This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa
File: c0cTTJQDf36qVQCG96WRyKdM_Wc.roa (raw, json)
Hash identifier: aYsM49Xy0hnVUlbAWRXmCHPgWbkgOmuFrAd7Tian+Cg=
Subject key identifier: 73:47:13:4C:94:03:7F:7E:AA:55:00:86:F7:A5:91:C8:A7:4C:FD:67
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 019B79113F202F032AB9AF3CF62D54302217
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa
Signing time: Thu 01 Jan 2026 10:18:52 +0000
ROA not before: Thu 01 Jan 2026 10:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205313
IP address blocks: 185.222.72.0/22 maxlen: 22
185.222.72.0/23 maxlen: 23
185.222.72.0/24 maxlen: 24
185.222.73.0/24 maxlen: 24
185.222.74.0/23 maxlen: 23
185.222.74.0/24 maxlen: 24
185.222.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:3f:20:2f:03:2a:b9:af:3c:f6:2d:54:30:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Jan 1 10:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7347134c94037f7eaa550086f7a591c8a74cfd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:22:43:95:2b:5f:d9:13:d6:ca:e9:5e:d4:
54:6b:39:3c:11:96:4c:26:51:53:a4:7e:36:90:61:
7c:f7:06:ac:9e:12:9a:72:41:5a:aa:56:ee:42:69:
e6:ed:cc:6a:5f:76:84:69:7d:fa:24:ef:30:74:6a:
9b:8d:cb:18:7c:84:ee:50:db:c3:55:fb:48:e4:92:
a8:de:bb:df:c0:f7:70:9b:a9:9c:d6:e5:5c:7b:a9:
60:87:ff:57:88:60:2b:5f:fe:44:07:95:01:66:ef:
3f:be:2d:c2:57:dd:c1:da:15:aa:e6:24:b1:71:c6:
5b:35:0f:79:9a:de:bf:9f:82:9a:4a:e9:ce:89:36:
13:07:7b:ba:d1:5b:00:c1:e8:9c:6d:2b:f2:42:0b:
5c:a6:da:ed:95:f7:59:bd:f0:69:66:6a:a4:f8:1d:
6b:1f:d5:91:d2:09:35:a5:16:cf:76:88:7d:b4:ed:
09:8c:af:dd:ec:09:90:8a:72:c3:61:54:4b:fa:2d:
48:4c:36:f9:11:12:94:ad:a0:ee:bf:eb:68:65:a5:
68:18:6d:de:25:9d:33:ae:96:49:68:2e:45:4b:9d:
54:44:3a:27:9b:fe:9d:e4:3b:56:b3:13:f6:1c:65:
33:54:09:c0:12:b4:b2:12:92:05:16:e3:3f:03:ce:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:13:4C:94:03:7F:7E:AA:55:00:86:F7:A5:91:C8:A7:4C:FD:67
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:8b:5f:fd:96:dc:df:23:f2:28:20:98:2f:63:76:43:7a:73:
6d:84:e5:d6:30:88:e5:7b:a1:13:7c:ca:ae:6b:f8:e8:e5:95:
62:63:95:ef:ba:9e:2a:80:8e:ac:33:d2:ea:d1:dc:ed:46:85:
0b:a7:1b:b0:08:db:91:34:6d:64:5b:bc:fa:e1:91:05:b0:56:
26:b0:20:b5:45:6b:26:92:d9:6b:f4:df:79:a2:68:de:cf:4d:
49:18:66:9c:5f:46:2d:87:d2:c1:7b:d5:69:4c:05:17:0e:20:
10:86:9a:0c:a2:45:99:50:69:7f:2b:f5:0e:ed:58:1b:f0:86:
95:dc:90:9f:81:42:77:6f:00:b4:6c:bc:64:d4:da:5d:70:2b:
35:e5:27:7a:7a:65:0d:c0:65:92:1b:db:2b:9b:f7:fb:dd:4b:
7e:f1:8a:24:3a:57:fa:78:c9:d6:ee:b2:c3:4d:cd:9f:25:f6:
84:5c:03:4e:bf:44:ae:f1:88:94:61:09:69:4c:a7:89:26:d9:
62:26:81:3a:02:b1:a7:0b:2f:53:b7:5f:a6:88:60:e2:dc:35:
dc:23:88:62:81:9c:30:72:7a:e1:6c:03:f5:04:2f:f8:0d:ea:
61:51:1b:4c:66:ce:85:20:38:62:a8:e2:af:1c:da:f2:ca:aa:
95:e1:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:22 2026 by rpki-client