This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/StxoWp_RJ1797k0oHsjoVvZHf10.roa
File: StxoWp_RJ1797k0oHsjoVvZHf10.roa (raw, json)
Hash identifier: nD5a2Jb4fZiufTRyTRxdHS8BCxtbGh40rJHL37nPIac=
Subject key identifier: 4A:DC:68:5A:9F:D1:27:5E:FD:EE:4D:28:1E:C8:E8:56:F6:47:7F:5D
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 019B78A281CAF2790A4D9E876AE23BE33A09
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/StxoWp_RJ1797k0oHsjoVvZHf10.roa
Signing time: Thu 01 Jan 2026 08:17:54 +0000
ROA not before: Thu 01 Jan 2026 08:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60876
IP address blocks: 185.166.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:81:ca:f2:79:0a:4d:9e:87:6a:e2:3b:e3:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Jan 1 08:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4adc685a9fd1275efdee4d281ec8e856f6477f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:ec:d3:87:e9:4c:db:fb:84:ee:16:e2:b1:
a7:5e:21:8e:f3:89:03:53:e4:e6:da:59:d3:58:be:
c4:c7:99:1b:76:6c:75:8e:21:8c:27:0b:a1:c2:c1:
49:13:ac:e5:de:20:95:64:b8:89:ad:25:81:bb:b5:
08:f4:79:9c:ff:ee:be:2f:35:bb:25:5a:b2:03:62:
27:68:f1:e0:72:94:35:21:77:b3:ad:a0:a2:ee:85:
43:bc:ba:cd:f7:92:8d:b0:2b:50:08:3b:a9:06:e3:
6e:a1:7b:f4:90:c9:d2:22:b9:bf:de:b4:22:fc:76:
c0:28:c9:1e:55:d7:ed:93:35:4d:a4:c9:a6:66:07:
f8:8c:ea:b2:f4:33:95:72:4f:c1:44:1e:b4:01:09:
98:07:0f:ee:88:d5:88:c0:f0:e1:ac:e2:43:8e:a7:
80:dc:ab:e9:37:1f:ab:15:15:de:73:6a:6f:cc:67:
c5:5c:17:7b:6b:2d:c3:af:b4:a8:23:8c:57:a9:d6:
d2:f7:e8:83:c5:c9:de:84:cf:4f:4f:71:40:ed:b1:
bc:6d:dc:21:5b:9d:34:ef:e3:f8:03:48:d4:e6:2c:
51:7c:67:8e:8b:e1:aa:29:b6:72:01:d8:37:e5:c1:
d5:3e:44:f4:5d:4a:81:f5:ac:8f:99:05:85:2f:ac:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:68:5A:9F:D1:27:5E:FD:EE:4D:28:1E:C8:E8:56:F6:47:7F:5D
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/StxoWp_RJ1797k0oHsjoVvZHf10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.120.0/22
Signature Algorithm: sha256WithRSAEncryption
20:82:57:7a:b5:f4:fc:b9:7f:cc:dd:5d:d3:b7:83:5f:3c:09:
89:3a:fc:e6:9b:55:7d:66:6d:a7:94:3a:e5:69:de:63:4d:4b:
88:61:7f:2b:ae:45:a5:d2:5d:5a:8a:f0:94:2f:bc:46:c9:5a:
ea:8c:89:b6:7f:1b:cc:0b:6a:b5:a0:43:bd:13:b1:84:9c:d9:
bb:fb:8c:4e:28:76:b7:b4:a3:4d:a4:b8:d5:a9:32:06:ad:45:
b2:25:d7:f3:fc:d1:66:8f:b3:f1:58:e4:59:34:96:47:f6:fd:
ce:42:3d:11:2b:c3:44:60:21:a2:3f:8f:27:cb:82:c1:72:9e:
df:fd:d7:e6:86:dc:b2:6d:f2:9a:6b:bb:77:22:51:dd:d3:10:
cd:00:c6:c7:b1:ae:17:0e:7f:d2:2e:80:36:f0:e2:da:a9:66:
6f:af:26:b0:f6:f6:99:b9:88:93:42:7e:c5:47:ea:c3:24:78:
5d:f7:e8:dd:5a:da:ed:26:b9:05:cd:d2:b7:9e:78:22:65:fc:
54:4b:31:18:db:87:4c:27:25:3a:49:d2:91:1e:5f:1e:d1:70:
30:5e:c8:e9:25:10:a3:48:af:19:03:b8:57:66:80:f1:e3:9c:
81:a6:d7:4c:25:1b:aa:55:9b:df:1e:30:97:de:2b:d6:55:99:
35:93:90:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ooHK8nkKTZ6HauI74zoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTg5ZDI2YmFlN2Y4NWNiNGUwNmFiNWFiNTM2ZGU1YTgw
YzE2YTEwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRjNjg1YTlmZDEyNzVlZmRlZTRkMjgxZWM4ZTg1NmY2NDc3ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHHs04fpTNv7hO4W4rGnXiGO84kD
U+Tm2lnTWL7Ex5kbdmx1jiGMJwuhwsFJE6zl3iCVZLiJrSWBu7UI9Hmc/+6+LzW7
JVqyA2InaPHgcpQ1IXezraCi7oVDvLrN95KNsCtQCDupBuNuoXv0kMnSIrm/3rQi
/HbAKMkeVdftkzVNpMmmZgf4jOqy9DOVck/BRB60AQmYBw/uiNWIwPDhrOJDjqeA
3KvpNx+rFRXec2pvzGfFXBd7ay3Dr7SoI4xXqdbS9+iDxcnehM9PT3FA7bG8bdwh
W5007+P4A0jU5ixRfGeOi+GqKbZyAdg35cHVPkT0XUqB9ayPmQWFL6y/FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErcaFqf0Sde/e5NKB7I6Fb2R39dMB8GA1UdIwQY
MBaAFHMYnSa65/hctOBqtatTbeWoDBahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQt
MDY2YjYzMjM3ZDg1LzEvU3R4b1dwX1JKMTc5N2swb0hzam9WdlpIZjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNjBhOWQtYjEyMS00NWFlLTgzMGQtMDY2YjYzMjM3ZDg1
LzEvY3hpZEpycm4tRnkwNEdxMXExTnQ1YWdNRnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaZ4MA0G
CSqGSIb3DQEBCwUAA4IBAQAggld6tfT8uX/M3V3Tt4NfPAmJOvzmm1V9Zm2nlDrl
ad5jTUuIYX8rrkWl0l1aivCUL7xGyVrqjIm2fxvMC2q1oEO9E7GEnNm7+4xOKHa3
tKNNpLjVqTIGrUWyJdfz/NFmj7PxWORZNJZH9v3OQj0RK8NEYCGiP48ny4LBcp7f
/dfmhtyybfKaa7t3IlHd0xDNAMbHsa4XDn/SLoA28OLaqWZvryaw9vaZuYiTQn7F
R+rDJHhd9+jdWtrtJrkFzdK3nngiZfxUSzEY24dMJyU6SdKRHl8e0XAwXsjpJRCj
SK8ZA7hXZoDx45yBptdMJRuqVZvfHjCX3ivWVZk1k5Bj
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:24 2026 by rpki-client