This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa
File: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (raw, json)
Hash identifier: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=
Subject key identifier: 09:D7:B2:E3:1D:B9:63:BD:63:02:3B:22:FB:0E:6B:A2:BD:44:9B:DC
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019B7B362448544B81BE8127617C0E513DC4
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa
Signing time: Thu 01 Jan 2026 20:18:24 +0000
ROA not before: Thu 01 Jan 2026 20:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141718
IP address blocks: 185.217.39.0/24 maxlen: 24
194.147.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:24:48:54:4b:81:be:81:27:61:7c:0e:51:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 20:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09d7b2e31db963bd63023b22fb0e6ba2bd449bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:6c:b6:ec:5a:d8:c9:e6:9b:39:82:34:cb:
1f:87:38:5e:ed:d1:e3:da:38:59:e8:bb:4e:cd:52:
02:fd:6b:84:34:84:24:5d:2f:68:05:d0:b5:cd:59:
fd:c8:06:3c:8a:1a:d9:6d:85:ba:b3:ec:0d:c8:8a:
b2:d2:99:75:65:2c:51:11:45:b7:86:c9:15:46:1f:
e1:99:72:cc:c7:76:e8:66:12:f4:b4:ef:09:20:af:
66:5f:2b:a1:10:c5:53:14:7b:00:7b:ef:71:fd:45:
7c:9a:d3:5b:d6:5a:f0:e8:0c:59:8e:1d:08:3b:01:
36:e2:df:6f:8d:f1:64:f3:c6:75:d7:52:18:40:0c:
a5:b3:ee:4f:f6:ae:11:01:82:47:ab:16:c1:c3:f6:
25:ef:69:ce:84:2d:b6:aa:68:69:13:a2:d6:46:2d:
54:54:f0:af:ac:72:7d:c4:56:34:7a:40:20:27:45:
46:27:36:46:23:86:5b:60:68:02:aa:54:38:db:24:
76:0c:5b:3d:32:0b:59:8c:3f:c4:0e:5f:15:a5:ec:
94:ea:53:d3:a7:f1:ff:78:4e:5b:81:57:50:58:b0:
82:d5:d6:21:1a:b0:ea:a0:77:76:28:9b:2c:89:d8:
3c:f0:2c:be:31:b1:21:d1:d7:16:ce:4e:2f:c3:8b:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:B2:E3:1D:B9:63:BD:63:02:3B:22:FB:0E:6B:A2:BD:44:9B:DC
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.39.0/24
194.147.150.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f1:13:e8:8b:48:2f:e2:0b:0e:84:e7:49:a2:6c:ee:17:d6:
9b:8d:f2:69:42:cc:b8:18:82:3f:be:75:18:bd:fe:be:fd:7b:
bd:6f:8b:f7:cc:6e:8a:df:cb:bf:81:25:64:43:9c:74:b1:c5:
bc:60:df:02:67:da:7c:33:d7:c7:7b:80:03:63:22:6f:c8:ee:
ae:9f:85:d6:3e:5e:78:b5:e5:64:64:52:7c:e8:04:fa:68:af:
bb:f3:88:fb:82:cc:86:49:37:64:81:fe:70:e9:10:90:0f:cb:
43:59:67:72:e8:be:4d:37:c5:05:9e:0b:3c:21:07:bd:c0:24:
a6:11:fd:26:d8:19:41:15:d7:5a:13:66:6e:fd:95:c9:9f:ae:
6c:7d:1f:8a:c6:f2:05:5e:2f:37:b6:43:d6:39:d9:8e:3c:a0:
ef:ce:cc:39:b4:f4:3a:fd:ea:cd:7f:0d:d3:89:26:b7:1d:cd:
34:d0:c5:59:d9:8b:df:0f:a7:73:b8:4c:ab:81:26:6f:54:ca:
50:44:a4:a3:f2:4c:83:7c:36:20:33:99:fb:17:7b:a1:87:6d:
3c:c3:55:70:83:e2:e3:50:da:32:1e:66:1c:13:1f:9a:ca:f7:
0a:ed:83:ea:18:c5:98:c3:70:69:f8:aa:41:32:b9:3c:e7:ec:
1b:29:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:22 2026 by rpki-client