This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa
File: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (raw, json)
Hash identifier: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=
Subject key identifier: BB:FF:9B:29:59:2F:57:5F:C8:10:18:96:EC:65:89:7D:84:06:DC:AC
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 019B7C12D7E7967EAAAADEAFCB4FB14C2D31
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa
Signing time: Fri 02 Jan 2026 00:19:28 +0000
ROA not before: Fri 02 Jan 2026 00:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1770
IP address blocks: 195.177.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:d7:e7:96:7e:aa:aa:de:af:cb:4f:b1:4c:2d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jan 2 00:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbff9b29592f575fc8101896ec65897d8406dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:ec:0c:fa:a4:16:a2:91:fe:52:6c:54:2b:
ac:8e:41:e2:e3:cb:b4:20:e9:3b:de:9e:94:7a:ee:
34:e5:7d:a3:21:16:73:ba:8d:43:ff:27:7e:6a:a2:
b4:22:8b:01:06:0b:5f:7a:ec:58:2e:31:0b:7b:e0:
1f:6a:30:33:20:20:40:96:f5:de:db:aa:9d:a2:d7:
8d:70:5a:10:f1:a8:5c:3e:28:af:dd:03:46:ac:4e:
91:34:42:ef:07:f9:a6:4a:5f:c1:a9:1c:b0:b6:66:
11:65:a7:1f:65:84:a3:b1:73:4a:8f:7c:47:1f:12:
76:aa:5c:09:11:8e:f6:5d:7c:e9:5e:78:99:75:53:
71:d7:17:f4:28:e5:61:1f:f5:68:97:41:81:03:23:
ba:bd:c0:f0:eb:81:3f:a5:11:4c:b0:64:3e:7d:ff:
b5:dd:38:bd:c5:85:12:ad:79:56:f1:54:51:2d:fb:
6d:11:4f:d4:0f:70:f2:68:88:91:46:24:c4:e2:9e:
5f:3a:b1:02:65:31:2f:0c:b8:50:f3:db:6a:97:42:
f5:e8:77:10:96:1b:b9:ab:75:e0:7f:27:6e:05:dc:
1c:fa:ff:1f:00:b1:de:2c:0c:37:bf:37:e6:32:5a:
4b:93:da:c2:13:b7:75:ce:8b:03:90:96:9b:00:62:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FF:9B:29:59:2F:57:5F:C8:10:18:96:EC:65:89:7D:84:06:DC:AC
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:03:ac:73:b5:8a:9f:77:a1:95:ff:88:c7:59:be:7e:50:8a:
20:57:d1:4d:54:24:4c:5e:3f:0b:d3:9b:82:e8:14:1b:39:3e:
fe:60:6b:74:dc:e9:7b:10:fc:a3:8e:cb:5c:e3:6e:85:37:7a:
67:41:7a:ac:95:d8:24:ad:bc:24:ec:f6:e0:44:66:cd:42:c6:
b2:75:dd:6c:79:6b:ba:18:90:06:bf:12:69:2a:3a:ff:1b:d8:
bd:2b:c6:7e:21:c3:55:92:27:f0:d5:74:d3:30:f5:b6:8a:e1:
6b:78:0c:e6:9f:29:8c:5b:cd:39:4a:72:d9:bc:f6:56:5e:ae:
f3:95:d8:50:db:56:fd:77:4e:fa:9a:3a:eb:e5:5d:70:ad:ac:
96:4e:f5:63:c8:8b:91:4a:b0:c2:a4:9e:08:46:58:71:74:9c:
0d:29:75:da:f0:21:21:4d:93:49:58:5d:f4:50:bb:f5:4d:9d:
dd:83:43:35:f1:a4:46:59:b6:14:65:a7:54:f6:cf:14:b8:a9:
27:ce:88:2d:04:54:eb:49:78:c7:98:d8:17:09:84:0a:b6:30:
1d:dd:62:a7:45:91:e4:7c:11:1d:cc:95:3b:54:fb:c3:f4:a7:
30:98:ae:fc:1d:72:0a:86:34:48:ee:9c:f2:31:0d:8b:d4:de:
8c:8a:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:42 2026 by rpki-client