This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_b8B9d34D8a-VBxvbZxNTNCfmmk.roa
File: _b8B9d34D8a-VBxvbZxNTNCfmmk.roa (raw, json)
Hash identifier: tqc/IxOt6z9k7TjMYcd7QVAYM0qUYw/xBY2ez4ONLtI=
Subject key identifier: FD:BF:01:F5:DD:F8:0F:C6:BE:54:1C:6F:6D:9C:4D:4C:D0:9F:9A:69
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019B783449E34A0C13030E2BA93D3D241C0D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_b8B9d34D8a-VBxvbZxNTNCfmmk.roa
Signing time: Thu 01 Jan 2026 06:17:31 +0000
ROA not before: Thu 01 Jan 2026 06:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34549
IP address blocks: 185.222.218.0/24 maxlen: 24
2a09:0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:49:e3:4a:0c:13:03:0e:2b:a9:3d:3d:24:1c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 06:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdbf01f5ddf80fc6be541c6f6d9c4d4cd09f9a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:91:fe:90:59:8f:e8:8f:1d:2f:50:17:37:
48:3c:cf:b2:fa:01:d5:a8:5d:05:51:06:23:09:24:
b7:00:9a:c0:e7:91:30:64:49:24:3b:e3:66:ba:65:
2c:73:04:af:b0:21:1b:de:be:83:ea:84:c8:ad:c4:
6e:c3:e5:61:c5:37:e8:00:75:e5:e3:59:e2:3f:8e:
e0:72:bd:46:d4:a3:f1:82:89:d5:8c:d4:2f:51:e9:
df:c8:df:4b:0c:9f:49:64:b7:15:5a:d9:6f:5e:b0:
dd:5e:9b:2f:62:0f:f9:88:ad:c1:fb:02:4a:4e:ed:
60:3b:36:58:54:e6:9b:00:2f:21:a8:38:5a:ae:68:
50:72:51:a5:f5:94:4e:45:d3:1e:04:97:b2:f1:83:
64:cb:cd:b6:5d:ba:96:e2:38:68:dc:c8:17:c3:05:
50:c8:6b:6e:fb:d4:5d:cd:96:22:a1:f0:c1:0d:18:
dd:cc:5e:44:66:04:87:15:bb:62:5f:56:a0:65:23:
f0:df:c1:cc:b7:41:2d:61:f6:3c:94:5a:6f:00:1b:
b0:90:53:63:ad:4d:8e:a9:1d:92:b2:73:b6:f2:26:
ba:d8:06:71:fc:76:d5:45:0d:a3:b5:c5:6a:b0:a5:
1f:a2:e9:71:d0:28:1c:4f:fb:8f:fa:d3:17:7e:b2:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BF:01:F5:DD:F8:0F:C6:BE:54:1C:6F:6D:9C:4D:4C:D0:9F:9A:69
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/_b8B9d34D8a-VBxvbZxNTNCfmmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.218.0/24
IPv6:
2a09:0:13::/48
Signature Algorithm: sha256WithRSAEncryption
00:60:4b:4a:e9:3a:52:1d:5c:a1:bf:a0:6d:f5:92:f6:c8:63:
9d:0e:37:e1:89:5c:42:50:c0:6c:f7:b0:ce:91:2b:e8:3e:e9:
f1:c5:eb:e8:65:9e:fb:45:83:10:74:13:7d:ac:05:83:52:a0:
49:fa:d4:7b:93:ae:c6:e2:d4:c3:95:fe:71:c9:91:70:13:b3:
42:bf:6d:8b:27:41:5b:17:25:e6:63:83:4e:b2:fc:15:9e:2f:
d8:f0:36:2e:3c:23:88:ce:86:f7:49:b1:fd:6b:58:c5:b7:fc:
db:df:ae:0e:4f:4c:60:42:32:b7:a6:fe:7c:5e:c7:50:26:45:
43:c4:44:ec:87:4a:58:c4:8a:23:9d:ed:ca:5e:89:77:6f:2e:
e9:4b:1e:9f:54:f7:a4:42:f5:78:18:3c:66:48:c0:b5:cf:b1:
b4:41:f7:40:4c:dc:61:cb:34:e6:32:21:b4:f2:70:d0:4f:55:
e9:3d:77:c4:ca:bc:24:95:ce:14:e4:b9:bf:a9:eb:07:30:d2:
f7:59:5b:ad:cb:af:6e:be:36:7b:17:6f:28:f6:9c:57:79:30:
ef:c1:a2:d5:14:59:76:7d:32:e3:27:6f:41:9b:17:13:14:c3:
19:0e:29:1d:ae:16:05:cd:ac:84:c7:09:af:b1:90:5f:00:51:
c1:f3:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:48:58 2026 by rpki-client