This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa
File: 0rveDYYcrT7zdZKuahwTECp3T4E.roa (raw, json)
Hash identifier: Pk8DvHsVkrqTdOHnSjdJSO+iO0nQzwivT/Z1Hgi2rpM=
Subject key identifier: D2:BB:DE:0D:86:1C:AD:3E:F3:75:92:AE:6A:1C:13:10:2A:77:4F:81
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 019B7910D054B9437DD3C43F496BA2FE7503
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa
Signing time: Thu 01 Jan 2026 10:18:23 +0000
ROA not before: Thu 01 Jan 2026 10:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210433
IP address blocks: 185.81.200.0/22 maxlen: 24
2a03:6260::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:d0:54:b9:43:7d:d3:c4:3f:49:6b:a2:fe:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Jan 1 10:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2bbde0d861cad3ef37592ae6a1c13102a774f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:a7:dd:39:48:c9:96:58:47:36:11:ad:29:
19:b1:15:df:f9:72:dd:d5:43:13:c9:7e:f4:de:92:
00:ff:33:06:5a:67:a5:bd:9d:fc:e5:a1:0c:88:b1:
37:fa:1d:65:c5:26:d5:1f:7a:ce:16:3a:c1:19:37:
b7:32:5b:a3:ba:0d:1a:5a:08:d4:cd:d4:bf:59:9c:
da:df:33:c0:73:3e:37:47:c1:fa:52:24:e6:67:0e:
f9:6c:26:5e:45:8b:a9:39:c8:e1:62:74:01:11:01:
f3:14:2c:98:19:c3:02:b7:de:a1:b9:12:e0:fe:ba:
c6:b0:9f:fb:be:4b:bc:fc:9e:06:f1:91:10:41:66:
76:a4:48:d6:fb:fb:34:b2:11:19:38:98:ae:78:ae:
1c:be:cc:62:8a:91:86:c3:7d:59:74:d3:12:01:51:
06:d2:09:a4:3f:14:0b:c8:13:af:9e:a6:23:df:1f:
9d:e3:9d:f9:ec:29:ff:c2:9f:43:40:dc:bb:4e:be:
0c:dd:f3:d1:d4:a3:d8:f2:31:3b:46:3d:e9:a3:9d:
50:14:50:1c:95:ac:e2:af:8a:20:fc:c0:bc:b9:38:
d5:12:6e:9d:48:56:b9:67:e6:47:64:4f:0a:84:53:
05:d8:07:2d:97:cd:1a:a2:dc:47:95:20:db:70:31:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:DE:0D:86:1C:AD:3E:F3:75:92:AE:6A:1C:13:10:2A:77:4F:81
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.200.0/22
IPv6:
2a03:6260::/32
Signature Algorithm: sha256WithRSAEncryption
83:d8:a7:ef:3e:59:39:61:93:9c:cb:d2:58:fc:24:e6:1c:cf:
d7:98:18:3e:41:30:2a:3f:0d:7f:be:32:18:01:5f:02:84:7d:
ac:6d:17:3b:e5:0b:a4:35:27:11:bd:39:b5:67:5f:20:3f:b0:
76:2b:20:43:77:bc:69:2b:6d:5f:07:fe:5e:37:a1:58:bb:7d:
55:ae:33:01:77:c5:56:69:1f:b3:4d:ff:4b:ad:79:9a:42:86:
c6:13:a4:a0:50:2f:fe:da:3e:8d:64:6c:45:70:17:22:b1:d8:
2c:f7:ed:4c:39:3b:dc:85:5a:26:de:ca:0e:18:b7:1f:83:9a:
a4:28:51:9c:18:0e:be:08:ea:bb:02:b3:29:48:d5:90:1a:3f:
8d:b4:5c:4d:07:d1:f6:c6:d1:e6:49:dc:bf:03:00:7c:a2:87:
5c:4e:6a:a3:7d:fd:b9:85:99:77:40:e8:38:63:fd:94:5a:89:
da:70:49:1c:06:b9:63:5c:14:c4:ba:b9:18:7d:bf:17:91:7e:
0c:6a:c4:b5:75:d9:76:45:c0:0e:80:ce:66:f4:5e:64:25:65:
f1:c9:d7:8e:09:10:ef:66:c6:fd:13:c0:d1:68:ae:7e:be:ed:
4f:73:bc:6d:95:55:28:b5:8c:58:54:96:80:95:1e:63:54:bd:
f5:d9:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:20 2026 by rpki-client