This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/IwL0FMLGOg5VqlW52QhR55d_wK8.roa
File: IwL0FMLGOg5VqlW52QhR55d_wK8.roa (raw, json)
Hash identifier: Aq8zdRXcEkkg8WYuPHmD2/Gn6hy/jyUt5aM4M2GLRVo=
Subject key identifier: 23:02:F4:14:C2:C6:3A:0E:55:AA:55:B9:D9:08:51:E7:97:7F:C0:AF
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019B7C7EE849A38B6B9055374AAB31544B6F
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/IwL0FMLGOg5VqlW52QhR55d_wK8.roa
Signing time: Fri 02 Jan 2026 02:17:30 +0000
ROA not before: Fri 02 Jan 2026 02:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201209
IP address blocks: 185.61.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7e:e8:49:a3:8b:6b:90:55:37:4a:ab:31:54:4b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Jan 2 02:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2302f414c2c63a0e55aa55b9d90851e7977fc0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:5b:54:fa:c3:f2:e4:54:2a:6f:8d:b2:76:
fc:c6:cc:82:69:83:bd:e5:ab:8d:bc:bb:bd:48:24:
11:ad:fe:a4:37:aa:82:f8:0e:29:89:3b:5c:80:fe:
b5:06:56:11:e0:dd:87:73:56:ae:1f:2c:27:ce:09:
56:a5:86:6d:1c:5c:a5:d0:04:36:db:12:28:32:c3:
d3:30:d5:8e:3b:b1:0f:f9:76:78:14:26:df:57:15:
cb:69:b0:50:90:1c:bf:2b:47:23:31:78:5b:9e:e1:
91:66:f8:c4:4e:fa:ba:04:4a:71:7c:6d:a9:b9:bc:
f7:3c:46:c9:04:c4:2c:a6:42:9c:ee:5a:b1:5c:d8:
1f:36:55:3d:ce:72:95:cb:d0:5b:fe:69:7d:89:02:
66:4f:0e:33:98:ce:63:3b:d1:ac:53:b1:2f:5f:42:
de:2e:b4:0e:0a:e6:0c:9c:6f:cf:87:23:79:de:71:
4e:de:72:88:c0:02:aa:7c:cf:a6:68:d0:86:a8:2d:
0c:2b:ba:99:45:5e:eb:a9:45:cf:aa:09:8f:f5:20:
74:c7:c9:3d:f8:80:68:bc:25:8b:9c:91:bb:81:56:
61:65:47:93:20:35:58:9e:86:21:47:cc:43:0c:b2:
17:ad:ae:fc:a5:19:28:dc:da:f6:25:f3:0d:80:9f:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:02:F4:14:C2:C6:3A:0E:55:AA:55:B9:D9:08:51:E7:97:7F:C0:AF
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/IwL0FMLGOg5VqlW52QhR55d_wK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.6.0/24
Signature Algorithm: sha256WithRSAEncryption
70:96:9d:14:b5:17:0f:d3:79:e0:a1:34:82:f2:30:e4:18:fe:
aa:36:64:ba:09:89:28:ff:d9:f2:ad:94:14:98:51:5a:be:b9:
8c:88:ca:47:10:13:88:01:a2:6d:62:ce:0a:7d:52:e1:9c:a6:
2c:d9:a0:a3:20:11:08:3b:28:be:78:28:e7:67:a0:7d:3b:6f:
7b:62:13:c3:da:49:e3:00:50:cd:f6:06:e3:c7:56:08:fa:e2:
85:b8:d9:46:83:2f:ca:21:c2:df:82:96:a5:6b:df:28:32:7e:
01:25:bb:8a:95:bb:64:57:e3:43:51:79:6c:a9:5b:f6:25:82:
3a:05:08:0a:c8:6a:9a:33:20:f6:75:d1:49:d5:74:84:40:39:
79:09:ee:41:39:38:6b:e5:2b:9a:9b:ac:f4:15:35:2a:82:f5:
a3:f4:69:a4:aa:d1:3d:bb:29:28:62:3a:33:f4:bd:17:14:c0:
d9:c5:c1:3d:aa:2b:94:2e:51:5e:34:f7:0a:e7:6a:54:2a:92:
a5:59:c0:b8:d3:fb:b2:ef:74:9c:d2:b6:7d:fd:e9:55:dc:ea:
0e:d3:95:2b:50:c0:25:ba:0f:8a:77:70:7c:2f:f4:bc:1e:c7:
8e:90:a6:30:86:d6:1c:44:8d:fe:0f:19:57:e1:81:ad:63:e8:
76:78:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:06 2026 by rpki-client