This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/cSKDwPxDVXXkk_flq4GHJup7ieU.roa
File: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (raw, json)
Hash identifier: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=
Subject key identifier: 71:22:83:C0:FC:43:55:75:E4:93:F7:E5:AB:81:87:26:EA:7B:89:E5
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019B7C1199A9AB7A1BEA627A3AAC10107F6A
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/cSKDwPxDVXXkk_flq4GHJup7ieU.roa
Signing time: Fri 02 Jan 2026 00:18:06 +0000
ROA not before: Fri 02 Jan 2026 00:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204342
IP address blocks: 185.251.164.0/22 maxlen: 22
185.251.184.0/22 maxlen: 22
188.240.40.0/23 maxlen: 23
2a0c:2e40::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:99:a9:ab:7a:1b:ea:62:7a:3a:ac:10:10:7f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jan 2 00:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712283c0fc435575e493f7e5ab818726ea7b89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:a1:9f:e5:e4:dd:21:6c:ab:ea:b3:a5:6b:
aa:e3:a4:68:1d:5e:2d:60:50:4e:26:63:a6:c5:63:
a1:0c:92:7b:a1:6c:6d:1a:ac:21:97:98:fe:ef:2e:
37:b7:47:55:25:2f:f0:a6:6e:26:18:64:5a:53:92:
5b:70:e7:cd:18:91:e7:04:44:7b:9a:a3:24:5d:a5:
0d:41:fe:20:35:de:ac:be:95:29:07:d8:09:4c:f8:
d1:22:ea:0a:7b:c1:ea:ad:47:20:0f:2f:f1:46:e7:
91:20:97:e3:56:51:a8:6a:36:38:82:0f:5c:f4:a0:
84:83:56:68:3a:2c:87:73:7b:2d:7c:7e:fc:d8:94:
27:14:1c:0b:d0:b2:e7:06:51:04:55:28:f2:1d:57:
23:51:7e:31:bb:a2:31:b2:08:0f:8a:5f:34:d2:37:
e2:a2:17:b3:c6:c3:fb:9e:32:3e:41:1a:6e:0c:a8:
a4:2c:b3:56:6b:86:7c:d8:1c:5c:0d:0c:b6:ec:f2:
a7:d1:3b:b5:ba:50:b4:c8:50:ec:8b:e6:a3:e1:9a:
b3:d4:55:a1:e4:35:65:5b:b3:2a:65:08:51:4c:71:
55:ad:68:1b:fe:29:e5:83:c6:33:b8:43:62:cb:f7:
18:34:46:24:53:cc:39:3b:7d:c7:56:00:3f:92:96:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:83:C0:FC:43:55:75:E4:93:F7:E5:AB:81:87:26:EA:7B:89:E5
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/cSKDwPxDVXXkk_flq4GHJup7ieU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.164.0/22
185.251.184.0/22
188.240.40.0/23
IPv6:
2a0c:2e40::/30
Signature Algorithm: sha256WithRSAEncryption
5f:9f:a1:32:d3:fd:8c:86:c6:e6:a9:ef:41:81:d3:8f:91:6a:
82:79:f2:9e:0c:7c:37:56:1a:02:5a:82:ae:cc:a3:2d:b3:51:
d9:ff:20:26:51:b8:d4:bc:7b:d2:f3:a8:98:6b:1f:1d:e3:5b:
5f:d8:57:d3:45:c1:05:77:5e:2b:32:d4:e3:63:e7:cb:97:8f:
52:8d:4d:16:d1:f3:c1:3b:cc:54:9f:5d:56:77:2c:18:df:69:
4a:a7:72:a0:cd:dd:04:eb:bf:f7:a7:08:b2:7f:fc:4d:48:11:
3a:d9:43:f0:51:d2:ce:9f:a8:01:ff:e1:fb:03:72:24:d9:56:
15:b7:bb:bd:d4:bf:08:b8:9b:28:f2:6c:9e:1a:09:6a:0d:f7:
cb:0e:73:0a:8d:b0:41:67:38:2e:f6:05:b1:da:49:bc:be:08:
e1:b6:7e:fb:5f:74:0c:d0:31:8c:7e:66:00:47:1d:04:b3:34:
fe:b2:b3:9b:42:52:3d:31:95:30:1b:ce:16:6a:aa:13:af:34:
d2:9c:20:19:89:5b:57:58:31:bd:51:6b:7d:f0:90:75:fb:5a:
cc:11:cb:b7:ed:8d:17:1d:96:fa:c0:ad:b8:64:dc:56:68:d9:
d1:6c:aa:f3:46:58:d9:1d:af:c5:c9:1f:e0:fc:0f:30:b1:a3:
f1:34:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:26 2026 by rpki-client