This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uC_1o_sSxo5I9riuS7-v7ZTKynM.roa
File: uC_1o_sSxo5I9riuS7-v7ZTKynM.roa (raw, json)
Hash identifier: 2jLZ3pYL39wlgiDcBJNcmCvoyPGRQ0PAHqG1z+w4LYw=
Subject key identifier: B8:2F:F5:A3:FB:12:C6:8E:48:F6:B8:AE:4B:BF:AF:ED:94:CA:CA:73
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019B7C808F850EBED60A4AA6D058101DDA7A
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uC_1o_sSxo5I9riuS7-v7ZTKynM.roa
Signing time: Fri 02 Jan 2026 02:19:18 +0000
ROA not before: Fri 02 Jan 2026 02:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216178
IP address blocks: 185.37.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:8f:85:0e:be:d6:0a:4a:a6:d0:58:10:1d:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 2 02:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b82ff5a3fb12c68e48f6b8ae4bbfafed94caca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:34:ad:06:e3:1b:03:16:28:80:ba:2a:7b:
07:8d:e2:8f:59:6b:b8:93:c8:87:06:b7:0a:74:66:
31:6b:85:ec:e8:88:70:23:8b:cd:d9:8c:bb:6a:c5:
c5:17:69:30:02:06:ca:64:a8:5b:a4:10:09:4c:6e:
3a:d9:32:69:67:33:91:6a:77:22:f1:55:5f:66:85:
fe:ec:5c:a8:d6:49:f5:1d:31:86:8d:c8:11:ad:eb:
41:c3:8b:48:52:6c:07:6e:2e:8e:8a:79:06:ec:b6:
a3:2b:c7:18:90:be:7f:e0:7e:19:2a:32:ae:b9:e8:
b2:90:b7:b4:e1:eb:ff:95:93:09:bc:cb:ba:3b:b5:
38:21:6b:dd:77:85:ac:69:7e:c0:59:70:56:83:98:
b8:c9:eb:b9:da:fa:5a:57:48:b7:fa:71:e9:0c:f9:
a3:3c:19:df:fd:00:51:44:bc:5b:8f:22:7f:8b:ed:
c8:4f:fc:c0:b5:2b:1b:9a:c5:af:f6:2d:31:5b:23:
30:60:b3:d5:b4:73:a5:b3:89:ca:07:25:42:6e:75:
ab:99:3d:cb:e6:63:c0:67:3c:05:8a:63:59:52:e8:
9f:42:15:4f:14:0a:fd:47:a4:e6:d9:1c:60:0f:c9:
f2:8b:41:d3:86:b2:2f:d3:cb:b0:80:3b:0a:89:16:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:F5:A3:FB:12:C6:8E:48:F6:B8:AE:4B:BF:AF:ED:94:CA:CA:73
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/uC_1o_sSxo5I9riuS7-v7ZTKynM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f6:37:d6:40:e2:28:e7:d8:f9:c5:fd:44:17:cd:c6:3b:07:
7e:2b:07:cd:0d:39:7e:3f:b4:f6:1e:17:39:20:25:82:0c:47:
84:fb:94:c9:78:1a:13:a3:29:d3:73:8e:81:c7:32:81:3e:7e:
00:66:0d:61:b5:52:00:d5:f8:3a:c8:e5:64:a8:fb:79:a7:32:
d9:61:21:76:d4:2f:09:60:27:ad:2d:71:1a:15:b5:d5:22:5c:
65:77:a6:6a:89:e3:48:4e:9b:e7:7e:ab:8a:da:e9:2c:67:da:
24:62:f7:ba:ca:f2:09:57:f8:44:1f:67:7e:78:1d:c7:11:c6:
a0:c2:b1:21:cb:e8:86:ec:99:d0:35:d5:9c:13:72:eb:5b:09:
f3:b9:f0:63:dd:a4:43:56:b2:07:cc:31:6a:c0:68:e0:0c:c0:
52:ec:07:24:64:ca:bf:f7:07:8c:1b:e3:e6:1a:20:ee:9d:d2:
d2:70:77:2a:97:23:98:57:6e:23:7a:2a:96:b1:ad:f5:51:b0:
1b:b7:e2:c7:cd:95:3a:6d:54:4a:12:84:3d:88:b9:27:34:f1:
df:6c:69:f4:a9:b0:28:6f:78:98:fd:b1:ce:57:c7:75:16:24:
bb:82:bc:1a:ec:e5:3c:3b:8d:12:7a:b6:40:7d:02:7a:54:51:
35:1e:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:06:45 2026 by rpki-client