This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa
File: rCCPh-mLpc7daTsM4LgnGKTzoNk.roa (raw, json)
Hash identifier: qm0Mei8UOmaXqagO6MtJ9K4mF8ePw84zkbqc33Xhnhc=
Subject key identifier: AC:20:8F:87:E9:8B:A5:CE:DD:69:3B:0C:E0:B8:27:18:A4:F3:A0:D9
Certificate issuer: /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial: 019B7A5AD7C9F74DB27B15D7B78CE7514924
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa
Signing time: Thu 01 Jan 2026 16:18:52 +0000
ROA not before: Thu 01 Jan 2026 16:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42708
IP address blocks: 185.5.44.0/24 maxlen: 24
185.5.46.0/24 maxlen: 24
185.5.47.0/24 maxlen: 24
2a02:7ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:d7:c9:f7:4d:b2:7b:15:d7:b7:8c:e7:51:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Validity
Not Before: Jan 1 16:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac208f87e98ba5cedd693b0ce0b82718a4f3a0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:1e:14:82:dd:3b:16:14:a3:a7:92:dc:ee:
1f:b4:0e:e2:c8:fe:82:d0:d1:49:9b:d0:49:1f:7b:
28:4d:d8:a6:bd:b0:3e:59:3b:ce:d9:50:87:d3:2c:
83:4f:45:a7:6d:89:d2:ca:e8:a0:2f:df:17:7c:2a:
b3:87:79:a1:f8:ea:d4:a8:4e:33:29:3e:89:b0:51:
f4:2d:68:25:86:45:b2:22:ee:26:f8:9a:4a:1c:e4:
65:dc:6a:6f:8d:88:6c:e0:c4:73:3a:aa:e6:d7:08:
00:e1:e8:08:c8:92:4f:b9:6d:34:1e:11:dc:90:c4:
34:ee:25:93:1b:90:5f:dd:12:d8:a0:7f:25:54:c9:
2b:b2:7a:3b:90:18:3f:59:b7:a0:cd:07:ba:72:d6:
a8:bb:28:af:2e:95:1e:43:95:f4:ba:2b:b1:ba:fc:
11:be:e1:db:bc:92:50:e7:ee:ae:a9:58:8e:79:f5:
ea:1f:b3:51:56:5a:6d:e3:1e:c1:45:b7:13:02:a4:
09:6c:92:c3:0f:81:97:11:0f:94:69:bd:1e:f5:93:
71:35:5c:d3:70:8d:4b:f0:7a:c3:30:5e:2f:99:b2:
ac:17:7c:06:d6:1e:45:94:70:e6:22:12:e8:4e:cd:
c0:90:c1:88:28:8c:9e:28:c2:88:ce:7c:88:06:dc:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:20:8F:87:E9:8B:A5:CE:DD:69:3B:0C:E0:B8:27:18:A4:F3:A0:D9
X509v3 Authority Key Identifier:
keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.44.0/24
185.5.46.0/23
IPv6:
2a02:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:de:33:ea:ac:7b:c2:67:53:9f:9d:fe:8f:42:c1:3f:fb:32:
05:95:00:f3:fb:8f:5d:50:6c:44:21:19:a6:37:5e:af:3a:f9:
2d:f1:88:0b:3e:4a:d4:3b:77:ba:34:96:b4:a0:28:1f:9d:d0:
9d:81:03:79:c1:38:f8:e7:4b:bc:ad:3e:88:14:49:ad:64:f7:
db:73:e7:da:c4:39:cb:3c:c9:88:f9:a0:4a:fc:d4:ce:43:4d:
42:67:c5:50:3b:65:c6:98:f1:81:18:f4:ed:70:26:8d:85:7d:
e5:27:59:ff:79:b4:0f:23:a2:e0:1c:26:83:28:9f:48:9a:09:
99:64:73:c9:6d:bc:83:37:e2:9e:c1:50:0b:3a:bd:a7:99:27:
45:44:14:a9:3e:b8:12:db:5a:5d:38:66:43:0b:d6:e3:49:e5:
d8:8d:18:51:81:3f:f6:ce:e0:f6:62:e3:71:6b:b5:cf:22:c0:
2b:20:2d:cb:40:e8:a6:de:03:2b:62:42:07:ce:f6:a4:d1:dc:
3c:4f:31:f2:0d:bd:55:08:bf:a3:a3:12:8b:44:72:47:e7:55:
a2:c8:c9:28:af:45:ec:63:0b:8c:76:35:28:6f:bf:c4:e7:f9:
f0:63:43:b1:08:cc:c4:d0:8c:0a:86:1a:db:c2:37:f4:2c:fb:
00:6f:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:48:31 2026 by rpki-client