This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa
File: 69HB2mRccTU_k2AKxC7mKL2wmhk.roa (raw, json)
Hash identifier: N4JO0TUWjytNmZGyVjwMAyV4wDwmKWd+UMTD1SHMVxU=
Subject key identifier: EB:D1:C1:DA:64:5C:71:35:3F:93:60:0A:C4:2E:E6:28:BD:B0:9A:19
Certificate issuer: /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial: 019B77C6C8584DB747DA4C84EC75F43DD1C2
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa
Signing time: Thu 01 Jan 2026 04:17:54 +0000
ROA not before: Thu 01 Jan 2026 04:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29223
IP address blocks: 195.85.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:c8:58:4d:b7:47:da:4c:84:ec:75:f4:3d:d1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Validity
Not Before: Jan 1 04:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebd1c1da645c71353f93600ac42ee628bdb09a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:2c:fd:e0:b2:3c:0a:8b:ff:58:60:7f:c9:
c0:eb:ce:ba:4a:6c:55:1c:57:fb:6e:1f:89:28:8b:
9f:69:9d:dc:ff:a2:1f:e6:f3:4f:96:52:a8:56:8b:
77:6e:a9:72:7d:1e:b0:f7:af:11:35:eb:e3:92:bb:
84:75:78:8b:05:b5:53:e2:d8:aa:05:2c:4c:d4:ee:
c8:fc:ae:66:18:46:89:57:75:fc:9d:56:18:6c:b0:
7c:83:1e:37:12:90:85:0c:6c:db:93:ed:a3:18:5f:
59:1c:10:9f:3b:a1:6e:3a:05:73:92:eb:94:5d:51:
d3:95:8a:50:2f:50:8a:53:8a:a5:38:a5:a4:cd:38:
c5:57:c4:c8:1b:e0:ad:be:2e:4d:42:63:35:91:2d:
16:57:10:5a:66:fb:f1:1a:fd:e4:78:dc:0d:c2:0e:
1b:13:9f:01:cd:2d:de:3c:74:80:b1:31:ef:84:07:
9f:c4:3a:f4:98:26:05:da:85:ac:d6:f9:ed:16:f6:
8c:01:a1:9e:77:db:89:ae:c6:e9:31:67:cb:a8:f7:
67:11:06:b9:c4:c7:7f:43:f9:f7:c7:1d:4c:73:72:
c9:26:cd:ea:b4:08:34:1e:96:db:b3:f9:70:16:a6:
ab:0a:1b:1c:9d:84:10:6a:8d:36:69:a3:47:76:71:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:C1:DA:64:5C:71:35:3F:93:60:0A:C4:2E:E6:28:BD:B0:9A:19
X509v3 Authority Key Identifier:
keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.243.0/24
Signature Algorithm: sha256WithRSAEncryption
12:da:4b:72:93:0e:28:42:f8:23:71:3f:91:1a:aa:4d:c0:51:
55:2c:c4:b5:12:48:75:58:ef:40:40:d8:71:55:8c:85:bd:2b:
6b:90:e3:a6:27:db:72:b0:10:a3:f5:68:a0:c5:a5:63:8e:e0:
08:ff:3f:c5:78:e9:0b:b5:73:34:e5:19:9d:41:ac:93:d0:0a:
71:b0:6a:65:c0:a1:1a:79:bb:e5:22:03:cd:8a:42:61:45:f7:
51:9c:14:31:af:ba:f3:75:4e:fe:2f:88:38:8a:29:13:34:1c:
00:fc:76:cd:27:40:ab:af:02:2b:e7:54:19:b2:fd:c0:d1:f4:
38:9f:a3:d4:f5:f0:1e:91:bc:02:f3:53:3a:1f:cf:21:52:fa:
6d:8c:19:d8:d9:08:ad:6b:9a:68:28:69:97:fa:e3:5a:4f:4d:
25:8f:b6:11:6d:64:e7:9d:43:10:b8:ed:64:75:af:30:5f:3f:
9f:45:6e:06:df:f4:0e:74:e5:ea:7d:36:83:c1:05:48:60:ca:
80:8e:78:33:0b:af:10:6e:72:06:8f:d6:0a:99:ba:de:02:94:
16:a0:e9:8c:2f:6f:99:8d:03:28:44:29:92:96:de:2c:82:3d:
fb:09:32:12:cb:33:ae:49:78:88:37:42:14:50:a5:9f:cd:20:
a7:97:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:21 2026 by rpki-client