This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa
File: r49ZEDE6WWxNrXEhESIxvZobJt4.roa (raw, json)
Hash identifier: DK7S0gOLstB9fTfPHhimalpV0TB0R2sQM6XVh6ZJuu0=
Subject key identifier: AF:8F:59:10:31:3A:59:6C:4D:AD:71:21:11:22:31:BD:9A:1B:26:DE
Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial: 019B7DCAC8A8603D38A142B5215E8F6A6F26
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa
Signing time: Fri 02 Jan 2026 08:20:00 +0000
ROA not before: Fri 02 Jan 2026 08:20:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204475
IP address blocks: 185.155.84.0/22 maxlen: 22
2a0d:ac80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c8:a8:60:3d:38:a1:42:b5:21:5e:8f:6a:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1693737a01469c95011d697392565916045d3a20
Validity
Not Before: Jan 2 08:20:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af8f5910313a596c4dad7121112231bd9a1b26de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:bb:4b:b3:52:9e:69:37:a6:0c:be:4e:61:
a0:45:a1:71:01:a6:fd:02:79:f1:cf:32:18:d4:5f:
40:c8:b3:5a:4e:11:68:77:4f:98:0a:fe:9d:2c:97:
87:22:56:5b:94:93:3a:55:da:26:04:b7:47:07:58:
a1:0d:99:58:df:5c:47:ff:ee:ad:a0:8f:58:7b:c3:
53:10:de:a7:b7:61:36:ba:5d:5c:4d:71:3d:6d:88:
de:be:85:e9:d4:92:02:2d:e1:f1:d0:d6:53:89:34:
1b:62:18:54:d6:4d:14:75:20:0d:b3:4c:b0:35:b5:
ec:26:30:c5:a6:af:45:dc:36:f5:77:99:10:61:c0:
98:59:ca:48:3e:05:97:c1:ed:79:4f:7c:7c:6b:1f:
09:c9:85:58:23:50:6e:0b:42:0c:d7:5c:c6:b6:b8:
eb:a3:78:5a:f4:c3:11:3a:ca:dd:89:3d:f7:47:d7:
13:38:f0:62:d5:7c:93:08:b0:45:9c:5f:21:3c:b2:
97:cf:91:92:a5:9f:3c:ff:51:f2:e1:1f:b8:6b:eb:
93:c3:61:12:ae:2d:f9:3e:e2:6a:57:7d:c0:25:77:
a0:c0:a1:b1:0f:06:bc:80:04:c0:3d:b6:ff:f3:06:
bf:c1:11:1f:73:5c:83:bf:ab:61:01:0f:f8:c1:47:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:59:10:31:3A:59:6C:4D:AD:71:21:11:22:31:BD:9A:1B:26:DE
X509v3 Authority Key Identifier:
keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.84.0/22
IPv6:
2a0d:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
86:2a:e0:4f:8b:e1:68:62:83:fa:43:70:9f:52:03:d8:2b:ea:
6a:1d:46:59:ee:d4:ce:67:7b:2b:af:f1:c4:2b:8a:26:97:b6:
d8:eb:da:70:df:08:cf:7b:de:d9:81:72:7b:3a:59:5d:89:cb:
51:dc:73:c5:34:52:be:f3:81:07:ed:da:4e:8e:56:65:fa:cd:
f6:f8:77:38:73:32:d0:ac:af:d3:d4:4f:89:3f:f5:de:c4:8e:
89:d4:10:c4:57:e4:2d:3c:bc:e7:15:a2:43:47:c2:d7:53:05:
c2:1f:b9:f8:e5:f6:99:0e:8c:8e:6b:b2:b5:51:82:74:8d:c1:
eb:0b:2f:e6:0f:ee:fe:f1:04:d5:00:43:16:d2:d6:04:ec:0f:
80:34:68:2f:bc:a3:e9:39:0e:6a:57:a6:f3:76:a3:7e:6c:7b:
13:8d:a4:15:13:72:67:d3:d5:08:da:29:b8:0e:e0:03:f4:8f:
11:32:3c:b2:64:f5:78:ab:cd:a2:41:e3:06:68:90:b6:fb:57:
66:dd:7a:03:0f:b8:42:7f:0b:47:fb:38:2d:5f:dc:8a:2f:6a:
e4:ca:77:03:f7:b0:26:09:b0:26:ad:54:e2:33:74:46:9f:c3:
e9:3a:60:a3:21:7b:75:4d:28:89:1e:8b:96:e9:1b:22:53:27:
5c:a4:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:16 2026 by rpki-client