This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa
File: F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa (raw, json)
Hash identifier: o/R8nP2KVmlJ+NXMkDw0CKw0ITlj+/zX+zWZq5sENck=
Subject key identifier: 17:8A:03:4B:79:D5:33:10:40:74:D1:C1:4C:FF:E3:47:72:F6:AD:B5
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 019B78A30FC07AD2D76A6011F46FD3FF02EE
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa
Signing time: Thu 01 Jan 2026 08:18:30 +0000
ROA not before: Thu 01 Jan 2026 08:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204819
IP address blocks: 185.69.64.0/22 maxlen: 22
2a05:2080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:0f:c0:7a:d2:d7:6a:60:11:f4:6f:d3:ff:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: Jan 1 08:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178a034b79d533104074d1c14cffe34772f6adb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:11:ce:a1:99:72:e5:6f:12:46:83:d9:22:
a9:2d:66:35:cb:66:23:86:cd:fc:9d:82:ca:3c:46:
49:b5:a7:dc:d7:5e:8f:a5:a9:31:70:d5:83:d9:b5:
7d:86:67:7f:74:4a:7f:cc:11:1a:ef:f0:be:b6:59:
59:18:11:9b:da:75:c9:89:29:47:26:59:b7:c7:c1:
f1:c4:62:a1:d1:67:56:91:b7:9d:6d:3b:9e:a5:ac:
20:e7:d4:63:65:eb:33:6f:b2:d3:a0:aa:86:8f:b1:
ef:a5:fd:00:96:3f:c6:c3:53:91:9c:46:0b:ba:4d:
45:d3:17:19:d9:21:d1:1c:b9:85:47:ab:3f:2d:24:
62:c3:15:1e:74:28:13:82:42:05:ff:8e:37:7e:02:
19:fe:a3:94:8e:ed:1c:fb:3e:c6:fe:6b:cc:49:eb:
fc:3f:ea:02:69:a4:39:c7:46:0a:61:2e:9a:db:c8:
9d:4e:fb:b1:62:b9:b3:ad:ef:a1:e5:7c:63:1a:1d:
5a:25:4b:42:11:db:a4:3f:22:4e:ff:f1:91:11:a0:
c4:fe:f1:7d:0d:5c:6f:f6:6f:26:a0:8d:6d:a9:8a:
b0:75:6c:41:4a:41:c2:3a:20:ec:13:02:76:25:6b:
8f:16:2a:d7:ab:ab:35:e1:98:1d:2b:07:4d:29:f9:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:03:4B:79:D5:33:10:40:74:D1:C1:4C:FF:E3:47:72:F6:AD:B5
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.64.0/22
IPv6:
2a05:2080::/29
Signature Algorithm: sha256WithRSAEncryption
05:b9:27:58:1e:0a:f1:15:14:44:85:a3:aa:8e:c5:0c:78:b8:
b8:d7:8e:51:86:28:9c:98:6f:31:d3:4a:d1:f1:c2:b3:81:3d:
4c:7b:45:98:07:f4:5b:ee:83:9d:a8:ca:cd:8c:f9:dc:95:fc:
52:ef:42:2f:d2:e6:95:51:0f:d2:fb:0e:db:7d:1b:84:52:26:
dd:7f:58:b4:c7:7e:b8:6a:66:50:a0:2f:8d:6d:46:05:be:9e:
7c:64:a1:8e:14:31:d1:76:8e:b5:77:0f:7e:64:6b:dd:56:81:
cb:51:4f:bf:ec:c2:bb:5a:bd:ae:21:b8:3a:3f:ce:61:bd:f6:
e7:32:35:a4:56:d1:f8:49:b4:22:61:59:09:14:0a:77:3c:17:
ef:ea:f0:46:b7:c3:2b:f7:4c:be:42:80:bf:67:08:9d:4c:44:
e7:19:42:47:8f:f2:1e:0a:6f:06:9b:c8:2a:84:40:5b:c2:75:
72:5e:df:31:2c:7b:6f:fd:56:d5:7f:d4:d7:1f:5f:11:b4:80:
30:eb:ca:06:d4:a3:72:5e:97:68:58:43:88:28:9f:f1:f0:b6:
ee:36:97:bb:e3:1a:70:33:5d:b7:11:27:68:fe:60:f6:c6:7f:
0c:df:ca:5c:a8:b7:a0:aa:f3:87:8d:a6:42:01:da:91:e3:c9:
3e:11:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:18 2026 by rpki-client