This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/b2Q2Eat3_cux0yjgVGOzDFtgpic.roa
File: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (raw, json)
Hash identifier: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=
Subject key identifier: 6F:64:36:11:AB:77:FD:CB:B1:D3:28:E0:54:63:B3:0C:5B:60:A6:27
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019B7BA4FEAE5ADD9E8F5E3C4BFFA8004EC9
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/b2Q2Eat3_cux0yjgVGOzDFtgpic.roa
Signing time: Thu 01 Jan 2026 22:19:29 +0000
ROA not before: Thu 01 Jan 2026 22:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49597
IP address blocks: 185.165.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:fe:ae:5a:dd:9e:8f:5e:3c:4b:ff:a8:00:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Jan 1 22:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f643611ab77fdcbb1d328e05463b30c5b60a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:21:95:db:9f:ef:88:60:8c:ac:0a:04:6e:
88:54:ab:a6:1f:55:b0:cc:78:3b:1b:fc:c2:5c:79:
26:94:d2:6a:57:3c:2a:41:e2:a2:09:41:f8:fc:48:
71:41:d2:e8:80:f7:10:be:38:73:d0:11:8e:83:96:
fb:6a:c0:4b:13:9f:95:0b:95:ea:51:fb:43:fc:fa:
1f:21:cc:13:81:f0:03:65:57:40:52:25:92:51:3c:
c8:f6:78:f2:a3:49:d6:95:ae:93:08:af:a4:3a:e2:
3d:69:09:ba:26:1a:43:6b:9b:54:ee:20:3f:56:f8:
be:24:a5:a0:6e:b7:b8:34:5d:e8:df:00:d0:fe:94:
e0:d6:68:f5:92:5f:c8:c1:ed:73:c8:df:a3:47:a6:
81:20:47:10:b7:1c:11:f8:9b:da:a8:28:c0:38:63:
88:7a:20:57:a2:2b:a8:76:13:6b:26:31:2c:e5:33:
e8:42:b1:b6:fd:c6:a5:5b:a7:1e:0d:ec:a2:0b:5b:
8a:50:3e:d0:be:0a:f7:66:4a:96:3d:7c:eb:02:dc:
87:a3:6c:ea:b0:7b:a3:b2:4e:65:da:3c:78:dc:96:
26:67:7d:3a:ed:0e:19:b1:68:83:a1:a6:53:a9:30:
ef:91:08:e7:20:af:5e:6c:f5:f6:19:b4:33:ed:00:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:36:11:AB:77:FD:CB:B1:D3:28:E0:54:63:B3:0C:5B:60:A6:27
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/b2Q2Eat3_cux0yjgVGOzDFtgpic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:19:90:ba:0b:9e:14:52:11:17:b0:15:b9:8b:b2:34:ad:aa:
20:70:d2:f1:d4:4b:cc:e1:10:a5:fc:25:f8:f8:ee:b5:75:10:
8d:dd:b3:74:34:31:8c:02:32:46:f0:ea:f5:17:a3:a0:6a:af:
b7:f1:87:2e:59:79:60:8a:82:6f:df:ef:72:73:ab:04:ef:1c:
d7:90:62:57:90:cd:da:d0:38:b3:a3:3f:31:b8:75:40:12:dc:
74:8a:eb:0a:27:1f:9b:2a:a5:f3:ca:38:27:92:3d:a2:9f:28:
1e:88:62:58:19:b9:e2:8e:57:eb:55:8e:66:91:05:c8:f3:47:
6b:12:30:e4:d1:a7:c9:31:73:6f:14:3c:ff:9f:b0:ef:13:ab:
04:97:12:30:65:db:24:7e:07:05:8c:3e:fd:61:e0:a5:67:29:
39:d9:7d:ba:34:1b:3f:2d:3d:b6:36:c1:f2:0d:3e:0b:fb:db:
e0:af:db:2d:f2:85:57:77:89:91:99:a9:5f:c1:2d:fb:26:88:
78:da:4f:76:66:82:f5:1c:a8:bc:40:3f:06:f7:8a:8d:3c:dd:
76:65:41:d5:e7:77:43:e6:ea:7d:db:62:fa:25:91:2f:9b:b1:
df:47:c1:54:75:33:e5:6c:50:34:ac:6a:6c:ce:b0:7c:4d:2b:
ea:67:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:15 2026 by rpki-client