This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/MP8cv65ITY8cNWNWM9JIwSTr0Og.roa
File: MP8cv65ITY8cNWNWM9JIwSTr0Og.roa (raw, json)
Hash identifier: rx4izqKgskJfzl6CODgjsArLoXvxQVPJAAPmsXR/tZI=
Subject key identifier: 30:FF:1C:BF:AE:48:4D:8F:1C:35:63:56:33:D2:48:C1:24:EB:D0:E8
Certificate issuer: /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial: 019C0B77DCCCB88EDB2467C03EBF581116C2
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/MP8cv65ITY8cNWNWM9JIwSTr0Og.roa
Signing time: Thu 29 Jan 2026 20:35:30 +0000
ROA not before: Thu 29 Jan 2026 20:35:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208734
IP address blocks: 185.144.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0b:77:dc:cc:b8:8e:db:24:67:c0:3e:bf:58:11:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Validity
Not Before: Jan 29 20:35:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30ff1cbfae484d8f1c35635633d248c124ebd0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:93:61:53:4d:00:00:17:65:15:ea:6c:66:
d2:1f:ee:5c:11:39:38:6d:85:0c:22:06:e3:b9:0d:
86:4c:f4:0a:ac:41:f7:34:05:80:f3:f8:3e:a9:b8:
98:e6:92:c9:20:74:37:f3:3b:a8:cd:ce:c0:cb:ac:
30:3e:33:99:d6:77:b4:b6:bd:fb:57:e9:3a:73:ba:
bb:77:47:95:61:08:e0:3c:fe:fa:94:71:fc:13:66:
6a:31:28:e5:ee:21:7c:00:e3:d1:58:06:66:2a:3a:
86:3b:98:cb:fb:78:ec:3f:cd:24:84:e8:99:b6:92:
11:e0:5e:ce:06:28:7d:50:b7:2b:b7:3c:58:45:9e:
fd:89:5d:3e:06:ad:e0:a5:28:31:54:1c:5f:35:e9:
3b:95:2f:17:b0:6a:4c:e6:ae:d6:a5:6b:1b:0a:10:
0e:2e:fd:bd:a0:1e:96:29:a8:2a:d0:68:9a:30:56:
78:27:7c:fb:e4:a4:b5:f7:b4:6b:4c:ca:da:69:3f:
51:25:20:d0:a0:8d:67:f2:d9:b1:e6:ab:e3:3c:72:
a3:aa:9a:4f:e3:7a:3d:69:54:08:78:ef:5e:49:c1:
9f:73:6f:8b:92:a7:58:e2:2c:d9:1b:64:45:24:15:
3b:cf:fa:44:20:b5:95:d9:c8:21:f7:6c:fc:69:a2:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:1C:BF:AE:48:4D:8F:1C:35:63:56:33:D2:48:C1:24:EB:D0:E8
X509v3 Authority Key Identifier:
keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/MP8cv65ITY8cNWNWM9JIwSTr0Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.112.0/24
Signature Algorithm: sha256WithRSAEncryption
99:43:19:99:e1:98:75:da:95:54:3e:75:ae:de:28:10:b5:bb:
a7:a1:9c:c0:4e:41:5e:7e:d2:a7:ef:a3:64:22:99:57:0a:f0:
e4:40:5a:60:76:ce:f5:c2:4f:42:43:73:4b:f8:1e:d0:f2:07:
a0:db:3d:f5:dd:4a:60:55:62:24:95:12:b3:bd:0d:81:84:df:
a2:7c:44:32:68:ac:b3:c9:01:e6:bb:c1:1e:3d:da:c6:1c:c2:
7c:37:e6:51:bd:e3:77:a9:69:55:20:db:fc:7b:77:b1:68:5d:
02:e2:49:cc:92:2d:12:0b:5d:8e:24:97:78:d6:73:79:58:40:
a1:79:a3:ab:7b:40:9a:05:f0:64:6f:77:da:5b:3f:6f:7a:2f:
56:e3:d7:dd:a1:81:a9:e9:84:2a:47:ef:5f:3c:4b:43:e3:16:
a0:9e:f3:52:08:91:db:73:fb:18:43:68:0e:08:dd:80:03:e4:
ca:4d:47:90:d5:ec:ec:21:de:90:6c:91:66:33:62:20:61:80:
f0:b8:44:f8:cd:77:62:b5:1e:5f:6e:07:34:9b:93:32:97:c5:
0b:1d:61:c1:c7:42:c6:ab:01:23:0b:a2:f8:69:26:5f:33:6b:
38:29:ff:a4:4f:7c:d0:5d:83:77:72:40:75:7e:41:d9:0a:da:
33:8b:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:37 2026 by rpki-client