This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bpSsw3u17paxn3-AVlEf6jIUUto.roa
File: bpSsw3u17paxn3-AVlEf6jIUUto.roa (raw, json)
Hash identifier: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=
Subject key identifier: 6E:94:AC:C3:7B:B5:EE:96:B1:9F:7F:80:56:51:1F:EA:32:14:52:DA
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019B79113AD27563894DB93B82620CA366B1
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bpSsw3u17paxn3-AVlEf6jIUUto.roa
Signing time: Thu 01 Jan 2026 10:18:50 +0000
ROA not before: Thu 01 Jan 2026 10:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203462
IP address blocks: 185.134.68.0/22 maxlen: 24
185.134.68.0/24 maxlen: 24
185.134.69.0/24 maxlen: 24
185.134.70.0/24 maxlen: 24
185.134.71.0/24 maxlen: 24
185.139.181.0/24 maxlen: 24
185.139.182.0/24 maxlen: 24
2a06:eb00::/29 maxlen: 29
2a06:eb00::/32 maxlen: 32
2a06:eb01::/32 maxlen: 32
2a06:eb02::/32 maxlen: 32
2a06:eb03::/32 maxlen: 32
2a06:eb04::/32 maxlen: 32
2a06:eb05::/32 maxlen: 32
2a06:eb06::/32 maxlen: 32
2a06:eb07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:3a:d2:75:63:89:4d:b9:3b:82:62:0c:a3:66:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Jan 1 10:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e94acc37bb5ee96b19f7f8056511fea321452da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:e2:53:b7:e2:1c:ee:08:07:30:54:82:75:
73:61:e9:e7:be:af:85:c4:fe:ad:2a:37:12:2f:62:
1f:39:11:88:a5:b8:6e:c9:ac:ed:26:16:31:95:a5:
31:47:3a:85:2d:d2:0a:c4:2b:69:b0:92:2f:02:f6:
33:3f:2d:cb:6a:6b:3d:97:5e:e3:24:4b:a9:8c:cf:
b6:e8:cd:a7:a1:58:62:63:73:76:5b:21:32:87:67:
cd:df:4a:8c:11:10:05:c6:54:ca:a0:f2:92:52:fa:
bd:12:2f:bd:b7:f8:b2:76:cd:b4:52:15:d6:69:e8:
4e:88:ae:85:c2:9f:21:03:26:4c:98:82:a0:ed:81:
6a:de:40:f7:93:2a:8e:78:69:6b:0b:5e:c3:2d:e2:
a6:71:2b:ae:8e:d3:1b:d1:a3:16:a3:6c:ba:a8:69:
0d:55:04:4f:ca:64:ac:8f:b0:44:3d:28:84:9c:d3:
49:09:ca:59:7e:7e:1f:3a:5b:34:81:73:99:40:30:
0d:8f:5c:73:d5:de:4e:44:0e:53:1b:eb:ed:83:8b:
52:c5:a7:88:82:9a:21:6d:0b:a9:59:d4:95:53:81:
49:50:f3:e5:94:81:70:16:e7:aa:d2:8f:13:2a:84:
9b:35:55:24:96:77:60:a0:d8:9d:87:c6:57:cc:e8:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:AC:C3:7B:B5:EE:96:B1:9F:7F:80:56:51:1F:EA:32:14:52:DA
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/bpSsw3u17paxn3-AVlEf6jIUUto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.68.0/22
185.139.181.0-185.139.182.255
IPv6:
2a06:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
49:7a:90:45:14:b1:04:30:3a:2e:4a:f6:7d:ec:5b:7a:3f:c8:
6a:d5:04:4a:51:8a:a3:99:50:36:be:26:eb:03:84:1c:d9:55:
19:37:2d:c9:30:6f:1b:50:32:ac:2b:6d:90:8f:30:89:ec:37:
93:c7:a8:af:00:71:7d:0e:cb:45:ad:ef:7c:3a:ee:c2:5a:f7:
f5:87:50:29:a1:73:96:c7:62:ec:32:65:ae:3d:4b:00:a8:da:
c8:50:d9:42:92:f9:e6:91:45:9e:91:0d:87:df:78:94:a1:f1:
c8:63:f6:52:e4:70:e5:b0:3b:05:eb:3b:f7:8f:6f:86:ac:9c:
9a:43:5e:2f:79:3d:b0:aa:24:21:79:e4:51:c6:06:a4:81:00:
d1:c8:81:b6:6d:22:a6:69:cf:b5:9e:10:66:52:69:21:ff:5d:
a1:0a:f6:f8:f3:87:73:68:0b:a8:fc:9c:d1:04:fa:6c:a6:98:
ca:3e:49:01:02:0c:78:ad:05:28:0d:06:c7:9d:62:76:0c:9e:
97:45:10:2f:36:97:10:2c:a1:e5:f7:2c:d3:d0:c7:ff:a1:ef:
0f:7d:aa:50:35:fb:6e:d8:57:08:bd:c6:20:ad:a6:25:22:24:
1d:ee:41:0d:3d:41:e6:e6:25:66:9f:a9:30:8d:9b:ab:32:cd:
ce:9c:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:37:26 2026 by rpki-client