This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HSwkl69SX2jZeDorslradEpXv7s.roa
File: HSwkl69SX2jZeDorslradEpXv7s.roa (raw, json)
Hash identifier: XsbgRW5859EcNDRiB/BKQI6E/oaNUTKenm+zebMG88w=
Subject key identifier: 1D:2C:24:97:AF:52:5F:68:D9:78:3A:2B:B2:5A:DA:74:4A:57:BF:BB
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019B7E37ECBAA85D31140665C7AED6CD1B75
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HSwkl69SX2jZeDorslradEpXv7s.roa
Signing time: Fri 02 Jan 2026 10:19:12 +0000
ROA not before: Fri 02 Jan 2026 10:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50875
IP address blocks: 31.145.82.0/24 maxlen: 24
212.15.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ec:ba:a8:5d:31:14:06:65:c7:ae:d6:cd:1b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d2c2497af525f68d9783a2bb25ada744a57bfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:a3:50:52:c5:02:0f:02:8b:a5:0c:44:85:
48:64:ff:b1:a5:0f:c8:ab:b2:93:02:80:f5:aa:6f:
80:77:da:97:bf:7a:67:25:c4:39:81:89:b3:96:46:
15:98:f0:db:65:5a:1c:e1:88:24:cd:d5:c2:7a:d8:
ea:f4:f8:c6:03:f5:bb:6d:71:7c:ad:cc:6f:7e:a0:
da:b0:ad:8f:1e:40:47:5b:b5:56:42:37:4a:43:95:
74:6e:e5:a9:d2:79:c1:7c:8a:0e:70:6e:05:8c:49:
8d:3e:95:f4:f2:18:b3:dc:f3:1b:ac:34:75:77:00:
fa:dd:e9:ab:91:d1:d0:25:0e:d0:3a:23:4a:9a:c1:
73:31:01:31:9c:34:ef:d4:a5:dc:e1:05:08:96:6e:
85:b5:42:14:d4:61:ad:61:8c:4a:b8:f9:c2:62:83:
ad:05:f7:c0:44:23:79:25:da:bf:72:b6:45:51:a0:
7b:d7:0b:d5:37:cc:e5:32:b8:56:36:7c:fe:75:3e:
33:f8:80:b0:9f:04:a2:13:d6:00:3a:03:5d:cc:fb:
43:7b:95:29:6d:87:74:b4:81:dc:c8:4d:c2:13:f2:
c4:bb:3b:2a:1c:ef:ad:7e:45:51:36:88:a3:d6:85:
55:cc:89:8b:0c:74:4d:86:a6:d4:18:22:c7:4f:27:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:24:97:AF:52:5F:68:D9:78:3A:2B:B2:5A:DA:74:4A:57:BF:BB
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HSwkl69SX2jZeDorslradEpXv7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.82.0/24
212.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e7:f1:e1:2d:c2:24:7c:15:97:49:d0:31:a4:82:29:f1:7b:
85:c1:08:dc:9a:1d:eb:9a:9b:bb:9d:be:85:0b:f0:90:27:93:
53:eb:8c:bb:49:ce:7f:69:bb:43:fe:e9:64:c3:9c:1d:cf:22:
69:fd:8c:b8:e9:0c:b3:87:82:6e:b5:4c:79:4d:21:37:73:6d:
1b:67:69:a2:c7:a5:e3:87:46:3b:35:cc:59:58:3c:ea:02:db:
1b:71:85:01:99:74:34:cc:3a:b7:24:80:c8:fa:df:00:5c:71:
b2:90:78:97:3a:67:d7:9b:ab:80:a1:f5:39:c1:bc:af:92:fa:
8d:7c:d0:f7:f0:e3:ca:28:5a:5e:87:10:c9:a9:54:75:0f:d2:
7f:dd:1f:eb:7a:87:c7:bf:de:84:e9:ff:71:58:f6:19:ae:aa:
95:1d:5b:c9:eb:9c:bc:2a:fe:9c:9b:8a:16:f3:de:6f:bd:40:
49:d3:c9:ba:15:ff:82:10:97:3b:02:14:9a:ac:ef:e8:96:65:
b6:ac:7f:06:a7:f4:29:68:6e:b1:4d:63:02:6c:b5:02:2a:57:
e4:56:69:28:f2:34:b6:0c:a4:e7:39:00:d0:0c:2f:50:fd:66:
45:b2:9b:83:a8:b7:1e:34:55:71:41:b8:f0:1d:f8:3e:9b:62:
ee:4a:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:48 2026 by rpki-client