This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa
File: xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa (raw, json)
Hash identifier: 1YoX58ZefTtFX3+XWJhCdTPpLJ5zr3exgVffIofs4kE=
Subject key identifier: C4:9E:BE:BD:FE:C2:BB:F1:18:9B:14:91:0F:12:84:C9:36:40:D8:2E
Certificate issuer: /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial: 019B76EAF19382D93FB9147291EA8D92587F
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa
Signing time: Thu 01 Jan 2026 00:17:47 +0000
ROA not before: Thu 01 Jan 2026 00:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203901
IP address blocks: 185.101.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:f1:93:82:d9:3f:b9:14:72:91:ea:8d:92:58:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
Validity
Not Before: Jan 1 00:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c49ebebdfec2bbf1189b14910f1284c93640d82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:ed:80:3a:ce:72:c3:7f:ee:09:31:ce:d8:
26:ad:50:aa:4b:2f:0f:b6:96:06:d7:ae:df:23:2c:
76:97:6c:49:84:52:ae:a2:6d:d8:6e:5c:c3:30:a8:
32:76:ea:b5:5f:2d:57:d6:58:4f:58:3c:b8:fc:6f:
c2:83:4a:d1:b1:8c:8c:a4:b1:6a:5e:a6:cc:a3:18:
d2:d4:2b:1d:d7:9f:72:87:40:f8:1f:98:8d:99:eb:
55:b6:98:65:49:23:08:d5:35:40:40:ab:57:ae:fc:
83:67:88:92:86:90:e3:ed:71:d0:8c:82:f2:b5:6b:
49:9d:c6:b3:88:63:47:eb:10:bf:7e:1e:51:c9:b5:
91:8a:f1:6a:e7:a3:aa:f7:5d:3d:44:57:8b:d3:f8:
c0:37:3d:70:95:84:3a:24:3b:e6:a3:e8:f9:e9:a1:
5f:3d:20:52:db:b7:e2:20:69:28:ca:44:a6:af:ec:
c8:0d:56:50:e0:3f:12:ca:c1:b8:71:34:f4:30:ae:
b2:01:28:3b:19:d1:3e:5f:b4:e9:ed:73:27:42:b8:
4d:c3:d9:9b:0f:27:4d:6a:c7:8c:04:9f:ab:b4:9a:
d7:39:78:a9:c7:57:0f:e9:6b:8e:df:a8:0b:0b:32:
49:d1:f2:e8:14:e7:e2:a1:16:02:c8:fb:77:87:8a:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:BE:BD:FE:C2:BB:F1:18:9B:14:91:0F:12:84:C9:36:40:D8:2E
X509v3 Authority Key Identifier:
keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/xJ6-vf7Cu_EYmxSRDxKEyTZA2C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:15:3b:8c:73:c9:fc:78:26:2e:40:65:19:a5:0f:fd:4a:d5:
90:5e:fc:a2:95:ef:90:f3:79:5f:bb:08:24:af:7b:fc:ed:11:
83:95:08:5f:12:e9:e2:c7:f9:7d:53:37:85:f9:73:b9:d8:42:
4f:cb:b7:2f:44:1f:db:3a:71:c9:57:4b:e1:df:45:cd:6a:b8:
fb:3c:fa:b8:fa:72:9c:b0:c8:58:b9:59:69:dd:a9:87:bf:41:
4a:e1:96:14:e8:e0:29:23:4e:25:1b:87:e9:bb:6f:69:e5:20:
24:28:e4:fb:32:dd:44:74:c5:12:ea:c9:64:92:1f:36:a9:ef:
f4:64:77:d6:b3:67:8b:3f:f9:b9:10:58:14:ff:89:4a:8c:f9:
28:0d:ae:01:0e:ee:b6:21:df:6b:cf:14:34:7f:cb:29:01:e5:
d4:e3:80:bb:89:13:0b:e4:57:21:a0:6b:84:04:f8:ce:94:ab:
40:c8:ba:4b:db:67:f8:8c:3a:b5:d3:3c:8a:d2:8c:e4:3a:ad:
1a:3b:46:91:b2:04:ab:0e:4a:49:3a:08:6c:ff:82:62:b2:0f:
72:5c:cb:da:51:51:06:e0:5a:fc:db:7d:15:0a:7b:32:a7:19:
b8:68:a7:35:45:f8:65:a2:e2:10:89:d8:3a:f6:b6:10:b4:12:
a8:d4:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:57:53 2026 by rpki-client