This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa
File: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (raw, json)
Hash identifier: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=
Subject key identifier: B1:E0:45:61:84:2F:D1:CB:EB:57:E8:C1:B6:DC:0B:C4:6C:7E:1A:04
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019B76EB89D54CC3549AEB292F24BCFBF340
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa
Signing time: Thu 01 Jan 2026 00:18:26 +0000
ROA not before: Thu 01 Jan 2026 00:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:89:d5:4c:c3:54:9a:eb:29:2f:24:bc:fb:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 00:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e04561842fd1cbeb57e8c1b6dc0bc46c7e1a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:51:d6:54:54:7c:e7:b2:9b:1a:87:30:b7:
1a:e8:22:fd:29:a8:96:7c:19:c0:5f:76:03:71:a4:
76:c4:00:f6:69:bc:01:df:9c:0a:55:3a:25:67:b2:
57:b0:20:75:3f:a2:12:ee:7c:45:e5:e5:e2:14:79:
57:f4:31:3d:e0:1c:56:72:c8:b8:1b:85:0f:08:56:
63:a8:0c:10:3e:ab:30:8e:34:d2:1c:2d:d2:d4:09:
35:a6:b0:4e:ac:b1:af:28:31:08:d1:40:3f:da:64:
27:8b:17:af:bd:49:d3:b4:41:0d:44:4e:41:65:4e:
ec:e0:80:4d:f6:d5:8f:d6:f0:ee:3e:a4:6f:31:67:
33:f2:5a:2a:cb:2a:4e:75:b5:89:ac:12:07:83:c4:
c5:32:74:90:44:e8:f8:ea:f2:86:28:c1:97:0a:aa:
8e:8f:23:6a:df:fb:fa:67:d8:62:54:1a:f7:e4:b2:
f0:cd:c8:40:52:ab:fe:e5:15:1a:a8:a8:2d:c3:76:
2d:b4:03:99:9c:c5:7b:00:e5:89:2e:40:36:bc:97:
75:1a:84:f2:6e:f7:84:c4:95:f7:3c:42:d5:f2:e9:
d3:ed:85:ac:bb:3c:e7:ea:41:a7:43:94:cd:24:2b:
08:11:b0:55:db:56:c5:1a:e4:4d:6c:b4:1a:1c:d3:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:45:61:84:2F:D1:CB:EB:57:E8:C1:B6:DC:0B:C4:6C:7E:1A:04
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/24
91.151.82.0/24
91.151.91.0/24
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:2f:17:e8:7b:c3:8f:91:19:70:8e:4b:77:56:4e:2f:14:bd:
d2:1a:ee:c6:4e:96:9b:15:0c:ac:87:d9:d4:fe:52:08:5f:13:
a3:c2:b0:eb:40:14:fd:5a:fe:4a:ab:2e:cd:db:87:b9:86:80:
26:5a:8f:14:b1:3f:e1:e0:43:9e:3a:1d:41:29:a6:8a:f3:c0:
02:b5:8a:38:87:b6:0d:3e:11:83:a1:38:82:79:22:ef:7b:63:
88:e6:4c:89:17:ff:67:ff:d3:0c:a3:4d:b4:cc:74:5d:0a:4c:
e3:cb:7e:42:07:d4:6b:8a:bb:ab:fe:57:d9:7f:73:3f:89:24:
86:98:18:2f:6b:e5:49:52:67:79:a6:5f:44:d3:b0:09:03:a5:
49:61:99:02:72:66:be:08:25:87:77:12:11:41:2d:07:03:f0:
12:70:4b:8f:c9:30:89:1e:3b:23:3e:2e:ed:66:84:09:3e:21:
7c:e5:23:ff:4e:c7:08:cd:3b:c1:d7:ed:1e:d6:39:cd:4d:37:
04:20:7f:aa:4f:29:ef:05:8b:8e:e3:b8:c0:f8:52:c3:81:fa:
35:3d:a1:b2:a0:01:f9:e8:a7:57:e7:4e:4f:94:41:87:49:01:
30:a8:60:24:62:1b:1d:26:4b:44:70:d3:c2:0a:f2:9e:6a:2f:
07:8f:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:39 2026 by rpki-client