This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa
File: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (raw, json)
Hash identifier: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=
Subject key identifier: 0D:B0:64:70:12:93:2F:05:15:21:16:22:66:83:06:2E:D2:C0:06:A7
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019B7E38C674D8E1C70CFFC250A97E6345A0
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa
Signing time: Fri 02 Jan 2026 10:20:08 +0000
ROA not before: Fri 02 Jan 2026 10:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202934
IP address blocks: 185.205.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:c6:74:d8:e1:c7:0c:ff:c2:50:a9:7e:63:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Jan 2 10:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0db0647012932f05152116226683062ed2c006a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:83:7c:7b:5a:0a:48:28:5a:91:ab:ea:e1:
27:60:ff:5e:dc:fb:0c:ea:05:dd:0b:5a:dd:36:ab:
d5:bb:d0:89:bc:01:d7:0e:9e:da:9c:84:71:ed:15:
5f:02:c5:cd:ed:22:3b:75:eb:bd:f8:99:c0:10:4a:
9a:fc:48:16:f5:96:5d:b7:4e:75:5e:60:2e:83:b8:
8d:40:67:e5:bc:21:03:ff:0e:65:e1:be:d2:6d:ef:
5c:7a:a4:76:46:91:58:2a:56:12:18:16:f7:71:f1:
d8:7e:75:7e:b1:d5:02:bc:1c:53:25:10:99:64:ac:
70:01:ef:cb:12:c2:75:dd:b0:a7:6f:4c:dc:c8:98:
44:c4:fe:c7:4d:f6:29:87:25:d9:eb:ec:32:7e:db:
ab:90:4a:6b:c8:3c:45:50:5f:77:37:44:e7:a9:4e:
0e:fd:ba:a5:1b:c6:c5:31:9b:be:90:87:d4:ac:4e:
ed:c8:14:3b:24:f7:93:62:48:34:9a:5a:25:9a:9f:
b9:78:83:ca:60:25:81:8c:ee:a4:63:ff:16:1b:5e:
e0:e0:91:66:7d:07:c6:ca:a5:11:e8:55:2b:b2:85:
27:b0:96:13:9e:a0:0a:0d:49:1a:50:10:be:6f:1d:
b6:d6:cd:29:39:b7:53:ec:7f:f8:3d:9a:49:fd:4b:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:64:70:12:93:2F:05:15:21:16:22:66:83:06:2E:D2:C0:06:A7
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:be:8d:4b:47:08:3f:62:da:ed:5f:0f:c7:57:9a:6f:4c:b9:
15:24:ff:10:5d:4e:6b:94:fd:ce:3f:5e:7f:fe:e3:90:d2:12:
73:00:57:fd:76:c4:11:e7:f3:c8:1d:d6:ba:94:fe:5c:b3:96:
a8:c8:41:f4:77:a5:29:d7:1f:9e:5e:d4:70:04:25:dd:9d:ab:
88:54:c9:5a:a0:a8:10:e3:c2:43:84:27:01:e3:4b:36:c7:b9:
a4:0c:ec:98:70:00:f5:bc:82:7c:7e:cf:50:50:f9:ee:cf:ac:
ce:63:a0:99:54:37:94:ec:b9:90:98:c3:97:fd:e7:60:b5:eb:
2b:be:e0:cb:0a:11:1e:de:f6:75:bd:8e:6a:72:74:c8:74:25:
a2:d2:e9:9f:76:59:40:6b:5e:72:77:c0:22:8d:01:2d:ad:49:
3d:c0:d6:f3:50:f2:b3:83:f0:bc:77:e4:9c:e0:ae:fb:24:da:
cc:a4:35:a0:52:3f:4f:56:ce:f8:40:d0:62:6e:e7:49:39:76:
7e:a2:3d:0c:4f:c3:71:fe:e4:a9:20:ed:cc:39:71:5d:43:78:
99:5f:c9:b1:0a:eb:6f:57:21:38:c8:cb:96:c3:f1:b5:3c:20:
d3:57:eb:56:7e:ca:d6:20:f5:dd:5c:1c:a2:6d:d5:45:f3:e4:
e8:11:89:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OMZ02OHHDP/CUKl+Y0WgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGIwNjQ3MDEyOTMyZjA1MTUyMTE2MjI2NjgzMDYyZWQyYzAwNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM+DfHtaCkgoWpGr6uEnYP9e3PsM
6gXdC1rdNqvVu9CJvAHXDp7anIRx7RVfAsXN7SI7deu9+JnAEEqa/EgW9ZZdt051
XmAug7iNQGflvCED/w5l4b7Sbe9ceqR2RpFYKlYSGBb3cfHYfnV+sdUCvBxTJRCZ
ZKxwAe/LEsJ13bCnb0zcyJhExP7HTfYphyXZ6+wyfturkEpryDxFUF93N0TnqU4O
/bqlG8bFMZu+kIfUrE7tyBQ7JPeTYkg0mlolmp+5eIPKYCWBjO6kY/8WG17g4JFm
fQfGyqUR6FUrsoUnsJYTnqAKDUkaUBC+bx221s0pObdT7H/4PZpJ/UuFRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2wZHASky8FFSEWImaDBi7SwAanMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEvRGJCa2NCS1RMd1VWSVJZaVpvTUdMdExBQnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc0hMA0G
CSqGSIb3DQEBCwUAA4IBAQB8vo1LRwg/YtrtXw/HV5pvTLkVJP8QXU5rlP3OP15/
/uOQ0hJzAFf9dsQR5/PIHda6lP5cs5aoyEH0d6Up1x+eXtRwBCXdnauIVMlaoKgQ
48JDhCcB40s2x7mkDOyYcAD1vIJ8fs9QUPnuz6zOY6CZVDeU7LmQmMOX/edgtesr
vuDLChEe3vZ1vY5qcnTIdCWi0umfdllAa15yd8AijQEtrUk9wNbzUPKzg/C8d+Sc
4K77JNrMpDWgUj9PVs74QNBibudJOXZ+oj0MT8Nx/uSpIO3MOXFdQ3iZX8mxCutv
VyE4yMuWw/G1PCDTV+tWfsrWIPXdXByibdVF8+ToEYkm
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:22 2026 by rpki-client