This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa
File: kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa (raw, json)
Hash identifier: 2qdtkJ2lC31a0rLZJKYXNaFAckA2VphgyMCHPFOQIyo=
Subject key identifier: 91:B6:18:4D:FD:BA:41:DC:B2:F2:18:47:15:6E:3F:46:3C:12:41:60
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019B7E388075FB419D358301B7178020C0ED
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa
Signing time: Fri 02 Jan 2026 10:19:50 +0000
ROA not before: Fri 02 Jan 2026 10:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 185.187.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:80:75:fb:41:9d:35:83:01:b7:17:80:20:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jan 2 10:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91b6184dfdba41dcb2f21847156e3f463c124160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:d3:3d:58:44:cd:7c:55:62:4f:e3:77:9d:
df:99:3a:d0:2e:e6:be:fe:2f:f4:34:c5:91:48:cf:
7d:27:fb:70:2c:14:e7:ee:76:67:d0:17:8d:8f:ca:
f6:ba:58:58:2e:c5:14:a1:94:f1:45:88:0d:b8:cb:
df:a0:7b:51:8a:28:d2:90:76:5f:58:c8:24:f4:f7:
9a:e4:b6:4c:dd:0a:48:b9:ac:71:4b:d0:a5:69:f9:
38:14:32:51:8e:0f:b4:a5:32:06:9b:4a:92:ff:95:
98:a3:0d:0a:66:02:35:1c:54:d3:a6:1f:c1:33:57:
ac:c5:24:b4:86:10:cb:65:0e:6c:17:db:20:89:c2:
e8:97:a0:b5:1e:0b:63:c6:6c:5c:b9:ca:d7:d4:40:
94:01:db:3d:75:b7:42:13:c0:a1:45:c7:32:80:6c:
cc:57:b8:1c:28:ca:28:df:1c:c1:ad:84:95:65:fc:
36:35:ec:96:c5:29:fa:00:f1:7a:d3:fe:dc:6d:0a:
0a:7e:2e:d8:59:49:2c:3d:b4:26:5b:5d:61:f3:18:
60:b7:8b:42:e3:5f:28:bb:82:59:e9:bd:2d:6f:03:
10:46:d4:9e:83:4a:8f:b9:26:fd:91:cb:8d:12:9c:
32:cc:1a:f3:47:74:61:ff:e3:f3:12:67:b0:4b:c9:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:18:4D:FD:BA:41:DC:B2:F2:18:47:15:6E:3F:46:3C:12:41:60
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/kbYYTf26Qdyy8hhHFW4_RjwSQWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.36.0/24
Signature Algorithm: sha256WithRSAEncryption
25:45:4d:bc:f6:a6:0c:ae:94:ec:bf:7d:9c:27:ce:68:8c:05:
75:6e:61:50:63:d7:b7:9d:80:4d:4f:f5:db:91:b9:b9:d5:9a:
39:4a:89:90:f9:4c:23:53:0a:5f:52:03:be:28:fb:b6:f6:45:
e5:32:a6:59:70:b1:21:a3:87:da:13:22:55:c5:98:09:5b:45:
fa:9c:ed:9d:c3:9d:5e:1c:bc:f3:f9:50:80:d8:b2:b2:ca:e8:
1c:94:71:d2:a5:23:98:0f:76:69:ef:f3:d4:05:2a:50:ee:e6:
6b:02:9c:27:8c:4f:c0:02:6e:e8:f5:54:7d:0e:39:9e:53:7b:
33:3c:d7:cd:83:55:d6:e2:03:59:d0:d1:9e:b9:53:92:5d:03:
17:92:5a:77:0f:8d:cb:23:70:7f:5d:a5:f6:ee:17:ec:e6:f0:
e0:e3:69:14:bf:b7:02:a3:85:d0:a5:5f:72:86:ff:84:af:e5:
62:e1:6a:10:d5:da:1f:23:84:8a:42:cc:0e:06:41:8d:7c:af:
70:af:44:20:86:84:69:57:51:8e:39:e3:6b:0b:8a:37:6a:4c:
c3:be:0b:dd:72:76:89:10:f1:2a:ad:00:d5:d8:7a:6a:9e:f0:
1d:8c:b0:3c:fd:1d:97:b7:47:0f:07:95:88:e9:f7:7c:17:df:
7c:85:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:24:19 2026 by rpki-client