This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa
File: vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa (raw, json)
Hash identifier: t2ZzFO0nJIlbwEhCbNQmoDzuwTVLWr9QOVPPYIko4ls=
Subject key identifier: BD:9D:09:9D:B1:A4:43:28:14:D9:8F:02:0A:94:EB:F6:27:20:AD:4E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019B7E37EEF73DA202F6FA9EA45D34CCC61A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa
Signing time: Fri 02 Jan 2026 10:19:13 +0000
ROA not before: Fri 02 Jan 2026 10:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211056
IP address blocks: 185.215.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ee:f7:3d:a2:02:f6:fa:9e:a4:5d:34:cc:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 10:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd9d099db1a4432814d98f020a94ebf62720ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:bc:d1:99:db:c4:d9:a7:c3:85:97:88:ce:
92:75:d7:31:b0:d3:78:60:f1:52:39:c1:61:d8:ab:
3b:05:9c:24:e9:26:1e:bb:8e:f1:88:0f:a5:24:0f:
30:9c:67:19:d4:cb:56:d3:b3:fc:eb:1b:c8:04:fd:
2f:24:21:a0:d9:57:da:04:de:0d:12:17:04:91:12:
b7:a7:fe:5c:38:ae:ed:1c:25:23:34:0c:b3:cd:26:
a5:69:ad:bd:ee:6a:64:40:fc:28:ca:cc:cb:ab:d0:
01:3a:4c:b9:8a:9b:88:34:50:8a:bf:73:6a:ef:12:
e3:5b:87:8f:ce:6f:f5:19:7c:9e:f8:e5:96:0d:ca:
b5:96:60:9f:d7:22:8e:2f:b5:ba:13:53:be:7f:af:
67:08:18:05:cf:a0:9a:79:3c:b0:8d:dc:5f:88:b0:
d6:49:73:cc:51:47:09:8f:a7:07:55:14:ba:fe:b3:
63:bd:d8:0e:37:88:0b:d3:c0:9f:af:96:20:78:a1:
a6:59:e4:cf:e3:2d:fd:6d:9c:63:f9:fd:01:bb:e8:
a6:21:b2:73:cd:81:e9:f5:9f:2e:ac:ed:c4:3a:7b:
cb:ba:19:03:bf:09:11:a5:93:bd:1d:29:39:65:b1:
40:0e:ca:e8:2c:24:16:51:79:b1:d5:03:be:5a:21:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:09:9D:B1:A4:43:28:14:D9:8F:02:0A:94:EB:F6:27:20:AD:4E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:49:c2:74:46:2e:50:55:aa:02:ee:4e:37:91:3b:ae:a7:59:
bd:76:9b:af:52:7e:d8:f7:f1:ba:8d:6f:65:c4:3d:81:f6:84:
4d:bf:1b:4a:db:ba:ff:ca:a4:3e:37:ca:f9:43:67:81:7c:58:
29:d1:fc:dd:1a:d3:10:47:e2:75:51:bf:45:64:e5:2b:bc:05:
4a:9e:d3:50:5a:24:a9:3a:2e:d7:74:29:6d:1a:12:20:7a:76:
fd:c3:aa:2c:5f:65:a4:8a:bb:5e:d9:18:34:7d:60:4c:fb:1f:
6b:67:ba:a3:56:50:e2:9b:87:40:5c:61:b2:24:1d:34:00:43:
49:eb:9b:08:6d:43:1b:39:ba:73:e4:1b:e1:7a:75:2c:5c:90:
ef:de:af:54:12:b0:8b:5a:51:aa:4d:6f:cb:3b:a7:0c:8d:8d:
37:f5:ce:f0:65:11:9f:08:5a:12:42:da:f7:de:d3:a9:3c:cb:
8a:58:10:c8:fc:a3:0e:ea:a8:fe:19:70:5c:e8:b1:d5:34:76:
a9:26:64:57:7e:8f:b0:68:74:69:d0:6c:09:92:ca:97:7d:f0:
8c:c4:83:51:92:9c:db:43:c3:f2:7b:8f:90:5d:fc:80:02:0e:
c6:ff:2c:a7:f0:ca:48:71:ef:fc:25:59:24:73:7c:f5:4d:92:
1a:95:47:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N+73PaIC9vqepF00zMYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDlkMDk5ZGIxYTQ0MzI4MTRkOThmMDIwYTk0ZWJmNjI3MjBhZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXi80ZnbxNmnw4WXiM6SddcxsNN4
YPFSOcFh2Ks7BZwk6SYeu47xiA+lJA8wnGcZ1MtW07P86xvIBP0vJCGg2VfaBN4N
EhcEkRK3p/5cOK7tHCUjNAyzzSalaa297mpkQPwoyszLq9ABOky5ipuINFCKv3Nq
7xLjW4ePzm/1GXye+OWWDcq1lmCf1yKOL7W6E1O+f69nCBgFz6CaeTywjdxfiLDW
SXPMUUcJj6cHVRS6/rNjvdgON4gL08Cfr5YgeKGmWeTP4y39bZxj+f0Bu+imIbJz
zYHp9Z8urO3EOnvLuhkDvwkRpZO9HSk5ZbFADsroLCQWUXmx1QO+WiG7bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2dCZ2xpEMoFNmPAgqU6/YnIK1OMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvdlowSm5iR2tReWdVMlk4Q0NwVHI5aWNnclU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudfmMA0G
CSqGSIb3DQEBCwUAA4IBAQA9ScJ0Ri5QVaoC7k43kTuup1m9dpuvUn7Y9/G6jW9l
xD2B9oRNvxtK27r/yqQ+N8r5Q2eBfFgp0fzdGtMQR+J1Ub9FZOUrvAVKntNQWiSp
Oi7XdCltGhIgenb9w6osX2Wkirte2Rg0fWBM+x9rZ7qjVlDim4dAXGGyJB00AENJ
65sIbUMbObpz5BvhenUsXJDv3q9UErCLWlGqTW/LO6cMjY039c7wZRGfCFoSQtr3
3tOpPMuKWBDI/KMO6qj+GXBc6LHVNHapJmRXfo+waHRp0GwJksqXffCMxINRkpzb
Q8Pye4+QXfyAAg7G/yyn8MpIce/8JVkkc3z1TZIalUfD
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:33:26 2026 by rpki-client