This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/uNbww_4X227rN9_mg3C05wsDyrM.roa
File: uNbww_4X227rN9_mg3C05wsDyrM.roa (raw, json)
Hash identifier: SaALn4Jzzbpi+nDn2cyiq7RyWC5Gh9LXGatywgfKmRM=
Subject key identifier: B8:D6:F0:C3:FE:17:DB:6E:EB:37:DF:E6:83:70:B4:E7:0B:03:CA:B3
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 019B7E386D6CE5F309FB1DAEB31D9A15F012
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/uNbww_4X227rN9_mg3C05wsDyrM.roa
Signing time: Fri 02 Jan 2026 10:19:45 +0000
ROA not before: Fri 02 Jan 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201520
IP address blocks: 185.15.196.0/24 maxlen: 24
185.15.197.0/24 maxlen: 24
185.15.198.0/24 maxlen: 24
185.95.0.0/24 maxlen: 24
185.95.2.0/24 maxlen: 24
185.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:6d:6c:e5:f3:09:fb:1d:ae:b3:1d:9a:15:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jan 2 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8d6f0c3fe17db6eeb37dfe68370b4e70b03cab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:35:98:2d:24:a5:b9:33:b4:7c:1f:ff:08:
88:79:b7:38:34:68:cb:ef:a4:77:4b:db:c8:34:0d:
ef:b4:b5:d0:6d:56:00:5b:e7:32:80:49:36:51:8e:
ce:23:9f:aa:77:00:29:ae:cf:d1:9f:3a:87:18:60:
6e:24:60:e6:24:5d:9a:f3:34:dc:15:f0:74:2e:50:
8a:be:31:99:95:eb:57:17:01:07:76:69:f1:83:8d:
2b:04:ba:02:7e:a4:99:d1:83:69:8a:2b:aa:6b:4d:
5d:8e:fc:14:1b:a3:bd:7b:4e:c5:23:d6:dc:18:72:
d9:1e:57:7a:dd:50:5b:95:22:a0:53:32:c3:73:2d:
e9:0d:56:79:0b:05:86:03:fc:56:9b:0e:f7:bf:28:
b7:16:9d:e8:04:c2:8c:fb:d2:6c:f9:a6:5f:c8:07:
c9:c0:e9:ea:46:ef:35:2f:25:7a:7b:01:4d:85:1e:
3d:59:61:e9:be:dd:8b:12:34:24:0a:be:da:ce:77:
83:82:3a:19:53:e0:67:98:bc:ec:f4:21:b2:14:e6:
fa:3b:2a:41:cc:15:df:bc:04:73:eb:a1:8d:89:37:
4f:9d:6a:91:c8:e8:97:99:f9:83:b4:6f:31:a2:1e:
b7:22:8a:b9:e4:14:f7:2e:74:0c:6f:a0:ca:28:29:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:F0:C3:FE:17:DB:6E:EB:37:DF:E6:83:70:B4:E7:0B:03:CA:B3
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/uNbww_4X227rN9_mg3C05wsDyrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.196.0-185.15.198.255
185.95.0.0/24
185.95.2.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:6e:c5:b4:0b:b0:b2:c9:3f:4e:22:48:f8:cb:f4:e3:71:99:
4f:85:0e:af:8e:e9:ea:05:e7:cd:cc:84:ae:28:9b:10:25:48:
18:93:db:20:34:a4:62:75:4f:6b:1c:69:5b:90:da:6d:a0:55:
c6:dc:00:61:3d:46:c0:50:e4:45:c2:42:a1:29:8e:a8:c3:5c:
f1:1b:7c:18:2a:30:e4:22:64:64:5d:56:ff:92:00:55:10:bb:
14:87:4b:03:8b:4f:44:21:5d:90:7b:c2:f7:a3:5d:4a:0b:b4:
05:85:fa:00:7a:af:c5:3c:39:a3:a5:a1:64:42:cc:5c:41:8e:
5a:5b:74:7e:db:67:54:40:80:e6:a6:90:76:b9:e6:f7:39:4c:
01:a0:15:74:3a:e8:6e:b5:c3:b4:0e:29:76:ea:57:f1:29:2c:
4b:14:03:30:04:66:00:5d:32:25:f8:18:43:8d:10:24:80:ef:
26:06:13:fb:4e:9f:f2:91:76:e4:87:17:40:3a:87:55:af:81:
a8:a9:a2:81:4f:78:1f:f6:8b:95:d8:65:eb:8d:10:cd:a7:77:
ef:17:0a:70:88:cb:1c:3d:b8:b3:6a:5c:95:af:91:b0:4a:34:
42:ac:b9:47:24:fb:0a:e4:10:f2:33:41:2c:cc:d4:08:7d:48:
9c:89:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:26 2026 by rpki-client