This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/367HB_kgLZzHvUmYczP-HqOYi0w.roa
File: 367HB_kgLZzHvUmYczP-HqOYi0w.roa (raw, json)
Hash identifier: vI+rarZc7DlZdGO0Ct6YZUoPyF9jObWAgLLGWNUF1IM=
Subject key identifier: DF:AE:C7:07:F9:20:2D:9C:C7:BD:49:98:73:33:FE:1E:A3:98:8B:4C
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019B7CED56E3CA658CCC53D92D57CC923BAC
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/367HB_kgLZzHvUmYczP-HqOYi0w.roa
Signing time: Fri 02 Jan 2026 04:18:07 +0000
ROA not before: Fri 02 Jan 2026 04:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201832
IP address blocks: 185.62.148.0/24 maxlen: 24
185.62.149.0/24 maxlen: 24
2a03:560::/48 maxlen: 48
2a03:560:1::/48 maxlen: 48
2a03:560:148::/48 maxlen: 48
2a03:560:149::/48 maxlen: 48
2a03:561::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:56:e3:ca:65:8c:cc:53:d9:2d:57:cc:92:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jan 2 04:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfaec707f9202d9cc7bd49987333fe1ea3988b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:b3:d7:da:89:93:02:69:b9:46:73:ab:59:
77:e4:44:d3:93:05:6b:99:e3:f3:ed:7c:b3:80:bc:
d9:4e:d2:63:71:6f:29:92:d7:c7:c1:0a:37:23:ca:
07:1a:ad:ee:6f:ac:56:35:1d:33:9c:0c:de:e3:d3:
84:17:0f:8d:81:fa:57:37:17:61:a7:4f:09:f4:a0:
32:e4:0b:33:fd:c1:a1:f8:99:a6:33:ca:b6:82:ba:
a8:be:e1:8d:d0:55:00:54:4f:b5:6b:2c:79:5a:7b:
2b:ba:31:32:69:ec:97:13:0c:8d:c9:87:15:7b:65:
fc:d5:47:cd:ee:16:a2:98:39:a8:b7:0b:16:d9:7c:
2e:86:56:a6:d4:69:8e:a3:5e:63:f1:b0:7b:eb:21:
1c:9c:c2:e4:53:77:06:de:4f:ed:63:91:2b:8e:12:
91:63:9d:be:78:3a:ed:94:17:a2:74:9e:af:24:be:
75:28:4b:0d:15:90:c1:21:92:33:de:19:8c:80:4e:
f7:24:e3:0f:ed:60:b7:96:47:c8:be:e6:5c:3d:3c:
2a:30:d9:be:2c:6e:c3:cc:85:f7:67:e1:a3:93:cd:
ef:01:2b:52:2c:71:43:b2:11:9b:92:a7:5b:88:4e:
48:45:d6:8e:6f:a6:d0:df:ee:4e:b1:94:df:c4:d4:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:C7:07:F9:20:2D:9C:C7:BD:49:98:73:33:FE:1E:A3:98:8B:4C
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/367HB_kgLZzHvUmYczP-HqOYi0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.148.0/23
IPv6:
2a03:560::/47
2a03:560:148::/47
2a03:561::/32
Signature Algorithm: sha256WithRSAEncryption
8f:60:24:25:39:74:0c:bf:01:ba:41:24:12:45:e4:e1:4e:f8:
e5:1a:12:d3:35:83:a7:54:70:4a:82:0f:b3:6b:41:a2:f7:98:
4b:4b:5b:f9:76:fc:df:f3:89:d2:22:a3:21:7a:1e:7e:3b:c5:
dd:0c:b9:51:3a:1c:dd:1c:a4:b9:96:98:b9:19:90:d5:88:ae:
77:cc:cf:4a:20:d2:36:69:0d:1a:42:c6:54:37:cb:b6:d0:03:
3d:e5:8e:58:08:76:e1:5a:ef:70:28:c8:6a:5f:62:d3:47:17:
a3:b3:a3:22:65:0f:20:36:c1:e3:71:7e:dc:98:36:40:57:d8:
13:e5:14:1f:4a:bf:ac:58:71:1e:d4:16:8b:55:18:0b:de:49:
2f:e9:68:88:aa:92:5e:cc:3c:ea:f1:ac:28:71:e5:46:b0:2d:
33:74:a5:13:99:42:a4:f8:34:d5:cd:23:3c:f8:63:75:42:2d:
f5:ae:20:e1:42:be:0c:a2:f4:22:75:19:56:37:2c:82:79:47:
91:9e:a3:10:6f:8c:b5:29:3b:a2:4d:3f:44:90:ab:62:3c:3d:
c3:3b:ac:79:0e:23:b5:14:f8:a3:e8:7c:14:89:df:3e:cb:c2:
63:b3:37:a8:46:2f:ef:14:47:ce:5a:4f:d2:30:84:7a:35:35:
61:23:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:09 2026 by rpki-client