This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/A2edUifbSShzdJ1Gis-SqBKDNH4.roa
File: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (raw, json)
Hash identifier: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=
Subject key identifier: 03:67:9D:52:27:DB:49:28:73:74:9D:46:8A:CF:92:A8:12:83:34:7E
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019B7F80E681BA90FF60886BF0B5EFF241E2
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/A2edUifbSShzdJ1Gis-SqBKDNH4.roa
Signing time: Fri 02 Jan 2026 16:18:32 +0000
ROA not before: Fri 02 Jan 2026 16:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 195.85.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:e6:81:ba:90:ff:60:88:6b:f0:b5:ef:f2:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 2 16:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03679d5227db492873749d468acf92a81283347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:2d:ed:bf:27:fc:4a:02:26:7f:2b:39:58:
34:d7:ef:1a:59:06:e1:3f:72:52:39:1e:c4:36:2e:
48:26:1e:12:09:71:63:b9:44:1f:a1:07:97:5c:55:
16:1f:6c:81:bf:93:6b:9a:d4:73:5f:31:60:94:0d:
9a:c5:b8:01:a9:af:af:e3:79:07:dc:5f:ac:62:c4:
54:55:a1:ca:1c:1b:3c:62:28:0c:97:ab:2e:48:f3:
d5:aa:c0:9d:cd:81:6e:d6:01:ab:5e:99:5b:f1:69:
5e:e2:b6:f6:d8:05:f9:f1:63:b8:cd:fd:a3:24:58:
5f:fc:a7:aa:9c:10:43:4c:0d:e1:aa:46:c3:c8:27:
c3:a3:9f:28:fb:e8:18:94:c4:8e:eb:3f:3c:8d:73:
ce:c1:0d:9b:d9:91:eb:be:cb:69:74:5a:70:f0:bd:
1b:ed:14:5d:10:52:74:e0:a7:dc:f8:ae:12:6a:69:
81:b8:37:e0:50:b9:a4:c0:b0:f1:8c:da:7c:da:bd:
03:32:43:2c:87:65:a5:77:e5:90:51:63:bc:a3:a8:
f9:37:08:cd:b9:a3:7a:25:8e:29:87:67:0f:56:32:
ff:08:a0:0d:0c:d2:e7:2b:53:02:f1:e9:9e:09:70:
8a:5d:2b:11:08:2c:55:40:de:9c:cb:16:ef:92:26:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:9D:52:27:DB:49:28:73:74:9D:46:8A:CF:92:A8:12:83:34:7E
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/A2edUifbSShzdJ1Gis-SqBKDNH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.59.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e7:a7:b3:20:f7:9a:ab:e2:06:c3:fc:7f:7c:b6:e7:91:c2:
5d:7f:11:5a:5c:9d:bc:d1:a0:23:66:66:dc:a2:61:5b:4a:b8:
2d:a2:eb:62:6a:89:a7:7e:56:44:16:f3:60:cd:70:7f:35:2f:
67:55:c8:8e:19:6b:ca:57:20:9a:5a:c4:c0:6d:17:23:4f:48:
4a:e1:dd:59:54:19:5d:e3:32:25:12:96:ff:85:07:b2:e3:63:
fa:b1:92:59:eb:90:dd:1a:8a:75:9f:5e:9f:3e:08:6a:f6:e6:
1c:82:db:20:ad:a4:a1:7f:cb:b3:0f:8c:56:d9:4a:fc:0e:d9:
e0:d6:37:13:fc:b4:79:99:74:f0:fb:18:54:e3:9f:e6:31:5d:
57:99:25:15:c1:57:5d:eb:53:a8:60:e9:49:95:b8:e8:e3:7f:
6d:68:f1:94:72:2e:4f:7e:f4:f2:4e:d8:0e:04:93:4b:b1:d5:
12:b2:47:26:09:52:da:05:bc:18:2a:a1:47:7e:5b:9d:0f:38:
60:7b:96:42:73:5b:63:04:16:de:9e:86:46:1f:c3:69:20:df:
83:39:f6:26:f8:f8:e6:df:72:46:2a:98:98:1c:65:ee:3f:9e:
db:ea:ce:98:6d:bf:d9:71:bc:4d:de:68:fa:17:64:c7:76:84:
d3:6b:83:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:15 2026 by rpki-client