This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa
File: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (raw, json)
Hash identifier: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=
Subject key identifier: 48:14:3F:C6:A5:2B:A4:DC:E0:63:00:2C:38:A1:56:11:F0:5C:58:A5
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 019B7D5BBEFC175B8A578AE5BFB673F6810D
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa
Signing time: Fri 02 Jan 2026 06:18:43 +0000
ROA not before: Fri 02 Jan 2026 06:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201135
IP address blocks: 185.84.188.0/23 maxlen: 23
185.84.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:be:fc:17:5b:8a:57:8a:e5:bf:b6:73:f6:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 2 06:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48143fc6a52ba4dce063002c38a15611f05c58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:d6:8c:33:ce:a7:38:e8:e2:f2:7c:bd:72:
92:4a:ae:64:79:9b:95:9c:78:a2:92:5a:9e:79:cf:
09:cb:af:2f:6d:5f:a3:b5:65:9e:f6:49:88:26:82:
2f:a4:32:ab:6b:f3:61:89:67:5d:30:1e:cc:d4:39:
36:1c:51:3b:ea:08:47:3c:65:15:8d:5c:17:d5:91:
db:c1:e6:97:a3:37:60:b8:76:60:b0:84:53:5c:6f:
ac:87:38:af:6c:49:9a:51:fc:14:5d:d2:e6:b8:ea:
07:b7:20:f9:15:a9:c1:b4:d4:fd:ec:e0:ee:d0:d9:
c1:79:20:9c:27:ee:b0:8e:ee:d0:4c:c7:d2:62:a5:
7a:63:b1:99:7a:ff:09:97:b3:9a:66:82:eb:fa:82:
cc:0b:c5:15:69:6d:1b:ad:db:1f:28:d4:64:10:ed:
fe:e3:04:06:41:84:fa:3d:fa:ee:e6:1b:e9:fe:ed:
67:f6:05:db:a0:d2:0c:52:d3:68:da:19:dc:53:43:
1b:1a:d3:67:6a:8e:6a:ca:d5:7c:90:1a:ac:34:88:
de:df:28:12:70:ad:1d:4e:1d:44:80:b5:18:6a:b1:
5a:32:2d:7d:36:90:b8:af:25:60:d1:bd:96:e7:90:
18:a7:46:35:f7:e6:f1:51:00:5e:2a:1b:9f:ca:ac:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:3F:C6:A5:2B:A4:DC:E0:63:00:2C:38:A1:56:11:F0:5C:58:A5
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.188.0/22
Signature Algorithm: sha256WithRSAEncryption
91:f7:e1:b9:f7:25:51:29:33:69:cf:1c:47:a8:9e:52:7a:cf:
bb:59:8a:ae:bb:44:f8:06:73:44:e2:72:db:ff:a0:ce:b4:10:
22:23:03:ad:c8:89:a7:0d:38:e9:46:c7:10:0a:07:94:e2:2d:
dd:14:7d:e8:35:e1:fa:72:17:45:93:52:b9:d2:b6:db:de:62:
89:05:33:e1:51:18:47:f3:ad:fe:06:2f:2a:de:98:cb:ca:97:
98:e8:e4:b1:83:27:72:59:9a:29:e7:17:7b:ed:8f:c3:68:ce:
23:80:8e:17:a0:76:78:c0:bd:31:a1:71:41:1f:63:71:34:5a:
be:1c:bc:55:61:b4:aa:15:d3:2d:67:bd:33:21:c8:7d:eb:22:
a7:80:e7:a0:ae:63:8c:c0:26:e8:21:13:87:37:73:ac:67:49:
9d:4b:b8:50:c7:7e:31:1f:9f:8d:21:93:d2:68:4e:3a:42:d7:
40:43:30:26:af:ed:3e:95:34:ca:f1:b4:68:05:55:b1:9c:0a:
42:ed:c4:4b:2e:60:4c:a8:f5:27:c1:08:88:6e:6f:87:01:52:
34:4c:ec:a4:fc:07:04:de:b5:d9:a8:0d:b7:9f:ca:37:2e:92:
ee:a9:e9:56:65:dd:05:9c:95:7b:55:34:3f:f6:81:22:70:f8:
1d:81:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:33 2026 by rpki-client