This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa
File: RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa (raw, json)
Hash identifier: BE+VwtKl7zKClVOQGTL8tdfzuTZ8z6XoZx7cFV+84EA=
Subject key identifier: 44:F1:10:AB:73:9E:83:C8:37:7F:81:1B:D8:9D:B8:BD:DB:50:DC:33
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 019B7B361865D03DF08070E2D3369E205CF2
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa
Signing time: Thu 01 Jan 2026 20:18:21 +0000
ROA not before: Thu 01 Jan 2026 20:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202788
IP address blocks: 185.154.184.0/22 maxlen: 22
185.154.184.0/24 maxlen: 24
185.154.185.0/24 maxlen: 24
185.154.186.0/24 maxlen: 24
185.154.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:18:65:d0:3d:f0:80:70:e2:d3:36:9e:20:5c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jan 1 20:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f110ab739e83c8377f811bd89db8bddb50dc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:32:25:1a:69:23:5b:d6:93:d4:19:1d:e6:
55:54:34:2b:36:d4:fd:ff:71:3c:0c:fa:8a:d5:71:
d0:09:47:fa:90:cd:cb:cd:e1:ac:61:86:1c:46:22:
10:ac:52:c9:5b:9a:4f:3f:1d:e8:e7:d0:47:88:82:
c7:ae:bb:27:86:a9:ba:73:6e:42:7d:6a:dd:c0:bc:
d2:71:a1:50:cc:6a:f7:19:22:5b:a2:27:f0:35:d6:
f2:fb:9d:d2:9f:d3:b8:fe:99:6b:f5:10:22:7a:92:
20:b6:7f:08:cc:a6:99:a3:1e:55:fb:79:41:aa:92:
ae:a3:16:0f:9d:1e:7b:7c:20:70:0f:1b:30:48:58:
ef:f4:91:95:6e:ad:47:ee:df:12:4a:32:2c:52:d0:
be:67:51:eb:40:37:6f:5d:3a:e4:51:96:6f:75:06:
0b:8d:ef:3e:3d:21:ff:87:3c:2c:db:2d:b7:6e:80:
e5:92:d9:15:dd:3a:26:25:a6:2d:ae:b9:26:08:91:
e6:cb:4a:e0:6b:a3:06:2b:00:7c:fe:7c:af:92:af:
a8:6a:c1:19:4b:8d:c2:83:ec:06:c8:f6:be:bf:11:
16:91:a1:45:c0:6a:22:da:d0:cc:d7:bd:99:9e:56:
f1:0c:21:71:0b:73:78:9c:4a:30:3b:e4:0d:ab:07:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:10:AB:73:9E:83:C8:37:7F:81:1B:D8:9D:B8:BD:DB:50:DC:33
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.184.0/22
Signature Algorithm: sha256WithRSAEncryption
73:78:f9:54:82:f3:8d:ba:5e:08:a5:08:5b:a3:1b:d3:e8:26:
af:7d:35:24:58:29:08:fa:61:49:a3:d1:57:b4:0a:9d:7c:18:
8e:eb:e6:6e:44:da:36:40:bb:f2:6b:68:c3:c8:92:37:1d:35:
59:c7:7d:8e:de:e3:bb:cb:5b:0d:93:cc:63:b9:d4:e8:e8:57:
cf:8c:e8:da:96:9b:d6:a9:be:e1:f5:61:5a:7c:94:3d:9d:f2:
87:35:7f:53:dc:40:bc:e4:f1:05:e7:90:ff:1d:e0:ca:7b:56:
b4:2d:ff:6f:fa:42:9a:9e:5e:16:f2:02:0e:30:19:0d:29:dc:
0f:0e:55:57:3c:97:13:10:9f:23:2f:25:39:b2:9f:ca:be:65:
07:a4:17:2f:0c:7a:5b:1a:63:f5:58:4d:b9:97:6d:96:2f:75:
36:b5:86:c1:16:35:d7:40:53:52:c3:57:ae:0c:a6:ed:6c:fb:
cf:a0:ae:a1:ab:a0:05:dd:c1:05:cf:f5:7b:99:44:27:6f:1b:
75:95:cd:80:e1:a1:fe:b8:3d:06:6c:bb:9c:e8:51:95:8f:1e:
1b:da:c7:03:7b:a5:d5:6b:67:73:61:3b:8d:df:9d:8a:a4:a6:
5c:19:8c:e4:37:0c:4d:0c:d4:f5:c5:ae:bb:ed:96:bf:5e:19:
23:fd:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:27 2026 by rpki-client