This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/66ry_Oqrn2z2VQi36erLm_YTas8.roa
File: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (raw, json)
Hash identifier: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=
Subject key identifier: EB:AA:F2:FC:EA:AB:9F:6C:F6:55:08:B7:E9:EA:CB:9B:F6:13:6A:CF
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019C14D10C472F528A95F34384DEAFCB344B
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/66ry_Oqrn2z2VQi36erLm_YTas8.roa
Signing time: Sat 31 Jan 2026 16:09:30 +0000
ROA not before: Sat 31 Jan 2026 16:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 21:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:14:d1:0c:47:2f:52:8a:95:f3:43:84:de:af:cb:34:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 31 16:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebaaf2fceaab9f6cf65508b7e9eacb9bf6136acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:4c:27:7f:45:40:b9:dc:f3:95:2a:93:d7:
5d:b1:09:d4:34:bd:6d:88:03:4c:5d:90:53:42:b3:
dd:b2:e5:da:08:13:b0:dc:fc:09:45:21:50:6b:0a:
df:7e:70:24:3e:92:f2:5a:7d:a3:4a:90:9d:6b:ae:
db:cb:d9:0b:a6:eb:c3:11:0e:ef:98:50:cd:43:6e:
2a:9d:a6:c3:55:4a:25:55:11:af:d2:5b:59:75:7a:
96:31:3f:60:c5:e0:f8:92:df:af:0a:77:1d:0f:7d:
a3:3f:01:6c:58:4f:30:40:be:e1:fd:ee:f8:2c:38:
2f:79:07:c5:d2:85:32:32:14:1d:8f:cf:c6:d8:ed:
46:9e:da:7a:0f:5f:15:d3:04:6d:3b:53:57:06:bb:
8c:35:d3:9d:e7:1d:fb:1b:22:f5:54:e3:85:c8:28:
82:75:7a:c1:8c:eb:9e:ab:b5:56:ae:ec:50:57:7a:
75:07:b7:1c:6e:ac:72:7b:dc:0a:ca:d3:3d:69:8b:
02:10:d1:0b:6a:cb:f3:40:0e:23:7e:a2:92:89:78:
76:de:af:21:47:70:36:3c:c1:2d:03:13:f8:ee:95:
e3:98:29:f2:2e:3d:d7:fe:37:e1:bd:80:2a:21:9f:
49:a1:52:10:2f:d7:1c:23:09:55:75:53:2f:e7:30:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:F2:FC:EA:AB:9F:6C:F6:55:08:B7:E9:EA:CB:9B:F6:13:6A:CF
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/66ry_Oqrn2z2VQi36erLm_YTas8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d8:df:46:6d:22:99:c8:92:05:2a:78:21:06:98:dc:85:d2:
b9:ab:09:22:8e:51:ee:8d:4a:fe:54:bc:f7:97:1d:fe:bc:09:
0b:35:a8:0e:96:73:fa:78:2c:81:27:1c:b1:e8:88:b2:c2:6f:
e5:73:21:95:34:4f:9a:3f:76:e8:c8:ce:48:f1:c6:b7:8b:48:
b5:2c:92:4f:4c:9f:24:af:f1:eb:c7:ef:9f:f5:17:9e:23:19:
75:72:a6:b1:0d:63:37:49:60:d5:0b:26:f5:35:b4:f4:d6:79:
63:c2:2a:93:ce:a8:ff:1b:c8:79:d6:ef:66:70:1f:c3:03:e1:
f4:54:5d:39:12:2b:b1:69:61:6c:35:5a:d9:20:d0:52:ea:9f:
b4:bb:9a:59:a9:15:3f:ce:08:0f:53:9d:85:81:a8:db:30:49:
54:04:1f:09:19:6f:b3:9f:0b:c3:a8:a4:77:08:4b:83:58:65:
a7:ad:be:32:de:68:ef:9e:cd:31:47:4c:e4:a5:a7:1c:25:6e:
ee:0a:b6:d2:2b:32:54:25:8f:fc:f4:77:a1:8b:b5:ed:f9:9b:
71:90:56:88:be:10:41:3f:03:45:7d:ca:e9:2a:23:4f:02:1e:
1c:67:94:a0:23:9b:f8:73:a8:65:fd:ef:0f:15:55:94:70:73:
d6:c9:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 03:02:37 2026 by rpki-client