This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa
File: b_y_rOE1QQam257CWGtkHOr-6Kw.roa (raw, json)
Hash identifier: YvhDiuELqEgFsL9eKGZyie6pLZWySNNGa/49rD66WcU=
Subject key identifier: 6F:FC:BF:AC:E1:35:41:06:A6:DB:9E:C2:58:6B:64:1C:EA:FE:E8:AC
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 019B7BA38200B7198F1437EC989A3AC3A5CA
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa
Signing time: Thu 01 Jan 2026 22:17:51 +0000
ROA not before: Thu 01 Jan 2026 22:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213794
IP address blocks: 5.181.189.0/24 maxlen: 24
193.34.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:82:00:b7:19:8f:14:37:ec:98:9a:3a:c3:a5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Jan 1 22:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ffcbface1354106a6db9ec2586b641ceafee8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:ac:af:34:96:cc:72:4a:e0:f8:79:5b:6e:
49:19:66:32:6c:9d:8b:65:25:65:e5:b3:e1:23:85:
44:da:f4:c6:40:95:d2:3f:65:2e:16:18:97:73:57:
e3:b0:98:41:c1:57:34:6b:5a:59:b5:81:25:8a:47:
75:d7:81:a1:42:c1:61:ec:da:76:bf:13:f8:94:66:
0d:84:75:76:38:3e:b6:24:e2:79:16:44:9e:b9:2c:
5c:e3:e1:86:0f:08:b2:f7:a7:04:14:7a:2c:e4:bf:
db:21:a1:a7:bf:fa:cc:7f:cc:40:70:16:6a:d2:42:
26:7f:94:f9:ba:e0:d0:83:a0:49:ce:21:d2:e3:53:
ff:1d:9c:13:91:82:0e:36:b9:64:70:50:61:93:1d:
5b:bf:dd:bf:4a:38:73:06:00:d4:f7:55:d6:36:46:
d7:00:9b:81:b3:fe:7e:38:77:96:3f:ba:08:c2:67:
5a:c8:c6:50:64:25:1f:dd:cb:30:07:73:80:57:4e:
ed:c5:e8:a2:b6:e1:07:a8:08:b4:a8:a7:ad:9f:ae:
fd:1e:ca:d4:7c:7c:91:e6:d4:36:85:a0:9c:66:9f:
e4:7c:e9:3c:ab:8e:6b:77:f5:9e:55:94:7d:4f:3d:
80:ed:85:7b:74:e6:52:eb:f7:1c:41:c8:ee:13:af:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:BF:AC:E1:35:41:06:A6:DB:9E:C2:58:6B:64:1C:EA:FE:E8:AC
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/b_y_rOE1QQam257CWGtkHOr-6Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.189.0/24
193.34.215.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d8:5a:35:b6:c1:de:53:08:a2:fb:a0:e1:e5:32:8a:2c:ee:
96:7d:69:0b:90:4a:97:a4:ed:8c:99:8a:b3:de:9c:fd:82:c5:
78:5d:c2:2a:8f:ec:fc:cb:87:b3:a7:63:df:f2:d9:4e:2a:42:
e9:59:ce:05:af:ef:af:c9:38:52:6a:d1:72:6e:dc:d0:a6:85:
dc:2e:24:3e:54:8c:51:b9:21:48:c5:a1:ba:0a:1e:2f:de:a0:
32:46:55:16:25:b7:01:dd:2e:00:b3:ac:c9:46:30:91:84:38:
63:ce:88:54:c8:8f:5b:fb:cb:48:18:ae:9c:0c:58:45:b9:e2:
11:02:15:fb:d8:8e:bb:e7:f6:05:8d:6d:cb:e4:ef:21:e6:40:
7d:86:b7:47:36:ad:c7:82:a3:be:19:41:70:f2:bf:a3:2b:d2:
26:b9:24:70:3b:00:10:0c:9a:76:8f:0b:10:bc:be:cd:b1:4e:
ec:9d:8a:e1:1b:9f:af:db:8c:ab:3d:20:97:5a:87:d5:c3:38:
c6:44:3d:29:c2:4b:16:a4:15:9e:c4:4a:32:8c:f4:ab:40:4b:
e1:ef:9a:b8:44:7c:ac:b5:19:66:2a:fe:85:6e:4f:2c:90:b9:
e2:4e:b7:66:b5:a7:66:b0:b2:68:f3:dc:71:98:a8:8f:e1:e4:
3a:7f:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:36 2026 by rpki-client