This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/T-RVDwu2R5GREmXjp9oK0pO-emk.roa
File: T-RVDwu2R5GREmXjp9oK0pO-emk.roa (raw, json)
Hash identifier: NLaXBrxUU7l8TdptUYXzcoGWDubvJljOT1d1MNSpjzA=
Subject key identifier: 4F:E4:55:0F:0B:B6:47:91:91:12:65:E3:A7:DA:0A:D2:93:BE:7A:69
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019B7D5C73FAE9F8BF4144755C339FF297D4
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/T-RVDwu2R5GREmXjp9oK0pO-emk.roa
Signing time: Fri 02 Jan 2026 06:19:29 +0000
ROA not before: Fri 02 Jan 2026 06:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199372
IP address blocks: 185.18.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:73:fa:e9:f8:bf:41:44:75:5c:33:9f:f2:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Jan 2 06:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe4550f0bb64791911265e3a7da0ad293be7a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:93:ff:c7:71:f9:ee:f4:18:4e:c4:01:ea:24:
9a:4e:06:7e:81:aa:66:5c:dc:fb:03:a0:8d:63:5a:
f9:37:ed:0b:2c:6a:fd:e5:70:6e:a5:1f:e9:7e:5e:
f9:37:92:1d:18:f7:c9:2a:5c:0b:e7:41:89:fc:7f:
be:57:4a:56:31:1c:fa:7d:c3:b0:49:e4:7d:8f:3e:
13:74:24:ca:8b:f3:a2:1f:46:44:b8:15:e1:97:c8:
e3:4d:90:e7:ca:95:41:a3:ad:2b:09:95:d0:34:50:
ac:d4:e4:d7:5f:0b:b0:98:c9:22:d9:d4:1d:00:fb:
6a:b8:ab:8c:92:33:a8:4b:78:69:3f:79:10:f8:78:
ef:82:00:2a:dc:28:7d:a7:ed:22:35:04:c7:4b:f3:
90:ff:a7:f8:b6:15:6e:ea:e0:f2:c6:4a:f8:e7:02:
f5:70:18:5f:bf:17:02:dd:c2:1c:63:ab:79:91:57:
c0:8e:1d:e3:f9:5b:2d:de:97:14:e2:3a:89:19:ea:
2a:da:99:6a:6f:dd:38:04:ea:79:7f:aa:6d:28:0a:
68:51:5f:70:22:db:11:fd:0c:53:2b:16:5d:bd:77:
df:d4:a9:a5:69:e1:6c:81:0e:16:98:ed:fa:65:48:
9a:9b:40:9a:35:7f:c5:24:77:b4:2e:91:d0:e2:5d:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:55:0F:0B:B6:47:91:91:12:65:E3:A7:DA:0A:D2:93:BE:7A:69
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/T-RVDwu2R5GREmXjp9oK0pO-emk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.180.0/22
Signature Algorithm: sha256WithRSAEncryption
55:26:65:66:c0:0b:bd:a5:65:05:da:43:65:a0:ce:50:d3:5e:
c4:b6:58:c4:85:65:95:66:9c:10:32:ab:43:47:47:fd:4b:a0:
a8:02:3a:4c:27:da:74:a6:60:ae:e2:cf:f8:e5:06:0e:87:2c:
c3:ba:c4:29:5b:34:da:c6:88:50:d5:13:f2:79:8b:07:34:c0:
9a:81:4a:f3:23:02:49:e7:4d:75:39:fb:a0:0f:12:99:f0:8c:
78:2c:a5:ff:a2:0f:5b:4d:81:24:74:11:8f:69:04:41:62:6b:
ed:71:db:6a:31:71:71:96:6b:a4:a1:77:a2:97:1c:a0:65:14:
80:e4:6d:6d:1d:79:08:e5:67:27:d5:b2:c8:d2:7c:86:63:29:
8f:1e:e0:dd:3c:a7:de:7b:6e:73:f5:e7:69:56:04:ab:99:f6:
10:86:c5:d1:86:7c:1f:af:3f:87:73:77:3e:e4:da:ee:53:eb:
94:57:fc:ec:5d:58:33:17:00:a8:fe:1b:92:22:df:2a:35:89:
8c:94:bf:4b:60:73:e9:2f:8b:d7:30:68:45:e0:1b:0c:07:e8:
6b:68:e1:a2:3f:07:90:ee:f6:c3:d9:ed:63:36:94:c5:1f:bf:
6a:36:7c:17:04:2c:9b:20:96:ad:65:81:48:6b:82:15:44:e5:
10:71:dc:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XHP66fi/QUR1XDOf8pfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm
M2ZkZjEwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmU0NTUwZjBiYjY0NzkxOTExMjY1ZTNhN2RhMGFkMjkzYmU3YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJP/x3H57vQYTsQB6iSaTgZ+gapm
XNz7A6CNY1r5N+0LLGr95XBupR/pfl75N5IdGPfJKlwL50GJ/H++V0pWMRz6fcOw
SeR9jz4TdCTKi/OiH0ZEuBXhl8jjTZDnypVBo60rCZXQNFCs1OTXXwuwmMki2dQd
APtquKuMkjOoS3hpP3kQ+HjvggAq3Ch9p+0iNQTHS/OQ/6f4thVu6uDyxkr45wL1
cBhfvxcC3cIcY6t5kVfAjh3j+Vst3pcU4jqJGeoq2plqb904BOp5f6ptKApoUV9w
ItsR/QxTKxZdvXff1KmlaeFsgQ4WmO36ZUiam0CaNX/FJHe0LpHQ4l1aAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/kVQ8LtkeRkRJl46faCtKTvnppMB8GA1UdIwQY
MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt
OTU5NTU5Yjk2Zjg3LzEvVC1SVkR3dTJSNUdSRW1YanA5b0swcE8tZW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3
LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRK0MA0G
CSqGSIb3DQEBCwUAA4IBAQBVJmVmwAu9pWUF2kNloM5Q017EtljEhWWVZpwQMqtD
R0f9S6CoAjpMJ9p0pmCu4s/45QYOhyzDusQpWzTaxohQ1RPyeYsHNMCagUrzIwJJ
5011OfugDxKZ8Ix4LKX/og9bTYEkdBGPaQRBYmvtcdtqMXFxlmukoXeilxygZRSA
5G1tHXkI5Wcn1bLI0nyGYymPHuDdPKfee25z9edpVgSrmfYQhsXRhnwfrz+Hc3c+
5NruU+uUV/zsXVgzFwCo/huSIt8qNYmMlL9LYHPpL4vXMGhF4BsMB+hraOGiPweQ
7vbD2e1jNpTFH79qNnwXBCybIJatZYFIa4IVROUQcdwq
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:30 2026 by rpki-client