This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa
File: T6n7EDa7L7y2Likx1LJt9fY0e84.roa (raw, json)
Hash identifier: 1EysGC86dcCWQcka9wvraq3MLvlF/xfglQjOwZsEyRQ=
Subject key identifier: 4F:A9:FB:10:36:BB:2F:BC:B6:2E:29:31:D4:B2:6D:F5:F6:34:7B:CE
Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial: 019B76EB2CEB07A746EAAC0A9BED63056FFA
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa
Signing time: Thu 01 Jan 2026 00:18:02 +0000
ROA not before: Thu 01 Jan 2026 00:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202936
IP address blocks: 185.148.64.0/22 maxlen: 23
185.241.232.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:2c:eb:07:a7:46:ea:ac:0a:9b:ed:63:05:6f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Validity
Not Before: Jan 1 00:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fa9fb1036bb2fbcb62e2931d4b26df5f6347bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:06:66:5e:2d:ee:18:f8:22:98:e0:55:1b:0f:
b8:04:d5:87:f1:4a:ff:9a:55:53:ed:89:73:df:1c:
87:e2:26:1b:f1:f7:a6:6f:75:b8:07:a9:b2:7d:67:
46:10:24:5f:55:4a:82:66:f6:5f:0e:94:fb:92:1b:
38:d9:ba:40:f3:63:c0:4e:02:7d:e3:83:6f:fc:eb:
00:be:79:60:17:93:a8:fa:30:e7:82:e1:4d:17:a4:
79:f4:d2:7e:77:60:b6:7c:a1:fb:5d:f3:07:bd:ab:
4e:55:56:7d:df:74:6c:6a:55:de:8c:dd:fb:6c:fd:
43:f6:7a:04:ff:da:bc:3c:c2:3a:f2:ec:e9:45:e8:
31:d0:13:d8:e7:e7:41:97:e2:12:d5:1b:43:a4:49:
47:96:87:07:6e:b9:21:3c:9d:64:33:47:6b:3c:b7:
66:0d:51:48:0e:49:a5:07:fc:ba:9b:da:57:de:4c:
28:91:15:aa:69:05:77:18:8c:01:79:3f:8b:7b:46:
a9:d6:f4:34:16:99:93:ef:27:49:3b:9a:0e:4f:98:
31:63:87:b0:2d:b4:44:d2:9a:1e:28:25:cd:f4:bb:
ab:b6:2e:e6:2a:0a:17:8d:7a:0f:b2:18:23:71:13:
18:1e:a0:b6:6c:81:fc:f6:c4:b4:d1:f6:3e:35:47:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:FB:10:36:BB:2F:BC:B6:2E:29:31:D4:B2:6D:F5:F6:34:7B:CE
X509v3 Authority Key Identifier:
keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/T6n7EDa7L7y2Likx1LJt9fY0e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.64.0/22
185.241.232.0/22
Signature Algorithm: sha256WithRSAEncryption
67:27:dd:6b:a1:85:d7:46:93:a7:40:5e:4b:fc:28:2d:56:a3:
bf:03:e8:c1:96:a5:ce:f6:d1:79:c4:66:70:16:ec:eb:e6:b6:
1a:04:08:bd:4f:9e:58:dc:af:46:de:a0:ef:ad:de:91:85:80:
3a:0d:3a:3f:2c:e4:8b:26:ff:74:c5:2f:61:d7:50:37:8f:5d:
7e:fd:9d:dc:67:c4:4e:ba:d0:94:3f:b0:4d:8e:cf:6a:de:c2:
bf:ef:fb:e8:57:8c:01:24:c1:19:1b:2c:f7:70:49:c1:89:5d:
01:41:a2:fc:94:84:a4:c4:a6:31:cd:e7:46:18:3b:59:ca:ac:
77:22:1c:d6:b8:e2:df:1a:c9:07:59:43:10:56:9f:c7:96:2f:
69:b7:07:9a:62:1b:41:14:43:af:01:8c:e5:20:07:27:ed:79:
b6:6a:d4:5d:ad:9e:8d:0f:fb:33:98:72:3e:2e:61:62:12:3b:
14:d1:bd:60:04:21:cc:e7:68:14:50:d2:fc:bd:b4:84:41:9d:
73:cd:c2:1a:13:50:1d:f8:37:e3:47:2e:63:22:a4:b1:b1:c7:
33:99:5c:69:0c:4a:98:26:e6:57:55:6d:1a:80:9d:4f:99:c6:
81:e8:e2:ed:10:9c:6d:af:b5:16:c8:6e:60:e1:11:d0:54:91:
df:80:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:12 2026 by rpki-client