This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa
File: DQIguyk5vsbJ0WUq91-VKOsHIzc.roa (raw, json)
Hash identifier: 7wVw6qQqVdHA1hWjDiCXVImmM58vnAnP1SdP0652WV8=
Subject key identifier: 0D:02:20:BB:29:39:BE:C6:C9:D1:65:2A:F7:5F:95:28:EB:07:23:37
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 019B7E373BFFAF7EEBFFE8E58D3FDF2EA82C
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa
Signing time: Fri 02 Jan 2026 10:18:27 +0000
ROA not before: Fri 02 Jan 2026 10:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203391
IP address blocks: 45.83.248.0/22 maxlen: 24
45.83.248.0/24 maxlen: 24
45.83.249.0/24 maxlen: 24
45.83.250.0/24 maxlen: 24
45.83.251.0/24 maxlen: 24
185.136.96.0/22 maxlen: 24
185.136.96.0/24 maxlen: 24
185.136.97.0/24 maxlen: 24
185.136.98.0/24 maxlen: 24
185.136.99.0/24 maxlen: 24
2a06:fb00::/29 maxlen: 48
2a06:fb00:1::/48 maxlen: 48
2a06:fb00:2::/48 maxlen: 48
2a06:fb00:3::/48 maxlen: 48
2a06:fb00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:3b:ff:af:7e:eb:ff:e8:e5:8d:3f:df:2e:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Jan 2 10:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d0220bb2939bec6c9d1652af75f9528eb072337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:67:56:76:2d:71:16:60:ce:31:37:2b:62:
cc:90:42:cd:2b:64:e6:16:a5:bc:c1:43:37:4e:7c:
73:98:9e:33:54:1b:89:e1:7b:ca:b7:85:d4:16:1f:
a4:7b:21:04:30:45:fb:f7:47:c0:17:64:4a:93:1d:
55:84:a6:5b:b5:04:47:c6:b1:de:26:60:75:ef:43:
c8:d9:a7:7f:53:57:6d:92:2e:1f:4c:46:7d:59:e6:
e8:f2:d2:96:49:03:83:43:db:f2:d5:42:15:4a:ce:
63:73:37:72:6b:91:b2:46:55:3e:a2:ae:41:48:ab:
3c:83:5c:0e:0f:b9:20:51:67:16:86:38:dd:58:ac:
07:da:70:95:3a:50:b9:ae:2b:2b:55:f8:ae:9f:1c:
be:40:52:40:40:ca:9c:4f:ad:f1:1f:8d:38:ec:62:
17:53:1e:1e:bc:28:8e:04:df:88:36:5f:23:14:dd:
95:20:49:4a:30:49:18:7e:01:bb:5e:cf:81:5a:a7:
0a:28:11:bb:1b:4c:df:e9:62:61:ac:d5:94:dc:8f:
f7:f7:e1:19:4e:88:be:31:91:67:0f:f9:6b:00:cb:
1e:9a:91:50:5a:31:43:a2:f0:3f:6a:46:f8:02:3f:
67:cf:32:78:42:26:09:7d:64:16:3e:34:b9:be:72:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:02:20:BB:29:39:BE:C6:C9:D1:65:2A:F7:5F:95:28:EB:07:23:37
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.248.0/22
185.136.96.0/22
IPv6:
2a06:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
5f:05:69:a0:35:41:ef:41:91:ba:24:de:97:37:a5:3b:76:68:
47:87:04:76:63:79:27:33:a1:9f:fd:5c:c0:7b:07:26:26:be:
91:6e:b4:74:3d:e8:e3:95:ce:d3:6a:cc:b8:8d:e8:a3:03:62:
57:37:d7:75:d5:cf:02:bf:ce:cd:0e:27:ca:68:2e:60:e2:13:
6b:e4:d5:27:14:b7:15:34:38:2c:8b:09:c9:b0:df:e3:ab:a9:
58:f9:69:ba:14:0f:49:ba:2b:21:78:b9:f4:fa:42:cd:10:e5:
63:6a:6c:20:b3:6d:0b:b6:1d:7c:38:d6:b2:bf:ea:8b:65:13:
41:4b:5f:db:8c:85:c9:2c:49:6a:61:c0:5e:78:de:b1:87:48:
9c:00:84:65:65:8e:cf:19:17:5a:28:a0:3d:88:6a:b9:db:c1:
6d:ae:7a:a6:cc:82:cd:0e:42:4c:e2:f6:aa:05:3d:66:94:e1:
b2:0c:d6:2a:8d:2c:9d:c3:92:82:96:dc:a3:84:4c:0b:7e:bc:
5d:65:16:31:78:6e:8d:5d:7d:1a:76:42:04:c1:72:9e:f8:c4:
32:1a:98:f0:49:62:7f:26:2a:ea:df:cc:6b:a8:16:91:24:10:
63:98:10:6f:ef:4e:e2:fe:e1:7e:dd:cf:f9:ee:2a:f2:79:55:
3a:01:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:09:18 2026 by rpki-client