROA not before: Thu 01 Jan 2026 14:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 80.247.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:c7:df:9d:e9:98:95:48:24:fb:b4:9a:9d:cc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Jan 1 14:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6170cd7c0f038878720c2d9f273ad0eb536bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:64:18:f4:03:db:06:cf:a4:9e:7f:41:b4:f8:
da:22:9e:3c:74:83:13:4c:8e:32:33:2f:7b:eb:54:
4a:2c:ce:74:a5:29:9f:5f:fc:22:98:70:65:fb:01:
15:6f:72:b2:9e:74:66:7d:8a:6f:9c:f0:4b:36:af:
3e:de:38:38:cc:55:34:e8:8c:b6:26:bc:a2:5d:ed:
b6:13:2c:a8:2e:a8:8a:7a:8f:dd:d6:ba:cc:22:41:
20:38:f0:96:bf:a5:d3:6c:eb:6d:c6:71:ba:1a:39:
21:3f:cc:91:01:ea:92:22:19:1c:4a:97:ab:31:5a:
52:70:d6:b5:0d:d1:40:6a:be:a6:7b:95:66:0a:91:
8d:e5:02:ce:37:17:b8:41:02:84:22:97:2c:07:3c:
d4:32:e5:88:f6:15:b4:e0:96:6f:02:77:6c:0b:94:
93:52:89:46:94:e0:56:97:91:6a:58:22:b0:8d:6c:
62:ee:06:af:53:54:72:fb:96:24:e8:04:4a:58:bb:
53:45:bb:97:e1:e1:3e:cd:5d:02:83:e7:c1:f7:92:
17:83:ea:f7:9e:03:88:05:86:4e:df:0d:07:1a:c9:
61:2c:6a:d5:75:aa:37:23:ff:2f:07:ad:c6:7f:e5:
51:bd:a8:4d:d2:88:d4:3f:db:05:12:b0:ed:82:81:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:70:CD:7C:0F:03:88:78:72:0C:2D:9F:27:3A:D0:EB:53:6B:CF
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e6:22:1d:8f:42:4e:42:86:92:ba:ac:e4:94:2c:74:2a:07:
f5:65:35:be:87:60:57:6d:77:93:05:6b:a5:c3:63:01:dc:66:
6d:d4:c9:8e:d6:d6:f8:c1:04:05:6a:b3:0e:a9:0c:29:bc:5a:
50:c9:c9:b6:a5:1e:f9:86:8e:5b:3b:10:f9:f8:51:e6:56:88:
14:f5:3c:dc:d6:69:fc:de:8c:d3:22:ee:77:b2:14:4f:ac:ac:
3a:d2:0f:bd:63:34:01:56:65:79:37:0b:76:f4:e4:f4:8d:ff:
0b:bb:5c:88:c2:8b:7d:d2:88:67:3f:06:ac:1c:49:fa:4e:38:
f6:43:a4:21:7e:a2:25:07:05:ec:72:c7:b0:ed:03:2b:d4:a4:
46:2f:e2:90:7d:3e:34:65:e5:39:15:a5:53:16:04:d2:7e:a6:
26:ca:0c:78:65:70:44:90:a7:34:d7:f2:e9:4e:f9:72:11:15:
f0:33:90:3f:dd:38:95:41:3b:82:fa:ba:d6:d8:ab:4b:ee:6b:
92:19:8f:4b:7f:fe:01:f9:c2:1d:67:6d:1f:51:62:02:6b:01:
71:da:a5:b0:46:24:f4:4d:a1:16:dd:dc:dd:d4:a8:18:32:39:
d5:22:1c:e9:f4:cd:29:b2:f8:32:69:f3:49:d8:d7:40:d5:97:
a2:c1:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:18 2026 by rpki-client