This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/CCbPnsaraqAntkcEPLIKeh2owBA.roa
File: CCbPnsaraqAntkcEPLIKeh2owBA.roa (raw, json)
Hash identifier: lDC1/eX7jtqUQJvtcDT0bJoM6udb8V374OopJffpxoU=
Subject key identifier: 08:26:CF:9E:C6:AB:6A:A0:27:B6:47:04:3C:B2:0A:7A:1D:A8:C0:10
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 019B7F15282938B0C0246D702C5C12420798
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/CCbPnsaraqAntkcEPLIKeh2owBA.roa
Signing time: Fri 02 Jan 2026 14:20:51 +0000
ROA not before: Fri 02 Jan 2026 14:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205228
IP address blocks: 31.42.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:28:29:38:b0:c0:24:6d:70:2c:5c:12:42:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Jan 2 14:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0826cf9ec6ab6aa027b647043cb20a7a1da8c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:30:47:ce:2c:b9:47:6e:80:a2:c0:30:35:
b2:83:f4:38:86:dc:3f:ed:21:ca:49:cb:da:52:d3:
f3:26:1c:22:a3:d3:52:0f:00:59:80:e7:54:0b:3d:
6d:4d:b1:7b:80:5f:5f:5f:c8:c5:c5:38:22:ee:10:
be:95:d7:da:c3:e2:6c:a5:6e:0f:60:f6:1e:62:3a:
a8:e1:be:7d:c2:52:ee:85:88:26:39:f3:3b:2d:70:
e5:20:4c:a5:f6:61:16:ea:e6:b2:5a:6b:44:63:b9:
58:93:ef:52:b6:6c:c8:8f:67:71:bd:2e:53:c3:03:
39:89:12:17:74:4a:3b:63:31:11:6f:7f:6e:1a:84:
42:a3:0e:74:6e:1f:1c:9d:ea:37:e3:28:df:bb:d3:
06:bc:67:66:dd:d3:96:4b:59:ed:a9:1a:e0:55:71:
69:e1:89:39:3b:fd:c3:cd:cf:93:29:56:2f:70:d9:
4b:b4:5e:9a:21:e9:ad:f2:aa:7c:86:7b:19:bd:71:
2d:ea:d7:2d:e5:e9:f3:80:0c:53:e5:cf:77:28:30:
ae:4f:fe:de:2a:7e:c9:0f:ff:84:af:47:f2:8a:ef:
3c:36:46:03:3d:f1:b3:0d:1c:62:7e:72:c0:ec:53:
c8:4d:82:fa:cf:50:58:31:f2:7d:19:d7:c0:46:c2:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:CF:9E:C6:AB:6A:A0:27:B6:47:04:3C:B2:0A:7A:1D:A8:C0:10
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/CCbPnsaraqAntkcEPLIKeh2owBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.182.0/24
Signature Algorithm: sha256WithRSAEncryption
89:40:e8:cb:55:41:c5:d9:20:26:b2:97:b7:7b:f9:b4:12:c4:
d1:31:12:72:9a:10:ae:c0:8a:46:22:96:de:dc:3d:37:75:ba:
65:5c:8a:c8:f8:d2:0f:0d:85:de:cb:34:8a:2b:04:2c:64:31:
73:4d:3d:f8:a6:b9:52:6d:67:aa:dd:ac:b5:6d:0b:3a:be:5f:
2c:4b:10:c5:dc:b3:e7:c3:38:62:d7:23:7b:c2:a8:24:97:dc:
d2:ef:6b:0d:ee:f3:54:52:1b:7d:ae:33:55:c5:c2:12:ba:ef:
b0:e6:20:a7:48:93:10:e6:91:8b:6f:0c:d0:c1:0f:28:d5:61:
9d:f8:69:ff:73:08:0f:7f:75:57:c7:f9:df:79:d7:09:1c:50:
72:f5:cb:26:dd:78:e8:69:4c:ff:91:52:a2:22:2f:a2:b2:52:
d9:28:ab:67:56:c2:e2:6d:3e:d0:f6:57:eb:d7:c1:b1:5d:2f:
fa:d6:14:37:f7:cf:c5:2d:3a:c5:d7:74:0a:23:a2:54:b6:95:
50:4e:fe:ac:a8:a3:51:00:6f:b9:bb:d2:cc:1a:67:08:4a:ed:
9f:5a:cc:67:60:2a:a4:88:39:1a:ec:78:1b:58:cf:c8:5c:b7:
48:2f:3b:73:61:78:96:f2:f7:6c:97:16:f1:2b:af:8a:8c:0a:
09:65:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:36 2026 by rpki-client