This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/antdIoiZjHuYWIPE0lbINVR7LM4.roa
File: antdIoiZjHuYWIPE0lbINVR7LM4.roa (raw, json)
Hash identifier: zzoqx+mD+wgU8qtd5pYOql61oJEO2Kr8zeQk2T0A+rQ=
Subject key identifier: 6A:7B:5D:22:88:99:8C:7B:98:58:83:C4:D2:56:C8:35:54:7B:2C:CE
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019B7F8218F9D97D53F844BBB0EF920B958B
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/antdIoiZjHuYWIPE0lbINVR7LM4.roa
Signing time: Fri 02 Jan 2026 16:19:50 +0000
ROA not before: Fri 02 Jan 2026 16:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 185.94.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:18:f9:d9:7d:53:f8:44:bb:b0:ef:92:0b:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Jan 2 16:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7b5d2288998c7b985883c4d256c835547b2cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e1:c9:9e:21:02:84:c6:7f:95:35:b5:1a:f8:
cc:c9:f8:8d:bd:7c:54:37:5e:ee:89:6c:49:cb:19:
60:b9:42:8e:29:ae:00:46:21:84:f0:b8:16:1a:a0:
54:ae:fb:26:0a:e9:ee:e1:63:45:b6:0e:20:e6:58:
e3:2d:fe:c8:23:71:01:52:c8:79:b4:b0:6c:b5:78:
12:20:b3:f9:e6:55:3b:1b:28:c3:13:29:1d:e8:dd:
bc:f7:72:cc:df:e5:c7:ae:43:aa:a4:0f:38:fb:d5:
2f:56:a6:23:ac:09:d8:60:36:c4:fa:9f:e8:37:48:
34:b1:68:a0:fb:90:66:a9:82:d3:28:b2:e4:9e:c2:
90:29:85:84:d4:6a:dd:4c:ae:d8:14:81:f5:d1:46:
0d:26:9e:5e:0a:df:a8:b1:4c:68:64:04:09:1f:3d:
53:b3:0d:ab:e9:6e:5e:88:1c:34:e0:0f:d0:a8:0c:
b7:e7:e2:84:96:12:f7:3a:62:f1:82:1b:4f:8e:fd:
8d:7b:f2:a2:83:fa:77:41:e4:e9:78:2f:46:a8:7f:
a5:10:fa:17:a1:af:c4:28:ec:d3:bd:a2:a4:15:b3:
0a:86:4b:01:21:81:ef:db:e1:88:ca:0f:0a:fc:06:
f0:b8:7e:f0:9c:a2:dc:9e:34:b9:40:4c:41:c3:33:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:5D:22:88:99:8C:7B:98:58:83:C4:D2:56:C8:35:54:7B:2C:CE
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/antdIoiZjHuYWIPE0lbINVR7LM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.180.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fd:72:fb:61:0c:bf:46:f3:ca:9d:ce:86:a0:18:10:5d:6c:
e4:4d:45:ca:bf:7a:29:cb:27:ed:d6:63:8e:10:11:56:6c:1e:
e9:eb:44:22:58:70:6a:63:b9:01:8b:72:06:34:3c:9f:39:65:
51:b1:19:92:2d:cb:c0:38:16:cc:51:2b:5a:6c:24:9c:5e:3a:
5d:05:58:63:ed:be:62:fe:26:fe:85:97:57:9f:47:db:28:9c:
f9:c3:14:5d:a4:18:ec:0f:a2:d4:3e:b8:82:17:75:8a:8c:c6:
2e:ab:e4:83:c4:13:cc:5d:4f:1d:5a:df:f0:db:08:46:05:fc:
a9:2b:f0:e2:ce:bf:e0:2a:23:81:dd:9e:5c:48:00:a7:17:3f:
ac:7f:93:5d:f0:5e:a4:67:6c:b9:e8:43:f3:42:33:48:d7:62:
7a:12:85:6a:b3:e4:1f:48:e5:7f:54:d2:0f:08:64:7c:55:6a:
02:82:a4:8a:d3:c2:12:e4:ba:84:9a:18:f8:04:45:2a:9e:8d:
2f:75:7d:da:f8:14:ad:42:ac:96:20:a2:6f:eb:9b:6b:c8:de:
61:fe:a2:ec:9c:27:2e:52:8d:01:a5:86:36:0b:c1:97:7c:65:
eb:db:d8:b6:5b:1f:59:68:b5:65:c6:0b:f4:2b:b2:c9:a1:cf:
4a:14:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:37 2026 by rpki-client