This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/RnwkUlCJs9bw50GiSdHn7SGXOeo.roa
File: RnwkUlCJs9bw50GiSdHn7SGXOeo.roa (raw, json)
Hash identifier: 8K20xbc5P6ZWPSIDkIUTcAS1BtzkRFadgOrDQ1YrclI=
Subject key identifier: 46:7C:24:52:50:89:B3:D6:F0:E7:41:A2:49:D1:E7:ED:21:97:39:EA
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 019B7C12B27CD3342E4C5DC58A0E92924F49
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/RnwkUlCJs9bw50GiSdHn7SGXOeo.roa
Signing time: Fri 02 Jan 2026 00:19:18 +0000
ROA not before: Fri 02 Jan 2026 00:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204945
IP address blocks: 185.210.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:b2:7c:d3:34:2e:4c:5d:c5:8a:0e:92:92:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jan 2 00:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=467c24525089b3d6f0e741a249d1e7ed219739ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:86:a3:fd:d7:ca:43:cc:f1:a3:04:06:7b:
fb:61:6e:54:e3:0c:71:72:16:e5:38:31:d6:9b:5a:
2e:b6:1e:23:4d:65:d7:ad:a0:2d:1b:de:1f:86:ea:
19:e3:2a:82:16:c5:83:16:45:d2:43:fe:a2:c4:64:
46:f1:b3:1b:04:06:e1:0c:f1:70:da:ab:67:e9:b5:
55:65:ff:6b:28:17:28:a6:3a:59:7d:f1:98:9f:67:
e7:c0:dc:b2:61:47:20:b3:cc:0c:94:45:8a:2d:86:
17:02:d4:69:bd:cd:76:c3:ae:a7:19:25:ad:78:95:
25:d2:f4:c5:53:8d:3c:13:c7:d1:51:33:09:7c:f5:
fa:24:2a:3d:33:4d:77:26:a8:c3:16:02:63:1f:58:
19:ba:c8:05:27:ba:e8:d0:7e:c0:11:85:0c:05:c8:
91:24:9b:6e:b6:ee:4d:95:3f:b2:4a:e8:36:e3:91:
05:37:92:88:73:35:38:c4:ca:6e:03:ef:fd:1b:91:
4f:0e:b8:ed:0d:3f:c3:6b:b5:83:b4:93:24:bb:15:
65:0e:a0:2a:5f:30:ca:56:d2:4f:80:e5:bc:bd:19:
d6:04:6d:7a:32:71:e8:20:67:33:ff:57:3a:ae:50:
05:69:4c:0e:f8:51:1d:75:19:6d:b3:10:60:d2:d9:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:24:52:50:89:B3:D6:F0:E7:41:A2:49:D1:E7:ED:21:97:39:EA
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/RnwkUlCJs9bw50GiSdHn7SGXOeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.116.0/23
Signature Algorithm: sha256WithRSAEncryption
49:dd:91:19:9d:e7:59:36:b0:0e:fe:bc:07:52:52:d0:66:4f:
34:81:63:42:4f:51:a4:a6:ae:34:09:3d:22:d9:7c:9e:70:35:
97:98:c3:e3:45:a7:7f:43:19:3c:f1:b4:d0:48:43:af:7f:fd:
b9:0d:cf:83:74:43:f5:81:24:4f:82:d8:0d:db:c3:af:e5:54:
10:1a:dd:c8:28:9a:2f:d0:f0:ce:36:6b:8e:d7:fc:cb:4d:fc:
0e:90:ae:8a:fd:6e:49:d7:6a:5b:de:3e:de:30:26:6d:5d:0b:
b5:54:56:53:a7:b9:4f:c8:ea:a0:f9:54:5d:bd:d7:ff:8e:57:
df:6a:ab:0e:23:33:0e:03:5d:e6:8f:a2:24:f4:11:1d:31:ac:
e4:9a:5f:ef:3f:87:bd:b1:07:d6:d7:e9:89:d0:cc:61:5e:ff:
30:b2:ba:9e:2c:66:98:a4:4f:0d:c7:9b:00:dd:0c:29:ce:8f:
2d:80:b8:21:c0:9e:8a:83:c3:5c:ca:96:58:86:74:7c:b4:50:
92:d0:c9:2b:95:c6:13:b6:5c:61:27:48:cb:85:c9:af:8f:48:
37:66:b7:e7:b9:5d:e9:c9:b4:d0:c6:94:07:5a:3a:e8:37:03:
29:7d:6c:fb:9c:6f:46:ba:f3:5e:9c:90:31:2f:dd:cd:90:b1:
68:28:14:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8ErJ80zQuTF3Fig6Skk9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz
YjljN2UwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjdjMjQ1MjUwODliM2Q2ZjBlNzQxYTI0OWQxZTdlZDIxOTczOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssWGo/3XykPM8aMEBnv7YW5U4wxx
chblODHWm1outh4jTWXXraAtG94fhuoZ4yqCFsWDFkXSQ/6ixGRG8bMbBAbhDPFw
2qtn6bVVZf9rKBcopjpZffGYn2fnwNyyYUcgs8wMlEWKLYYXAtRpvc12w66nGSWt
eJUl0vTFU408E8fRUTMJfPX6JCo9M013JqjDFgJjH1gZusgFJ7ro0H7AEYUMBciR
JJtutu5NlT+ySug245EFN5KIczU4xMpuA+/9G5FPDrjtDT/Da7WDtJMkuxVlDqAq
XzDKVtJPgOW8vRnWBG16MnHoIGcz/1c6rlAFaUwO+FEddRltsxBg0tlI/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZ8JFJQibPW8OdBoknR5+0hlznqMB8GA1UdIwQY
MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt
MjgzNmFkMWMzMjFlLzEvUm53a1VsQ0pzOWJ3NTBHaVNkSG43U0dYT2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl
LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudJ0MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ3ZEZnedZNrAO/rwHUlLQZk80gWNCT1Gkpq40CT0i
2XyecDWXmMPjRad/Qxk88bTQSEOvf/25Dc+DdEP1gSRPgtgN28Ov5VQQGt3IKJov
0PDONmuO1/zLTfwOkK6K/W5J12pb3j7eMCZtXQu1VFZTp7lPyOqg+VRdvdf/jlff
aqsOIzMOA13mj6Ik9BEdMazkml/vP4e9sQfW1+mJ0MxhXv8wsrqeLGaYpE8Nx5sA
3Qwpzo8tgLghwJ6Kg8NcypZYhnR8tFCS0MkrlcYTtlxhJ0jLhcmvj0g3ZrfnuV3p
ybTQxpQHWjroNwMpfWz7nG9GuvNenJAxL93NkLFoKBTL
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:22:38 2026 by rpki-client