This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa
File: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (raw, json)
Hash identifier: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=
Subject key identifier: 33:1E:94:DE:BC:61:5A:A8:B1:D3:2A:57:93:C1:4F:D9:54:24:CE:EE
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019B7A5B1B463861014336FC550B9C8B40D7
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa
Signing time: Thu 01 Jan 2026 16:19:09 +0000
ROA not before: Thu 01 Jan 2026 16:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.155.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:1b:46:38:61:01:43:36:fc:55:0b:9c:8b:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 16:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=331e94debc615aa8b1d32a5793c14fd95424ceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:27:e8:27:2b:f0:37:c0:a2:70:b1:74:2c:
eb:5e:bd:70:e6:65:a9:d4:3e:d1:64:11:ea:94:c3:
ae:ba:22:6c:db:38:08:f3:38:cf:11:8e:54:95:12:
db:00:de:b2:6f:24:5f:ac:b9:f8:b5:62:b3:78:25:
b9:86:50:54:e6:33:d5:5d:0c:de:df:30:d6:1e:88:
ac:da:6f:1b:f4:ab:db:f8:a4:3b:38:1b:5f:10:e5:
c1:08:32:92:81:d5:41:5b:bc:86:11:ca:0c:a0:ee:
a4:47:5f:6c:78:cc:85:9e:89:e4:47:a8:2c:34:46:
af:61:39:1c:62:24:58:61:50:59:5a:af:74:37:cb:
6a:f3:f6:6e:8d:4c:82:8c:7a:e3:4e:0c:a4:8a:74:
84:42:77:93:9b:e4:22:37:c1:b6:41:a5:65:90:a2:
b0:73:55:40:d7:31:90:b3:34:e0:43:af:60:98:d0:
3f:f6:28:89:bc:90:9a:5d:eb:c1:36:f5:5d:be:f9:
b4:2c:09:c4:62:18:b8:d9:d8:d1:cf:f4:94:06:0d:
e5:fe:25:e6:75:6b:21:1b:c7:5f:04:69:6b:cd:2b:
57:47:57:d5:cf:81:11:b2:27:76:9b:34:19:23:88:
22:d6:31:f7:5e:d9:e8:92:aa:a2:61:76:10:dd:cb:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:94:DE:BC:61:5A:A8:B1:D3:2A:57:93:C1:4F:D9:54:24:CE:EE
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
37:be:12:cf:cc:47:68:6e:3f:34:11:d5:26:97:0a:2a:77:83:
d4:1e:94:26:f8:01:cc:59:e6:eb:9b:e1:22:db:34:a7:4f:3f:
e7:b4:fb:de:af:d5:e6:ac:56:92:1f:51:99:b9:03:e9:e5:19:
2a:52:e7:c6:c5:67:86:c0:e0:f8:86:30:43:4b:70:4d:1f:53:
bd:e2:0e:bc:da:9a:6f:2f:51:10:99:ff:a8:8c:46:d0:b1:ea:
4b:da:ad:65:72:24:c7:1c:cf:ac:be:a1:04:7c:e1:47:79:49:
89:6d:3c:a8:03:db:1b:99:ed:dc:9d:5c:99:7a:48:ec:79:71:
22:18:25:9c:9d:0f:8a:e7:fa:fe:17:63:e7:a8:e4:09:a6:24:
13:e5:84:58:b3:5e:29:b9:08:f8:7c:fb:77:ac:5d:63:81:40:
32:9f:62:f8:df:4b:11:22:32:b8:75:7e:41:fb:47:33:3b:cf:
15:fb:26:4d:2e:cd:65:89:cd:41:af:f7:8f:7f:e1:00:fc:82:
6a:4d:93:35:4d:0d:df:c9:96:57:ca:47:76:b3:cb:6f:1a:8e:
1a:10:1b:60:a2:33:85:ba:e5:06:73:35:92:41:63:71:d4:11:
c8:3e:b9:e5:5a:2e:03:00:de:09:bd:89:40:9f:b9:55:43:4e:
92:b1:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:51:36 2026 by rpki-client