This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/dYe6I9SYNrNnhKkXOoAoD02mEm0.roa
File: dYe6I9SYNrNnhKkXOoAoD02mEm0.roa (raw, json)
Hash identifier: 09A3/mfGOz3JnMMn3RkVi1jZZF6RAGtFJEOIwgWgPJo=
Subject key identifier: 75:87:BA:23:D4:98:36:B3:67:84:A9:17:3A:80:28:0F:4D:A6:12:6D
Certificate issuer: /CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Certificate serial: 019C1F3851F14A3E0499A8E8B6617A579625
Authority key identifier: 26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/dYe6I9SYNrNnhKkXOoAoD02mEm0.roa
Signing time: Mon 02 Feb 2026 16:38:30 +0000
ROA not before: Mon 02 Feb 2026 16:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56960
IP address blocks: 5.182.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:38:51:f1:4a:3e:04:99:a8:e8:b6:61:7a:57:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601bb6918bdcc91a41428901eb98ced970f3eee
Validity
Not Before: Feb 2 16:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7587ba23d49836b36784a9173a80280f4da6126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:d5:4e:69:22:b6:35:c5:cf:b7:92:8f:32:
35:15:d2:c4:ee:96:54:d1:54:24:0e:28:4d:e0:7e:
51:ac:f6:e8:c8:a0:2d:f5:0b:a9:b3:8e:c8:ba:48:
f0:81:e0:e5:77:45:eb:24:3f:cc:66:b0:2e:b7:14:
c8:7b:b0:d6:ef:de:c3:74:1e:fe:72:14:da:39:e5:
db:3a:fa:3a:f6:d8:03:7e:8c:d5:78:2c:38:8a:d1:
41:10:48:4a:8e:bb:27:76:57:37:b2:e9:eb:23:07:
37:ff:6d:d9:91:ca:a2:48:d7:44:6b:77:c5:f4:91:
7c:a6:65:d9:87:b9:e7:f8:53:c7:81:0c:ac:ed:f9:
8f:0c:9f:e6:82:3f:5f:31:33:13:57:80:91:8d:31:
21:16:bf:34:dc:e1:f6:74:80:3e:c6:43:1b:85:c6:
0c:6e:68:dd:11:07:55:30:23:29:cb:82:48:ae:4a:
01:55:6f:46:a5:a4:e2:65:19:2f:f1:a2:91:c0:fa:
00:b0:b0:f2:8b:49:75:b7:a3:64:bf:52:5e:42:5b:
85:20:eb:17:49:77:9b:63:3d:d8:77:f5:0c:5f:c6:
79:5f:bd:08:5b:49:df:a2:a4:49:9c:03:20:d3:73:
5f:cc:bb:28:d1:58:d1:b9:0b:70:4d:5c:ce:5b:4d:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:BA:23:D4:98:36:B3:67:84:A9:17:3A:80:28:0F:4D:A6:12:6D
X509v3 Authority Key Identifier:
keyid:26:01:BB:69:18:BD:CC:91:A4:14:28:90:1E:B9:8C:ED:97:0F:3E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/dYe6I9SYNrNnhKkXOoAoD02mEm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48bc8f-106b-44a9-a558-dfa6710247aa/1/JgG7aRi9zJGkFCiQHrmM7ZcPPu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.61.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9e:57:37:61:b3:0f:01:8d:bc:c8:b7:27:f9:eb:b6:42:76:
69:bb:73:42:87:61:3d:43:92:bc:98:ee:5c:a3:90:e5:ae:40:
bd:bc:9e:22:c0:33:48:a5:a0:f4:d8:02:76:cb:b3:37:c8:2d:
29:05:34:3f:e8:f7:63:b6:84:a3:4b:65:f8:3e:cb:ca:c1:e8:
43:d0:51:d1:83:79:e4:65:34:0f:9e:e3:e1:5b:ac:46:c3:e9:
3e:42:3c:f5:00:6a:7a:27:fc:9d:13:10:5b:6a:7b:d1:4c:2f:
02:3c:02:12:be:29:d1:e7:4c:1a:a0:3a:88:72:dd:77:f2:c5:
5c:b1:a8:aa:de:0a:38:89:c8:bb:1a:4a:09:43:4a:b7:93:1d:
dd:61:1d:45:49:58:11:38:59:7a:b6:33:e3:6f:2d:a5:77:da:
ea:d6:98:b0:3d:0e:1e:67:ca:9a:dd:52:28:ef:28:1c:03:ad:
14:f6:10:0c:a1:de:25:81:f9:85:23:d4:03:c0:b6:73:42:fc:
11:b7:2d:8d:24:f9:4a:c6:b8:b2:d4:a9:13:2d:e0:6d:08:88:
e0:02:86:d4:fe:09:1a:0c:45:e5:1a:7b:7e:9b:bf:92:e1:2b:
90:39:1a:91:95:52:aa:e5:81:59:17:5f:3c:01:97:d8:d0:58:
5d:1b:80:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwfOFHxSj4EmajotmF6V5YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFiYjY5MThiZGNjOTFhNDE0Mjg5MDFlYjk4Y2VkOTcw
ZjNlZWUwHhcNMjYwMjAyMTYzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTg3YmEyM2Q0OTgzNmIzNjc4NGE5MTczYTgwMjgwZjRkYTYxMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhijVTmkitjXFz7eSjzI1FdLE7pZU
0VQkDihN4H5RrPboyKAt9Qups47IukjwgeDld0XrJD/MZrAutxTIe7DW797DdB7+
chTaOeXbOvo69tgDfozVeCw4itFBEEhKjrsndlc3sunrIwc3/23ZkcqiSNdEa3fF
9JF8pmXZh7nn+FPHgQys7fmPDJ/mgj9fMTMTV4CRjTEhFr803OH2dIA+xkMbhcYM
bmjdEQdVMCMpy4JIrkoBVW9GpaTiZRkv8aKRwPoAsLDyi0l1t6Nkv1JeQluFIOsX
SXebYz3Yd/UMX8Z5X70IW0nfoqRJnAMg03NfzLso0VjRuQtwTVzOW00T4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHWHuiPUmDazZ4SpFzqAKA9NphJtMB8GA1UdIwQY
MBaAFCYBu2kYvcyRpBQokB65jO2XDz7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgt
ZGZhNjcxMDI0N2FhLzEvZFllNkk5U1lOck5uaEtrWE9vQW9EMDJtRW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGJjOGYtMTA2Yi00NGE5LWE1NTgtZGZhNjcxMDI0N2Fh
LzEvSmdHN2FSaTl6SkdrRkNpUUhybU03WmNQUHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbY9MA0G
CSqGSIb3DQEBCwUAA4IBAQAGnlc3YbMPAY28yLcn+eu2QnZpu3NCh2E9Q5K8mO5c
o5DlrkC9vJ4iwDNIpaD02AJ2y7M3yC0pBTQ/6PdjtoSjS2X4PsvKwehD0FHRg3nk
ZTQPnuPhW6xGw+k+Qjz1AGp6J/ydExBbanvRTC8CPAISvinR50waoDqIct138sVc
saiq3go4ici7GkoJQ0q3kx3dYR1FSVgROFl6tjPjby2ld9rq1piwPQ4eZ8qa3VIo
7ygcA60U9hAMod4lgfmFI9QDwLZzQvwRty2NJPlKxriy1KkTLeBtCIjgAobU/gka
DEXlGnt+m7+S4SuQORqRlVKq5YFZF188AZfY0FhdG4D0
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:31 2026 by rpki-client