This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa
File: uGgqRaD5XGrStlkDB659GSHW0pU.roa (raw, json)
Hash identifier: 6yK2YCJtLDyOTyXrxwsodgWJ01xvcx1J2snQ6i/NG4s=
Subject key identifier: B8:68:2A:45:A0:F9:5C:6A:D2:B6:59:03:07:AE:7D:19:21:D6:D2:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019B7C137481982249C988AAC0D29D6B7DBC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa
Signing time: Fri 02 Jan 2026 00:20:08 +0000
ROA not before: Fri 02 Jan 2026 00:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57974
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:74:81:98:22:49:c9:88:aa:c0:d2:9d:6b:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 00:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8682a45a0f95c6ad2b6590307ae7d1921d6d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:90:39:ca:6e:84:19:13:81:d2:76:92:98:
c3:f6:17:b0:f6:af:9c:9a:05:ba:88:7d:a4:9d:d2:
33:6f:b5:04:69:8d:cc:4b:95:2c:33:8d:d4:9f:8a:
a6:2f:35:c7:e5:65:57:be:82:5d:3f:ec:79:2a:e5:
4e:8f:ab:20:3f:cf:5d:24:86:21:b1:b4:bc:17:44:
99:54:05:a6:3b:c3:d6:50:02:ae:0f:bf:de:fb:a1:
2a:98:fb:1a:1b:eb:58:6c:aa:db:27:17:16:24:d6:
67:98:35:90:50:e6:de:69:75:7f:77:1e:1a:17:dc:
1e:4a:c5:19:7b:83:9a:08:95:9a:25:ef:ca:fa:5a:
fe:5e:7c:5e:85:dc:ed:7f:83:b1:6b:9d:af:e7:86:
2c:31:ff:7b:e0:30:1d:de:c6:9b:7c:6c:21:b5:37:
7c:46:6e:7e:51:84:a2:30:12:5e:a4:dc:ea:7a:69:
b5:1a:af:48:c3:02:1e:86:3c:ee:43:28:14:98:eb:
57:0b:19:91:35:06:9e:46:de:fb:17:20:ce:37:5e:
7a:9b:3d:59:6f:93:b3:d0:48:e9:d2:38:08:55:91:
4e:3c:84:2e:f3:de:16:da:16:1f:ad:82:26:72:5f:
7d:d7:44:19:34:ce:5e:1a:f5:c9:5a:03:37:dd:b2:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:68:2A:45:A0:F9:5C:6A:D2:B6:59:03:07:AE:7D:19:21:D6:D2:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uGgqRaD5XGrStlkDB659GSHW0pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b8:0c:11:39:88:dc:7d:1f:2e:83:1d:6e:59:2d:63:54:43:
07:52:cf:1e:91:0e:f0:76:9a:4c:72:1c:f3:a8:ea:8b:bf:d4:
da:db:4f:65:fc:ff:61:62:a7:bc:01:dd:34:e2:30:4d:3c:89:
7a:99:84:74:42:37:b8:b1:9f:d0:31:a2:d8:a7:0a:72:72:2f:
4c:c8:2b:22:fd:10:4b:eb:c4:4c:32:9e:a1:e4:34:da:c2:87:
19:db:c3:b2:d2:db:1c:d6:0d:52:97:24:ae:24:94:84:d9:11:
e6:86:21:a0:c7:74:82:2d:cc:9f:c5:20:83:3e:bd:e0:19:02:
b7:4c:1a:19:57:d1:c2:03:ca:cf:2b:b3:99:86:7e:ee:77:13:
55:37:93:16:1d:6a:55:be:e2:e1:b8:b5:ff:76:32:3e:e1:74:
a5:95:b9:47:0c:da:ca:d8:d5:c6:64:55:e6:86:aa:32:ed:9e:
a7:87:af:50:31:8a:30:06:48:e1:95:9a:59:16:07:d8:6d:87:
32:18:56:b2:7c:95:f2:de:3f:bd:d3:81:ee:b6:69:cb:27:c1:
b7:ad:75:3f:f5:44:9d:77:56:34:8e:93:10:37:4c:4e:a8:db:
47:4e:4e:d8:2b:88:f9:31:fc:90:eb:92:ac:3b:e1:6b:de:0b:
d5:f1:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:53:22 2026 by rpki-client