This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa
File: bv3dWtZZY2LxTtEYmYudDoB39G0.roa (raw, json)
Hash identifier: tzxAb1/SE90OUDmzgetWaOiWEjy0yrEkp9StYURk0/Y=
Subject key identifier: 6E:FD:DD:5A:D6:59:63:62:F1:4E:D1:18:99:8B:9D:0E:80:77:F4:6D
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019B7CECD873F595C8B56A741E4A9A2703DA
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa
Signing time: Fri 02 Jan 2026 04:17:35 +0000
ROA not before: Fri 02 Jan 2026 04:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 37.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 07:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:d8:73:f5:95:c8:b5:6a:74:1e:4a:9a:27:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 04:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6efddd5ad6596362f14ed118998b9d0e8077f46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:38:b1:30:74:2e:ae:b7:02:bc:8a:67:1e:
d8:34:92:fc:16:95:64:bc:39:1d:f7:69:3c:e1:0a:
16:5b:3a:b7:2a:56:34:68:f2:18:2b:83:18:0f:ab:
00:cc:57:5a:79:9a:3e:3f:26:fc:3f:36:08:69:36:
cc:36:75:24:b4:b0:f3:23:66:35:00:d9:68:a4:73:
c5:fd:34:67:56:50:de:2a:4d:05:c3:2e:4e:a5:5e:
3e:42:e4:a9:b9:03:c6:37:d0:0c:1c:cb:ca:4a:22:
dd:2f:f5:09:61:68:bb:0e:7e:53:53:dd:b8:a9:cb:
f5:e8:ab:24:42:82:35:43:aa:22:fe:2e:d0:f0:19:
fa:0a:32:3c:1f:95:c6:04:a4:d5:ab:a7:f6:b3:78:
ff:66:e0:80:a8:6b:d2:67:3b:48:c1:57:11:72:f6:
b2:f7:f5:04:c2:b0:31:90:13:82:ed:89:cb:6b:d5:
4f:45:b8:2a:20:1c:48:7b:e9:a0:cc:05:de:b3:23:
06:65:9b:9c:7d:a1:37:37:6b:79:ec:1d:06:53:f8:
8b:ef:12:07:0f:f3:51:45:cf:f4:92:73:6f:3f:49:
eb:29:fa:c4:b5:59:6e:04:b9:a5:d2:86:a1:c9:15:
73:a9:5c:19:6a:77:f2:6e:74:e1:cf:24:cc:15:5a:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:DD:5A:D6:59:63:62:F1:4E:D1:18:99:8B:9D:0E:80:77:F4:6D
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
60:69:fd:4e:7a:f6:26:81:af:36:21:d5:a0:c0:21:de:f3:94:
4d:f7:f0:7b:fd:d3:96:82:d0:dd:c7:18:e5:f5:f1:7e:c5:75:
cc:71:17:c2:3f:a1:6d:9d:d7:70:22:a6:17:ca:3c:b8:ed:29:
ac:92:22:1e:d8:2b:b7:5f:90:47:48:91:fd:ba:d0:40:cc:f8:
0c:0d:67:92:29:22:e2:b9:30:4f:61:cf:16:4d:0c:8c:b0:c9:
1b:65:c7:d4:f7:b5:c3:d4:ce:92:3e:ce:91:b5:46:53:91:2d:
fe:86:82:7e:62:85:a5:d9:b9:83:71:70:2f:f0:63:3a:d0:14:
ce:f7:0a:78:89:02:88:66:a3:d0:a6:ab:a3:23:30:40:58:94:
0a:3e:1a:3e:41:ab:af:a5:80:72:1d:fc:77:fd:ab:48:7d:7d:
73:29:b6:6a:6d:44:3a:1a:90:c9:61:e2:b4:84:e6:85:e4:67:
ba:fe:08:2c:3f:6e:0e:8f:82:76:b5:58:d3:ad:82:28:02:72:
29:f8:ca:ed:aa:36:34:c2:df:cb:3f:af:73:09:92:eb:fd:7f:
fb:4a:63:a4:da:01:94:a1:b0:f9:25:08:f2:cf:e5:d6:26:43:
c4:33:c8:a9:c7:9c:e3:38:03:1e:56:94:8f:02:4e:2e:b5:7d:
93:6a:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:07:45 2026 by rpki-client