This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa
File: LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa (raw, json)
Hash identifier: YRY3aRjchAoV6SVn5P9y+64CvJS3RI9yxNO5e/xkQfw=
Subject key identifier: 2C:E6:BD:C6:FD:96:F5:81:6E:4C:3F:F1:EA:51:6F:C0:2B:02:02:30
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 019B7F14760B93CA0D50C2D0F4BA588128F5
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa
Signing time: Fri 02 Jan 2026 14:20:05 +0000
ROA not before: Fri 02 Jan 2026 14:20:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59723
IP address blocks: 185.233.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:76:0b:93:ca:0d:50:c2:d0:f4:ba:58:81:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 2 14:20:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ce6bdc6fd96f5816e4c3ff1ea516fc02b020230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:5a:94:85:fb:5c:8f:4f:cd:88:71:25:1f:
d6:4f:14:f8:70:f1:f6:b0:43:1f:c3:54:6c:fa:6c:
3a:3c:50:57:3b:5d:be:c3:e5:44:a2:18:cb:1a:c1:
9e:c7:04:20:6b:b8:85:c4:0e:34:d1:d6:01:a7:58:
86:71:11:bb:d6:05:6c:1e:95:ff:a7:37:77:40:5d:
eb:93:4f:74:d3:78:31:f8:d8:4f:1c:c3:b1:a5:e6:
10:5e:17:0c:3f:6f:ed:5d:2d:33:cd:d6:d7:76:03:
cd:6e:4d:b3:15:e8:82:9e:31:02:05:7b:06:de:44:
0a:41:f0:01:6e:e6:4b:45:cd:69:72:16:ff:23:5f:
31:e8:75:dc:af:a8:ad:f8:3c:aa:59:2e:44:4b:04:
7a:bc:7e:46:34:32:75:26:74:7e:9f:f7:f1:c6:ab:
c3:9f:33:85:1e:38:5c:22:0b:4a:e0:d9:7c:93:08:
5b:a1:55:d2:dc:91:a4:57:52:49:fe:70:04:f6:76:
56:81:12:e6:47:81:60:f6:b1:8c:c3:7f:2a:9a:33:
7b:cf:52:b7:e2:a7:85:4b:53:fa:9e:77:cf:cd:8b:
c6:4d:a5:85:eb:50:d7:1a:62:77:8e:e7:9c:57:12:
39:59:28:af:08:27:87:17:da:28:ed:ec:a1:ee:f2:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E6:BD:C6:FD:96:F5:81:6E:4C:3F:F1:EA:51:6F:C0:2B:02:02:30
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/LOa9xv2W9YFuTD_x6lFvwCsCAjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
09:fa:44:5d:58:ce:73:19:30:7f:ff:02:72:db:8c:1a:f1:68:
1d:cb:5d:05:61:15:d5:f9:5b:6a:be:b7:a3:d2:39:2e:3e:b6:
40:93:5a:25:b9:a7:ad:98:c9:d4:7b:26:ed:ce:57:8b:06:5d:
92:32:60:7d:53:f6:1d:f4:88:20:12:a0:c9:d1:f6:ef:dc:94:
1a:74:f3:72:35:bd:b0:89:2b:b7:fd:5c:8e:17:09:f7:15:4d:
05:fb:8a:40:1c:07:e3:05:ba:b0:11:93:c5:ec:bf:f3:59:ec:
b8:3d:bd:97:e1:b1:a8:1b:a3:47:e2:89:ed:14:b2:1d:07:c6:
85:ff:9a:7e:3e:68:7c:84:c1:b0:96:23:8f:80:f1:5c:8d:6b:
52:c2:29:7e:31:94:18:11:b0:e5:66:ff:b4:92:67:14:3d:34:
c3:64:f7:a9:79:ff:e8:df:8f:7c:16:ef:ab:56:9d:fd:26:ce:
91:9a:bb:b4:14:df:73:50:51:bb:20:5f:b7:2f:80:d1:78:89:
72:62:8c:96:6d:db:36:69:43:cc:13:e4:81:23:61:26:8a:67:
a5:1f:2a:b5:94:f6:c9:77:39:06:cf:fd:e4:b8:62:6f:b6:80:
e4:ea:2b:f0:a2:3e:68:2d:57:89:56:53:85:55:37:88:02:74:
59:cb:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:42 2026 by rpki-client