This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/uggilkPXIQowDX7IENHctXgTYrc.roa
File: uggilkPXIQowDX7IENHctXgTYrc.roa (raw, json)
Hash identifier: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=
Subject key identifier: BA:08:22:96:43:D7:21:0A:30:0D:7E:C8:10:D1:DC:B5:78:13:62:B7
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019B7EA4CB18C895BB4457C8ACD477AC79E8
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/uggilkPXIQowDX7IENHctXgTYrc.roa
Signing time: Fri 02 Jan 2026 12:18:07 +0000
ROA not before: Fri 02 Jan 2026 12:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205726
IP address blocks: 185.208.56.0/22 maxlen: 22
185.208.56.0/24 maxlen: 24
185.208.57.0/24 maxlen: 24
185.208.58.0/24 maxlen: 24
185.208.59.0/24 maxlen: 24
2a0b:31c0::/29 maxlen: 29
2a0b:31c0::/48 maxlen: 48
2a0b:31c0:1::/48 maxlen: 48
2a0b:31c0:2::/48 maxlen: 48
2a0b:31c0:3::/48 maxlen: 48
2a0b:31c0:4::/48 maxlen: 48
2a0b:31c0:5::/48 maxlen: 48
2a0b:31c0:563::/48 maxlen: 48
2a0b:31c0:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:cb:18:c8:95:bb:44:57:c8:ac:d4:77:ac:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Jan 2 12:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba08229643d7210a300d7ec810d1dcb5781362b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:ea:3e:74:a3:73:46:3f:f1:10:c5:86:3a:
4d:ec:77:01:b6:a4:67:ea:68:4b:1a:fc:86:ff:14:
63:58:fa:f4:41:b9:91:b9:e6:01:7b:38:c0:f8:23:
8e:bf:b2:30:be:38:90:fc:2b:a0:b1:90:dc:b2:ab:
e1:d0:a7:38:17:d9:1b:9c:c5:74:bc:c8:11:c2:ec:
5f:9f:27:0d:71:7e:e5:a9:11:26:ae:38:c5:82:6f:
20:87:4a:ed:3a:74:3e:f8:3f:f0:50:1d:d1:fa:23:
87:1a:25:ad:4c:4f:47:77:2c:7c:be:ea:e5:49:45:
d8:d1:23:1f:6a:28:fc:71:d9:dc:9c:bb:dc:e1:cd:
f6:52:c7:81:73:be:9e:17:c2:38:2c:be:fe:57:d4:
dd:b9:8b:a8:b1:49:73:2e:85:22:56:1b:d4:c8:d3:
66:90:f9:6d:20:5c:42:f5:57:82:f0:b7:03:44:e3:
43:ae:59:d2:8d:a0:55:5b:ba:6a:4c:f5:75:d6:15:
53:f3:de:9d:49:7b:6d:cd:ae:1f:46:e5:d9:8d:6c:
45:27:bf:b1:b9:62:f9:85:d1:34:02:d1:4f:88:b0:
8a:1f:d0:38:30:dd:6a:22:15:98:d9:d5:0f:f1:b5:
eb:48:bb:a7:3c:51:a5:3b:cf:c8:77:15:85:2f:f9:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:08:22:96:43:D7:21:0A:30:0D:7E:C8:10:D1:DC:B5:78:13:62:B7
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/uggilkPXIQowDX7IENHctXgTYrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.56.0/22
IPv6:
2a0b:31c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:dc:b6:45:6c:95:ae:82:fd:7d:9e:6b:f7:38:59:0f:e9:e1:
3f:4d:f2:3b:af:ab:84:97:df:ae:c1:38:ed:59:40:b1:ae:ce:
ec:3c:1a:bf:59:88:12:8a:37:ba:b3:06:66:cb:11:10:50:c3:
8d:7a:3b:e3:8e:d9:24:a1:e1:ae:f3:8a:36:5b:c3:64:89:44:
7e:cc:22:87:c2:49:97:cd:1e:e2:ac:55:a2:cf:69:27:f0:73:
94:9b:80:41:fa:cc:23:7e:b2:b1:b5:21:b1:ad:11:76:6f:b0:
34:6e:40:59:50:c7:fd:86:8f:50:77:14:90:86:ba:c6:dc:75:
30:93:4a:34:3a:de:e5:25:2c:89:22:71:d0:54:df:74:73:62:
12:6c:b7:2c:0a:f9:03:cb:9e:48:5c:d3:49:f9:88:22:06:a7:
ed:13:a2:b7:bf:95:d2:b2:eb:bc:13:44:04:2c:16:88:e5:07:
11:10:97:df:25:dc:ad:c8:ee:8e:06:fb:c4:6a:55:01:9d:72:
38:9b:14:c7:72:8c:e4:14:c3:37:44:62:36:5a:58:8f:53:82:
dd:b2:b7:33:56:55:9e:98:ff:ca:c8:e2:ac:f9:95:08:7b:d5:
ea:fb:b0:85:01:65:c8:43:29:22:f6:40:6a:04:43:ab:f2:09:
a3:3d:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:41 2026 by rpki-client