This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa
File: pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa (raw, json)
Hash identifier: Tb4DafAqkHk2LhEolFtqXJ4NxI34mPUG6zMArDdgQBU=
Subject key identifier: A4:1F:0A:AB:F5:8F:32:DB:33:9A:BB:91:A6:63:B4:0C:92:78:24:CB
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 019B7F83CCE30FFB494F5245DE93C2E68B10
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa
Signing time: Fri 02 Jan 2026 16:21:42 +0000
ROA not before: Fri 02 Jan 2026 16:21:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52179
IP address blocks: 185.138.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:cc:e3:0f:fb:49:4f:52:45:de:93:c2:e6:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 16:21:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41f0aabf58f32db339abb91a663b40c927824cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:aa:a5:0a:d5:77:9a:8b:56:7e:9e:41:9e:
e4:61:8f:ce:e8:a0:50:5c:40:a9:2d:7b:5e:a3:61:
73:02:da:05:9c:c8:55:4b:10:02:d4:28:9c:76:44:
63:54:9c:9a:a3:ac:92:1d:ee:a4:2b:96:1c:44:a4:
41:35:55:51:b5:a7:72:6d:8d:ff:f1:0d:b4:ce:e3:
9b:61:99:05:43:0a:17:8c:3e:27:c2:67:b0:47:bf:
b5:f9:20:dc:85:4f:e9:69:23:35:d8:0f:7a:c2:c3:
ef:47:4a:15:ab:f1:4d:f0:3e:eb:ff:7a:00:63:5e:
29:6c:b5:2d:a1:6d:e0:01:c7:c9:87:72:fa:c2:3d:
da:e5:fe:83:07:0c:f5:5a:ad:9a:85:36:72:41:3e:
4e:b2:29:b8:f4:39:31:28:b1:c8:ed:80:0c:8b:c3:
5b:80:b8:5a:23:fa:9b:7d:f7:ff:88:c9:d8:14:38:
e8:49:3d:31:50:35:89:ec:e7:54:a1:2b:23:82:ed:
6f:4c:1e:c8:6d:d7:38:e2:68:21:cb:db:4c:6a:ff:
e5:22:c6:67:8f:00:e0:e7:3b:4c:7c:ab:a5:80:38:
d4:f3:b3:d4:19:31:58:f6:23:92:c4:a5:7c:f7:ff:
e6:82:96:78:cc:24:91:ec:f2:38:0b:a8:db:a9:eb:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1F:0A:AB:F5:8F:32:DB:33:9A:BB:91:A6:63:B4:0C:92:78:24:CB
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/pB8Kq_WPMtszmruRpmO0DJJ4JMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a7:39:1d:7c:c9:64:37:4a:ad:70:66:86:77:a2:1e:93:a9:
f1:7d:4f:f0:6a:8b:42:29:06:d3:ff:fc:9a:56:99:4c:88:16:
21:75:e7:31:f9:a6:18:8f:d4:46:61:6c:97:cd:fa:61:1c:c0:
e9:9e:0f:e8:1e:c5:30:f0:6a:de:8f:d8:29:94:4b:56:28:a7:
61:79:41:d2:8e:f9:6b:4d:5a:b5:83:8b:ce:19:05:aa:8c:94:
ae:91:f8:3c:57:3d:75:f4:05:cd:76:b5:47:ca:10:f0:9a:d3:
7b:6f:90:ea:a7:91:84:b9:1b:f7:e5:17:29:2c:d6:24:a9:1a:
90:1f:f3:18:d4:7d:e4:f0:0b:9e:b7:b3:47:0f:a2:f3:23:e7:
76:1b:d2:c6:75:dc:76:9d:e2:97:ea:8c:e1:ca:32:bf:81:f2:
8b:6e:2a:2b:ae:8b:fe:6e:6b:32:00:3e:88:cd:75:43:e0:f3:
f1:c4:a6:4f:7d:07:6b:ca:ab:22:c7:5e:cc:95:e3:9f:b7:86:
75:bf:2c:0f:c1:fd:f0:7b:c2:50:43:30:2a:12:75:48:c7:5e:
16:c8:3f:28:56:d9:b9:9e:3f:b2:37:4c:c8:e6:d9:9f:42:46:
74:a1:26:fd:65:c7:ca:d3:56:41:1f:90:09:18:ff:d3:f7:ad:
1d:be:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:15 2026 by rpki-client