This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa
File: 7ydENpjQareWHpO9uslcqsis6UA.roa (raw, json)
Hash identifier: wTeA8bx96xEJxxUYSI6aHxzjGmdwgzhbWWttVJ8dPDw=
Subject key identifier: EF:27:44:36:98:D0:6A:B7:96:1E:93:BD:BA:C9:5C:AA:C8:AC:E9:40
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 019B7D5C043B7DF8703C8BA35075A5135A7C
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa
Signing time: Fri 02 Jan 2026 06:19:00 +0000
ROA not before: Fri 02 Jan 2026 06:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213093
IP address blocks: 185.184.62.0/24 maxlen: 24
185.184.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:04:3b:7d:f8:70:3c:8b:a3:50:75:a5:13:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Jan 2 06:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef27443698d06ab7961e93bdbac95caac8ace940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:e8:80:e6:b3:40:ef:30:a8:36:35:a1:60:
3d:6b:19:96:10:b0:d7:b1:fd:7e:37:66:bf:87:c7:
f0:d3:6f:98:3d:8c:80:5c:83:fd:c6:3a:bb:78:21:
88:b3:61:0f:9f:db:2c:f4:b5:2d:be:7d:58:eb:f0:
85:8f:13:ef:c8:ee:71:aa:15:38:5b:ef:69:68:a9:
90:a5:57:2e:cc:0a:7a:04:d7:8a:dc:7d:8f:83:5f:
f3:d1:a4:8b:33:e8:06:f9:b8:73:73:98:0f:d4:68:
59:7e:35:e5:fe:f4:22:2c:fd:38:49:eb:7a:5f:be:
53:07:4c:33:80:5a:7e:7b:86:d8:0a:bf:9b:06:66:
21:ac:24:96:66:31:66:28:49:bf:8a:94:a9:c5:c9:
84:ef:46:81:b0:6c:54:f8:61:f4:b1:93:69:b0:83:
9e:7c:cf:82:7d:f0:c3:12:15:7a:cb:e3:bd:4e:61:
35:5f:a8:a8:54:8b:b8:0c:73:a0:b6:fa:c9:c0:f7:
66:b3:70:ba:2c:63:c3:08:8f:f9:27:0e:15:e2:55:
67:be:bb:c0:ab:6b:4c:1c:44:82:1d:eb:61:21:71:
1d:58:81:31:d8:3b:00:52:e2:7b:8b:4a:09:85:b8:
61:e1:b3:2f:fc:30:f2:95:be:a8:b4:a2:35:97:79:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:44:36:98:D0:6A:B7:96:1E:93:BD:BA:C9:5C:AA:C8:AC:E9:40
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.62.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e7:47:f2:d2:5c:0f:cd:e5:90:19:83:e3:b2:79:29:88:bf:
94:5e:8a:b9:59:b5:a1:28:59:3e:f0:71:14:13:36:10:31:fc:
f5:df:44:b6:46:92:6d:3e:cc:2d:77:ef:e4:59:a3:ef:ae:88:
27:7f:fe:e3:10:40:cd:de:cb:7b:65:e5:e3:29:01:e4:ad:d3:
9d:83:5c:ad:69:04:8f:ea:fd:6a:8d:cf:14:c2:f2:2f:86:87:
0e:07:50:59:a3:34:8c:c4:78:0c:e5:e8:59:e0:88:07:a5:70:
a9:66:86:cb:22:ef:ad:05:19:1a:07:bf:09:d4:0a:ad:79:44:
8a:9b:2b:98:66:2c:52:33:c7:da:cd:10:b1:8f:cf:c9:dc:a9:
98:2d:25:f5:4f:8e:79:fe:9e:89:c7:ff:7a:7b:c0:f8:e1:a7:
1b:55:a1:2a:11:c2:9d:0f:8a:d3:5c:8f:7e:c6:f2:fc:59:29:
a7:35:15:15:72:e3:cc:73:3e:1c:0c:2e:7c:fe:20:ba:f4:9a:
91:89:ce:9a:f6:af:e1:81:b7:95:b1:16:69:f2:82:50:e0:37:
a8:dd:ca:92:88:b1:4d:cb:a0:21:b3:17:1c:55:ea:eb:5e:35:
87:28:43:1c:a0:92:d8:87:77:ed:30:8b:04:bb:02:1a:6b:9c:
e3:8e:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:11 2026 by rpki-client