This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/bQj2aTgJXbOKZNuSew15W-KvAeA.roa
File: bQj2aTgJXbOKZNuSew15W-KvAeA.roa (raw, json)
Hash identifier: hVsN/hgtl18kQSDtDH8KuGPfsGuUeynR/lwAiwVmOGY=
Subject key identifier: 6D:08:F6:69:38:09:5D:B3:8A:64:DB:92:7B:0D:79:5B:E2:AF:01:E0
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 019B7D5BB3EE5BC33C1923EE2642592BEFCF
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/bQj2aTgJXbOKZNuSew15W-KvAeA.roa
Signing time: Fri 02 Jan 2026 06:18:40 +0000
ROA not before: Fri 02 Jan 2026 06:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206317
IP address blocks: 185.187.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:b3:ee:5b:c3:3c:19:23:ee:26:42:59:2b:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 2 06:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d08f66938095db38a64db927b0d795be2af01e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:19:26:c0:be:26:6b:82:07:d7:a3:2f:85:
24:e9:22:52:b6:6d:66:e8:06:3b:ed:d1:12:f4:5c:
93:8c:01:11:52:5c:d8:51:4b:88:b3:55:b5:c8:f2:
60:d9:78:c7:6b:8d:1f:99:32:ac:0c:c6:9f:26:2a:
87:39:e4:53:d2:9a:d1:18:98:fe:00:14:ed:02:c9:
b0:3f:b1:02:83:7a:7b:76:23:3b:de:c5:18:6e:b5:
74:6e:ec:9d:4a:86:10:21:98:e5:48:dd:13:b3:07:
c6:36:87:1f:ae:60:fc:41:ac:7c:68:2c:1c:47:e1:
e8:a5:03:69:59:5e:b3:0b:af:a8:62:e0:d9:13:34:
84:34:0e:70:db:fc:86:a7:b3:c2:0c:4d:27:ad:a6:
03:38:0c:68:39:41:0f:9c:a9:30:32:34:2f:bb:7a:
cc:1a:76:26:1e:9b:0f:19:32:12:92:42:46:37:5d:
bb:58:d3:20:18:17:c4:52:1c:7a:37:0a:bc:1c:c5:
10:79:bc:00:0e:0f:de:01:7f:0f:26:42:ad:03:4b:
53:76:2c:e1:4b:44:67:35:93:3b:47:cc:26:de:17:
5c:3b:c9:16:e4:38:8f:50:97:7f:d4:36:5e:0a:89:
d3:97:08:46:bb:fe:fa:93:c5:ad:ba:6e:96:d2:88:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:08:F6:69:38:09:5D:B3:8A:64:DB:92:7B:0D:79:5B:E2:AF:01:E0
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/bQj2aTgJXbOKZNuSew15W-KvAeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:2b:c2:38:85:27:c6:31:bd:6f:7b:dd:ec:54:1c:9b:d7:
3a:90:a5:71:8f:e9:ec:e6:b5:e8:9b:60:b5:a0:0b:29:bd:90:
94:19:fb:5f:21:de:4e:51:3f:c4:05:46:e7:e9:f7:07:01:0b:
0f:44:8e:f5:22:57:fd:0c:9e:ab:41:d1:f8:f2:a0:92:68:ef:
38:92:fb:93:af:dc:a3:f7:cd:9b:52:f5:7f:d4:54:41:5b:dd:
50:2e:84:0d:15:ad:be:a7:47:b4:8a:7f:19:71:7b:14:88:c7:
25:0d:33:70:8d:55:e3:47:c4:d3:42:df:14:5b:0d:d4:d1:fb:
e2:13:ce:50:1f:26:72:99:77:8c:bc:cf:bc:8f:9a:e0:0f:33:
3a:c6:d6:7e:6b:9f:ea:09:5f:ee:ac:ec:13:78:c0:64:9a:be:
0d:1f:93:7e:b3:49:9c:1d:13:d6:94:24:38:fc:2d:56:ca:3c:
df:30:e1:59:75:68:e7:19:90:59:4a:88:8d:01:e1:b6:21:fc:
76:0a:b0:b0:a2:90:73:7f:7f:e0:d4:2e:e6:8e:52:e1:3b:b1:
b2:df:03:1d:18:a9:02:f6:28:55:31:5e:b7:c8:c4:d7:09:56:
1c:8f:3b:c2:8c:51:3b:65:5e:80:9b:bd:51:d2:d5:8f:f7:a2:
3e:3c:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:07 2026 by rpki-client