This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bTtxdGeIoqLQie_GEKxyRDlVVrM.roa
File: bTtxdGeIoqLQie_GEKxyRDlVVrM.roa (raw, json)
Hash identifier: ITap7RmivkjeN8QVoJ4CbB5cuvwQ6qXFoRhMQCp2Flg=
Subject key identifier: 6D:3B:71:74:67:88:A2:A2:D0:89:EF:C6:10:AC:72:44:39:55:56:B3
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019C2CDAF56DD525838E70553204C8723851
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bTtxdGeIoqLQie_GEKxyRDlVVrM.roa
Signing time: Thu 05 Feb 2026 08:11:13 +0000
ROA not before: Thu 05 Feb 2026 08:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24921
IP address blocks: 81.198.189.0/24 maxlen: 24
87.110.250.0/23 maxlen: 23
87.246.168.0/24 maxlen: 24
87.246.169.0/24 maxlen: 24
87.246.170.0/24 maxlen: 24
87.246.171.0/24 maxlen: 24
194.8.22.0/24 maxlen: 24
213.175.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:da:f5:6d:d5:25:83:8e:70:55:32:04:c8:72:38:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 5 08:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d3b71746788a2a2d089efc610ac7244395556b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:d0:fc:68:bd:ce:81:af:40:ce:69:1d:cc:
b1:a1:0d:75:a6:7c:f8:d2:16:88:5a:5f:47:f1:c6:
6d:02:17:d6:46:c6:9e:72:67:57:db:08:4a:42:b1:
68:63:ed:1c:9c:79:46:4a:be:c8:71:e5:44:80:ad:
d9:23:0f:37:cf:57:cb:59:e8:83:39:75:bb:a2:bf:
42:6c:6b:9c:ce:15:fb:aa:01:d7:75:fa:c2:01:42:
48:e2:bf:9b:f1:54:03:c5:52:68:1d:72:e0:34:cf:
e5:20:42:1e:c6:b6:16:3b:8c:87:31:98:74:61:dc:
70:b8:8e:2d:7a:76:54:de:f9:ad:01:bf:90:98:1a:
26:21:66:71:a5:c1:8e:ae:66:2a:8c:6c:59:02:60:
3a:0c:fe:e4:85:9a:b5:f0:94:99:52:31:f9:1e:a3:
1c:e2:65:bb:23:8b:94:74:47:19:4d:63:3b:79:24:
2b:09:e2:46:83:03:e0:23:6b:9b:70:b3:e8:ce:d6:
a1:a0:7b:15:0c:df:cf:8f:e9:9c:40:c0:00:06:d9:
d1:dc:a0:67:16:a4:dc:b4:20:3e:e5:10:61:7d:df:
09:78:ae:8b:5c:aa:a1:d0:3e:06:45:6f:11:d8:e5:
70:60:7b:48:b5:f1:f1:cd:40:0d:de:52:70:70:27:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:71:74:67:88:A2:A2:D0:89:EF:C6:10:AC:72:44:39:55:56:B3
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bTtxdGeIoqLQie_GEKxyRDlVVrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.189.0/24
87.110.250.0/23
87.246.168.0/22
194.8.22.0/24
213.175.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6d:0c:f3:d0:57:5b:fa:cd:73:81:5c:2f:3a:c5:3a:37:09:
db:f6:2c:57:0a:35:f5:1f:54:62:70:7a:73:35:41:e2:02:dc:
cb:10:48:61:03:2e:27:40:75:a9:b9:09:f1:62:21:04:30:83:
b8:a2:bf:49:92:a8:1f:8d:b4:bd:d9:98:c8:2a:6d:7b:62:f5:
a2:bc:64:1e:76:81:76:e4:d5:bf:8b:5e:19:a1:f2:43:97:0d:
3e:79:3a:f4:c7:0c:fe:fc:fa:b1:e2:f2:0d:f1:18:43:9b:6b:
93:5c:f3:a0:6c:65:f7:ea:22:9a:b2:63:de:00:82:7a:1f:9c:
40:ae:55:38:ad:e6:48:72:58:71:41:3d:f1:82:de:81:03:bf:
6f:be:7d:e8:7c:4f:eb:b3:da:ab:37:01:5b:49:0b:88:73:c6:
2f:fd:8a:34:fe:6d:d3:4b:02:2e:12:08:e0:11:ae:90:50:7c:
a1:d4:6b:57:fc:60:3c:aa:5a:f6:49:d1:87:fc:5d:61:15:e9:
e7:aa:90:50:9e:34:74:88:85:58:f3:f0:d1:93:c9:e4:ac:87:
fd:f3:45:95:79:20:ad:0f:ca:81:bb:09:77:22:80:69:d8:b0:
1a:3e:25:c3:db:83:01:15:ca:7d:36:90:bb:0b:bb:b0:22:24:
9a:eb:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:19:43 2026 by rpki-client