This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/30R6wB6gk0tAdQUb1nh5pGtizL0.roa
File: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (raw, json)
Hash identifier: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=
Subject key identifier: DF:44:7A:C0:1E:A0:93:4B:40:75:05:1B:D6:78:79:A4:6B:62:CC:BD
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 019B7DC93796306F5279AD3C9469132DFCFC
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/30R6wB6gk0tAdQUb1nh5pGtizL0.roa
Signing time: Fri 02 Jan 2026 08:18:17 +0000
ROA not before: Fri 02 Jan 2026 08:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49264
IP address blocks: 185.161.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:37:96:30:6f:52:79:ad:3c:94:69:13:2d:fc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jan 2 08:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df447ac01ea0934b4075051bd67879a46b62ccbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:3e:65:31:e3:49:30:fa:60:23:2a:d9:3a:
95:cc:66:fe:15:83:2c:c2:be:41:02:25:89:29:41:
2c:ec:42:ab:ff:b4:50:b3:3d:9d:e1:61:5f:26:e7:
34:f9:3f:ee:7b:e5:f5:61:4c:20:f7:14:47:38:99:
7e:44:ae:ad:cc:7c:bc:35:14:23:d1:4f:66:77:fd:
37:6a:fa:b8:f5:12:65:40:de:70:18:3a:17:c8:43:
a8:d3:64:50:d9:ff:da:ec:28:97:ef:79:9e:c9:38:
ef:d3:83:24:dc:69:ce:8f:fa:91:5c:d9:62:29:d7:
9e:1d:b3:e4:25:da:09:9e:e8:5e:1a:dd:6f:3f:da:
c1:f2:43:90:f9:48:48:34:1e:87:d2:12:46:cd:75:
ac:b8:2d:b2:7e:f8:c9:fa:c8:43:21:f4:a1:41:e4:
39:46:f2:ca:47:0f:db:da:35:5f:2f:6c:19:4d:b2:
5d:f5:f6:be:0d:ad:c5:c1:2d:e0:09:96:18:aa:f6:
ec:22:68:54:18:fe:09:43:40:23:22:9f:ec:84:d2:
0f:64:2b:02:01:4e:ff:0e:dc:ee:6b:58:b0:17:62:
c0:29:0e:be:31:73:9e:9e:4a:a9:45:33:e2:02:09:
e2:31:f5:a6:18:69:36:f9:d6:1e:ac:0b:61:27:9e:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:7A:C0:1E:A0:93:4B:40:75:05:1B:D6:78:79:A4:6B:62:CC:BD
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/30R6wB6gk0tAdQUb1nh5pGtizL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.160.0/24
Signature Algorithm: sha256WithRSAEncryption
99:aa:18:0c:bc:44:a0:93:cd:84:f8:0e:83:c6:4f:b9:00:12:
35:ff:bd:ad:56:96:d9:29:95:79:cf:18:ba:ce:36:8d:f9:f9:
5d:c9:0f:9b:4b:78:98:fa:62:84:0a:8f:af:dd:31:19:5d:87:
e9:64:41:dd:bc:45:41:4f:1b:5e:4a:0f:31:7e:a3:c0:ca:97:
5a:68:a3:3c:c3:a7:30:c5:36:4b:f7:94:1b:2a:ff:b1:b6:07:
0f:d5:e6:94:95:24:8b:af:29:55:5e:16:6b:81:8b:5e:3d:7d:
46:19:45:55:82:b0:fc:50:61:88:c7:1c:2c:4c:18:20:cf:09:
8e:6d:f7:ab:8c:98:fe:e6:64:0f:b4:12:bb:02:51:d3:68:ce:
70:29:6d:4c:28:c5:12:ea:f9:f0:b0:47:87:cd:59:4f:d6:95:
86:13:9b:d3:16:e3:cd:a2:59:83:06:2c:c7:57:b5:03:4f:1d:
76:93:48:b9:cf:97:84:a9:c6:87:0f:b5:74:4a:75:8b:eb:93:
48:21:f0:e5:37:7d:11:8a:99:f2:85:76:42:01:e6:10:e6:3e:
44:51:d0:4f:35:d7:27:dd:62:56:c5:1b:9c:0a:59:1b:0f:fd:
6d:98:c1:74:0d:12:0a:92:81:19:1f:a7:2f:d5:71:3f:7c:dc:
ab:81:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 11:04:25 2026 by rpki-client