This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa
File: bP0DL2QAJVKBhisPOEKSCrb5P7I.roa (raw, json)
Hash identifier: SSq+LObEvTskeEChP41dHP/d10Dn6Nt47PhXiubra4Q=
Subject key identifier: 6C:FD:03:2F:64:00:25:52:81:86:2B:0F:38:42:92:0A:B6:F9:3F:B2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019B7CEDCC49617CBD6745D693B73B666F94
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa
Signing time: Fri 02 Jan 2026 04:18:37 +0000
ROA not before: Fri 02 Jan 2026 04:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:cc:49:61:7c:bd:67:45:d6:93:b7:3b:66:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 2 04:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cfd032f6400255281862b0f3842920ab6f93fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:a3:d4:35:d6:64:66:7c:f4:12:da:81:2a:
c6:64:d6:be:d5:0e:fa:2a:11:0a:e5:34:df:96:fc:
94:5c:0a:89:bc:d9:b5:7c:47:4e:a5:38:73:cd:c4:
b3:b6:89:0c:5c:4d:ee:dc:05:57:1c:81:a7:e1:e2:
06:4a:6e:c5:68:c4:8c:a1:b3:a6:b8:3c:c3:2f:34:
4c:75:cb:66:0d:6e:59:99:19:1f:f8:5e:b7:fe:0e:
00:d3:c0:d9:6c:97:d7:80:91:be:8a:98:55:a1:bc:
76:a5:fd:2d:9c:f6:28:3e:2f:3d:53:49:08:28:f7:
18:71:f4:8f:3b:c7:2d:4a:f4:b7:5d:c5:c1:f4:13:
39:76:0d:e9:df:a0:68:fc:a6:d9:09:30:2d:7b:fb:
fa:6c:56:3a:ff:31:4b:64:09:aa:66:ba:10:55:5b:
5b:6b:2f:3d:8d:f5:3d:c1:bc:43:e1:bc:ce:89:81:
8a:c3:54:09:d8:d7:91:b9:b9:7a:a5:94:94:cc:07:
c0:49:31:33:b8:db:d4:c4:de:18:35:66:d6:81:4b:
90:65:93:39:96:d9:80:dd:74:93:d5:b6:ca:5f:fb:
ae:fb:0c:14:97:44:13:97:88:3d:22:67:9b:56:8c:
64:49:92:7b:96:32:7b:13:9b:d5:ed:37:d7:9c:a5:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:03:2F:64:00:25:52:81:86:2B:0F:38:42:92:0A:B6:F9:3F:B2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bP0DL2QAJVKBhisPOEKSCrb5P7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6e:a0:65:4e:65:e6:31:8d:bc:6d:d9:8e:fd:8b:d4:df:38:
6f:34:42:12:92:8b:f1:ca:f2:cd:75:71:88:04:14:ff:34:1f:
bb:3c:52:c9:6d:78:54:8f:df:29:c3:bb:13:0d:cb:b7:2d:9a:
57:b8:e1:4a:6d:31:95:83:52:48:42:78:50:8d:5a:59:11:22:
32:62:53:bf:e3:20:47:d0:7d:0f:df:f4:94:b2:5a:bc:bf:47:
ff:cf:b0:52:42:4a:37:86:1c:a4:08:73:de:1d:26:5c:c6:b0:
58:fd:f1:ca:43:56:9b:7b:64:dc:63:62:46:6a:c3:97:b2:c7:
f8:5b:53:f1:b5:87:88:90:6e:cd:ff:4c:33:05:b7:cf:35:97:
cf:07:47:a7:b9:e6:06:e4:b2:7d:04:2b:6d:eb:5b:de:00:70:
a9:f6:ec:49:55:ec:ff:c3:e1:1f:0b:af:cd:81:b5:58:f0:2b:
0d:28:12:35:ce:da:d5:b9:ce:c9:a7:d4:98:b7:c6:7e:b8:02:
e6:62:cb:09:63:c6:21:25:78:ec:31:52:69:12:c3:16:fe:8d:
ce:4d:03:69:e1:86:19:a6:51:8d:58:bf:9d:58:ff:c7:88:46:
e3:b1:c7:7e:47:4b:4a:17:8a:29:49:23:34:ab:0a:e2:40:5f:
52:e8:e8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:59:40 2026 by rpki-client