This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/ciYm9mEV2L9eSrKsaReboOeTaEs.roa
File: ciYm9mEV2L9eSrKsaReboOeTaEs.roa (raw, json)
Hash identifier: y10S4mN+BJMChkxSiJiAL2EsRGyVDqBF8+UMGdjCK70=
Subject key identifier: 72:26:26:F6:61:15:D8:BF:5E:4A:B2:AC:69:17:9B:A0:E7:93:68:4B
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019B77C70001A615E76CF171F34016A1EE28
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/ciYm9mEV2L9eSrKsaReboOeTaEs.roa
Signing time: Thu 01 Jan 2026 04:18:08 +0000
ROA not before: Thu 01 Jan 2026 04:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60941
IP address blocks: 185.21.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:00:01:a6:15:e7:6c:f1:71:f3:40:16:a1:ee:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Jan 1 04:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=722626f66115d8bf5e4ab2ac69179ba0e793684b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:95:91:c8:54:ec:af:05:62:2e:a5:5c:59:
d1:c8:ea:5c:f8:bd:3e:cc:7f:f9:13:70:0b:62:00:
4d:ae:46:e6:e9:38:c0:ed:6d:75:e3:61:0e:1c:fe:
56:45:86:f1:13:87:28:93:f7:90:4b:ad:12:ce:e3:
fe:ef:c1:08:bf:d8:1b:e5:e5:3d:48:14:50:1b:d4:
63:26:a6:3d:c5:c2:0d:10:42:af:48:be:c7:1c:65:
e7:64:3f:d7:ab:f1:4b:68:65:14:18:7e:3c:25:b8:
84:96:36:07:ce:34:18:4b:72:4f:fb:05:b7:e2:72:
95:27:2e:0b:c8:0b:6a:00:ba:84:74:9c:94:d5:13:
b5:27:63:29:b2:01:3f:6d:1a:d7:48:1e:95:6e:3d:
b1:25:fb:bb:3d:5e:77:9d:a5:f0:04:35:64:8a:d8:
e5:76:76:88:35:67:de:cf:20:8d:6e:8d:eb:78:b5:
25:6b:c1:73:9b:f7:5a:de:0c:55:87:ab:df:f9:33:
3c:9e:7c:54:32:ff:32:a6:49:49:d6:fc:df:13:f8:
d1:72:d6:4c:a3:de:58:4a:13:03:a1:e9:0c:a8:09:
52:ee:8b:ab:0b:14:65:17:19:92:6a:ed:4c:53:a7:
11:0f:85:47:8f:f7:e0:87:6b:c2:b0:69:37:2f:2c:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:26:26:F6:61:15:D8:BF:5E:4A:B2:AC:69:17:9B:A0:E7:93:68:4B
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/ciYm9mEV2L9eSrKsaReboOeTaEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:3e:12:72:9d:cb:dd:a0:45:6e:cf:3e:cb:4d:b6:5d:9e:de:
8c:ae:92:58:aa:cd:e2:31:f7:d1:bb:48:e2:32:be:08:79:e4:
c9:55:80:e7:5c:5d:ac:c8:88:6b:63:aa:a1:60:ac:1b:2b:9f:
3e:c5:0f:b6:1f:0c:0b:f9:a3:47:a8:26:88:c8:12:0f:c1:aa:
50:ac:7c:53:20:81:45:54:39:1b:fe:03:0e:75:5c:7e:c2:b0:
ba:34:28:39:ab:96:27:c3:a0:5c:19:fc:ef:a5:1c:f6:4c:6d:
d6:e6:1b:70:2b:cc:52:0f:06:75:94:11:77:4c:dc:bc:f4:2e:
09:c1:e1:b7:0d:85:5a:64:c2:0b:be:dd:fb:26:4d:22:1f:e2:
27:85:65:7f:b7:d9:f4:3c:30:42:9b:16:6d:f0:49:61:d4:e9:
4a:00:84:76:02:4f:2d:3a:af:fb:d8:87:5b:b7:64:62:5c:5a:
86:d2:c4:43:58:2e:f6:72:b2:e0:4b:eb:b4:92:ea:5c:bf:6c:
16:3b:52:50:5d:76:ce:eb:c5:06:fd:85:11:86:d1:d2:c3:9f:
6f:34:95:2e:ea:35:bb:84:ed:87:65:59:da:c1:f7:e7:99:6c:
17:92:66:e4:22:aa:b6:a6:5e:88:e4:13:a1:3b:8a:b2:4f:a7:
ac:f6:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:16 2026 by rpki-client