This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa
File: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (raw, json)
Hash identifier: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=
Subject key identifier: E4:97:0E:43:3A:BB:5B:39:A3:30:56:C6:E0:82:46:C5:83:5E:2A:0A
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 019B7AC8871AFF3975542D52C08A9EEB1E28
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa
Signing time: Thu 01 Jan 2026 18:18:40 +0000
ROA not before: Thu 01 Jan 2026 18:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206702
IP address blocks: 185.160.148.0/24 maxlen: 24
185.160.149.0/24 maxlen: 24
185.160.150.0/24 maxlen: 24
185.160.151.0/24 maxlen: 24
185.178.160.0/24 maxlen: 24
185.178.161.0/24 maxlen: 24
185.178.162.0/24 maxlen: 24
185.178.163.0/24 maxlen: 24
185.194.192.0/24 maxlen: 24
185.194.193.0/24 maxlen: 24
185.194.195.0/24 maxlen: 24
193.148.84.0/24 maxlen: 24
193.148.85.0/24 maxlen: 24
193.148.86.0/24 maxlen: 24
193.148.87.0/24 maxlen: 24
2a0a:1141:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:87:1a:ff:39:75:54:2d:52:c0:8a:9e:eb:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Jan 1 18:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4970e433abb5b39a33056c6e08246c5835e2a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:2a:60:f6:20:a5:b4:34:43:12:88:5a:bd:
24:6e:84:b1:77:ae:f6:1f:9d:d5:f6:63:7f:70:2f:
09:a5:c9:85:30:02:58:55:9d:b1:e2:ac:29:26:a7:
e1:2a:b6:32:f8:98:de:c1:6a:6e:2b:d6:5c:a3:6e:
cc:5f:9c:9c:72:52:d6:69:12:a2:bb:ed:65:38:74:
fd:5b:d2:85:12:12:fa:4e:ec:96:21:44:60:5d:29:
de:a2:b1:45:0a:f9:97:69:3e:9d:2e:fa:4c:ca:6a:
b0:58:75:fc:86:c8:58:b6:16:ea:a3:26:24:d2:a6:
ea:a5:c6:66:d3:35:c1:3d:20:c5:21:11:f4:ec:eb:
9d:e1:2e:99:9c:44:55:bf:a6:f2:bb:c8:24:6d:51:
8e:f0:da:47:3a:38:10:2c:21:ad:b9:1a:e8:7d:8f:
88:d4:fa:71:a4:8f:8f:21:82:df:f1:1d:e1:66:da:
2a:24:c6:19:b8:7b:59:db:f1:48:4d:e8:f3:e8:99:
16:6b:50:27:4a:45:da:53:df:bc:e9:f4:a0:49:83:
c3:48:09:e2:3d:05:21:92:1a:b5:cf:36:fe:a4:ef:
67:c7:4b:e5:42:e4:ce:0a:ae:a5:27:80:49:a2:76:
ac:f4:e6:ec:cd:55:e1:53:e0:9a:a1:a3:d3:df:32:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:0E:43:3A:BB:5B:39:A3:30:56:C6:E0:82:46:C5:83:5E:2A:0A
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.148.0/22
185.178.160.0/22
185.194.192.0/23
185.194.195.0/24
193.148.84.0/22
IPv6:
2a0a:1141:4000::/34
Signature Algorithm: sha256WithRSAEncryption
c6:86:2f:06:00:fc:aa:a3:5c:ac:6f:b7:64:ca:a1:f5:9b:88:
9c:7c:46:b2:e1:05:ec:79:10:8b:b9:dd:56:cc:7d:38:3c:db:
64:76:1a:4b:99:11:0a:1b:88:37:72:68:1e:04:d0:0a:03:f9:
05:8f:b3:11:28:f5:2d:0a:3c:56:e0:88:dd:57:04:f7:1e:6b:
12:01:d6:ac:6f:b1:e3:48:5b:6f:14:41:12:98:60:f4:fb:e4:
c8:fa:0d:c9:42:3c:51:0e:1c:eb:bc:5a:d2:fa:72:41:93:bc:
53:9d:9e:6f:44:db:db:c2:27:ed:2c:c9:02:b1:a9:7e:b3:5a:
8d:21:99:13:6a:fb:da:d6:a8:08:76:30:c2:ec:0a:7e:1a:4f:
3e:f2:54:9f:1a:a6:61:1c:a1:ea:3d:f3:6d:70:df:45:fb:9e:
68:7c:c4:59:ce:1f:66:52:d6:a8:b1:4a:74:41:2e:54:a0:50:
84:16:13:c7:26:e8:2e:d9:a5:1e:01:11:93:7b:59:f0:25:c7:
e4:4e:d7:79:a2:2c:6f:e8:c8:0f:19:b1:3d:53:6c:f9:4b:53:
0b:68:30:27:a7:6e:e0:80:ba:7d:81:13:fc:67:4d:67:2f:af:
b2:b5:05:d7:43:2c:22:fb:40:ac:d8:62:64:ff:42:7d:ae:33:
fe:a6:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:31 2026 by rpki-client