This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa
File: kulKF481vVCUBC9LIChr0PPnQ98.roa (raw, json)
Hash identifier: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=
Subject key identifier: 92:E9:4A:17:8F:35:BD:50:94:04:2F:4B:20:28:6B:D0:F3:E7:43:DF
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019B79EC40FB30BADDDE6C7FFBC5B222DEF3
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa
Signing time: Thu 01 Jan 2026 14:18:04 +0000
ROA not before: Thu 01 Jan 2026 14:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206566
IP address blocks: 185.183.8.0/22 maxlen: 22
2a0a:ff80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:40:fb:30:ba:dd:de:6c:7f:fb:c5:b2:22:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 14:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e94a178f35bd5094042f4b20286bd0f3e743df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:6f:36:7e:71:03:cf:d0:a6:a8:e1:08:b2:
d1:4f:a1:7e:c3:b9:c2:6d:a7:ae:4a:2a:5c:f5:8f:
bf:b2:b1:14:d7:1c:4e:ca:01:4b:8f:75:19:d7:d6:
04:e2:ef:3b:7e:d3:cc:1d:98:78:78:f8:d6:e0:8c:
34:12:81:9f:d3:72:19:2a:b1:18:3b:61:29:94:ac:
5b:7f:93:d0:11:b0:7f:49:bb:f9:7e:68:47:65:3b:
8e:8b:12:1f:2e:43:55:d6:f8:4b:6f:b3:21:29:2e:
bf:94:c5:c6:f3:ef:5e:6b:7a:2c:ff:e7:a4:fc:f1:
bd:48:85:dc:78:4c:c9:29:18:0b:b1:ab:29:ea:e3:
b3:96:29:6a:d9:73:3d:a4:77:18:d4:95:a3:91:7a:
9b:93:9e:0e:45:33:a3:7d:e7:fb:e5:45:4e:2a:8c:
fc:6c:72:0b:71:d3:b3:88:3a:4e:a9:cd:0e:81:9c:
8b:da:7f:73:1f:f6:86:6d:dd:7c:f0:eb:90:74:f5:
81:61:72:2d:6a:c5:1b:62:89:a4:99:7a:ce:a5:9c:
28:b7:aa:ca:34:c3:65:ea:3a:b3:c1:2f:68:e6:12:
b7:e2:2b:21:95:c4:63:2e:40:73:72:f0:39:ea:6d:
98:3b:da:1b:74:c7:cb:10:4c:14:bf:54:70:0a:e2:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E9:4A:17:8F:35:BD:50:94:04:2F:4B:20:28:6B:D0:F3:E7:43:DF
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.8.0/22
IPv6:
2a0a:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
17:48:f4:e0:de:c8:53:7d:d9:88:df:ae:2e:d5:b5:2c:51:73:
02:14:cd:52:67:d8:97:6d:d8:84:9d:40:45:c8:fb:91:93:d3:
83:cf:40:6a:cb:52:2a:c1:99:67:0d:5d:56:6e:60:c1:20:70:
24:fc:b1:6c:5d:cf:9c:ef:3e:fa:98:5b:4d:7a:21:dc:7c:45:
66:19:61:fc:e9:0d:53:c6:f2:ed:f4:3a:e6:d6:98:73:87:78:
9f:66:3b:35:03:c4:bf:90:7b:c9:0e:97:0f:53:dd:fd:dc:7b:
f8:91:76:05:9b:08:41:db:9d:2d:e2:99:7d:bb:8b:28:17:b2:
49:27:59:f3:b0:f6:ea:c3:69:1a:a2:67:f7:56:93:fa:11:b7:
d0:51:bc:89:50:dd:d4:7c:65:fb:6c:a2:16:41:3e:8e:10:6b:
80:1a:18:eb:f1:1c:e5:9a:e6:dc:6b:b8:e2:9e:a5:f4:b4:76:
8f:2e:e9:a8:62:ff:08:fd:97:62:7c:c4:3a:d7:00:5e:86:fe:
4b:44:39:37:0c:11:51:dc:29:94:4a:c9:ed:05:45:83:af:87:
8f:56:b6:42:44:1f:7e:2d:5b:a6:b4:c8:bc:9f:09:46:5d:e8:
f9:0f:37:d7:08:4b:5d:9f:0c:86:21:a1:04:a8:50:d6:5c:4e:
59:16:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:40 2026 by rpki-client