This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/xrChCZKPpUH_V3yyUorXAC7-wuI.roa
File: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (raw, json)
Hash identifier: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=
Subject key identifier: C6:B0:A1:09:92:8F:A5:41:FF:57:7C:B2:52:8A:D7:00:2E:FE:C2:E2
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 019B7D5B0CC7CD2F4E1BA24B0AED541A0207
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/xrChCZKPpUH_V3yyUorXAC7-wuI.roa
Signing time: Fri 02 Jan 2026 06:17:57 +0000
ROA not before: Fri 02 Jan 2026 06:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42487
IP address blocks: 185.230.8.0/22 maxlen: 22
2a0d:ee00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:0c:c7:cd:2f:4e:1b:a2:4b:0a:ed:54:1a:02:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Jan 2 06:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6b0a109928fa541ff577cb2528ad7002efec2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:5f:8f:01:42:44:7e:8e:19:23:42:ab:28:
73:92:1b:96:99:3a:2e:4f:c4:42:57:a3:ad:7a:4f:
92:d8:91:ae:35:79:07:aa:0e:01:8c:f5:fc:f9:8f:
c4:78:51:19:ed:08:dc:1f:2f:ba:75:e3:96:28:8c:
ba:d5:3b:64:5d:e4:98:fa:5b:5d:fa:39:b0:7c:58:
0a:40:76:dd:d8:42:4f:0b:9a:61:b5:f2:7e:73:36:
f3:8b:1e:66:28:38:f7:8f:c3:1f:10:cf:f9:38:8d:
2c:13:69:21:41:1f:61:4c:74:2b:fb:62:18:6f:f4:
f1:65:59:85:80:c0:03:dd:88:dd:a1:a9:d6:98:01:
e6:ce:3b:29:3c:b7:9f:9f:15:aa:c5:e4:a1:c7:6d:
1e:63:3c:d7:06:bb:da:3d:fb:f5:3a:30:3d:15:2e:
ae:de:a5:03:bd:e7:1f:a3:bb:d9:ba:e7:31:ad:fe:
59:09:91:83:47:ee:b7:e9:ac:f0:53:01:5a:17:0e:
f0:2e:2c:c7:01:86:cc:8e:ab:ab:72:95:85:43:5d:
05:a1:a3:4c:95:60:07:c3:36:fc:66:22:ef:a4:f1:
34:a3:31:9a:56:b7:78:7a:de:43:b5:72:73:bf:eb:
17:ac:ed:fe:f7:cc:6e:99:55:80:49:10:c5:d3:25:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:A1:09:92:8F:A5:41:FF:57:7C:B2:52:8A:D7:00:2E:FE:C2:E2
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/xrChCZKPpUH_V3yyUorXAC7-wuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.8.0/22
IPv6:
2a0d:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
79:88:52:5c:c4:07:81:f9:af:8a:f8:7b:f8:72:f9:39:b7:ca:
ab:e6:78:46:81:10:b9:1f:7d:5c:b8:ee:f7:20:ba:93:e4:b6:
3c:c0:ba:40:b7:fe:bc:bc:8d:1c:40:79:c1:ab:be:09:08:0c:
85:2d:5d:00:ae:4e:f7:48:9c:4f:56:b3:10:76:0c:9d:e3:b4:
55:ab:ff:e6:0a:33:ea:7f:59:fc:0e:f8:62:74:64:d6:0f:02:
37:84:8e:14:ce:f3:d6:e5:7d:91:a7:5d:0b:b3:99:7c:fb:e8:
ee:1c:b6:c4:45:e4:e9:43:21:87:b1:4e:b6:c9:cf:b9:9a:b1:
88:e9:0b:4f:ee:ab:59:96:3c:cb:27:53:ce:cb:41:6b:f7:b6:
1a:da:ff:61:11:39:a7:b1:5c:6b:f1:b7:75:ca:1d:b1:f4:67:
f0:a0:76:a1:0d:64:52:09:3e:e6:9a:ff:20:90:d8:8c:83:9b:
3b:5d:d2:25:be:4b:88:39:12:02:c7:d6:77:4e:e2:c5:94:9b:
e6:d1:ef:b5:9a:3c:32:a4:86:fe:eb:b3:d5:23:25:bd:e3:03:
bd:77:2c:78:58:37:5f:41:ca:36:b9:d5:27:fc:db:6d:a2:12:
a1:51:5e:fc:22:bf:3d:cd:bf:d6:4e:2b:a8:e5:a0:2a:ae:6e:
ab:b8:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:03 2026 by rpki-client