This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B60QCMfe5Idbi40lnblDmIBmfXQ.roa
File: B60QCMfe5Idbi40lnblDmIBmfXQ.roa (raw, json)
Hash identifier: c70cVejEHLSQPqTbkI8TzzIj/J+95+pPANgvJ2wbZJo=
Subject key identifier: 07:AD:10:08:C7:DE:E4:87:5B:8B:8D:25:9D:B9:43:98:80:66:7D:74
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019B11F404BD461545BA078591FC3DF48CD5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B60QCMfe5Idbi40lnblDmIBmfXQ.roa
Signing time: Fri 12 Dec 2025 09:46:03 +0000
ROA not before: Fri 12 Dec 2025 09:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55201
IP address blocks: 91.186.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:f4:04:bd:46:15:45:ba:07:85:91:fc:3d:f4:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Dec 12 09:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ad1008c7dee4875b8b8d259db9439880667d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:fa:14:75:50:9a:1e:27:07:4b:3a:9f:fb:
2c:fb:a0:b5:00:05:13:52:d6:2e:97:dd:08:ba:db:
7d:5a:25:99:8c:f6:37:88:50:0f:d1:82:5c:bb:c1:
bf:7a:b0:24:ad:40:e8:26:08:14:5d:f0:b0:f9:0b:
15:e0:f4:d3:4a:dd:d5:ab:a2:71:bc:30:aa:34:db:
d5:0d:a2:58:1f:93:3f:b3:3b:37:af:ad:eb:95:cb:
ba:c8:3e:82:50:9f:7e:b1:00:a8:48:ab:26:aa:da:
1c:c2:6f:57:09:a6:c5:49:9e:e5:a9:68:c4:ef:8c:
7d:da:e7:66:91:3b:a6:b7:84:7a:71:ee:64:66:2e:
a0:68:24:90:86:e8:75:88:2e:51:94:05:05:9b:db:
5d:2a:d0:c0:5b:99:b3:24:a5:ae:ff:f9:79:1a:76:
b7:79:42:f7:b7:0b:9c:62:fe:c0:25:73:6f:ab:bd:
32:c1:09:90:b7:54:1a:d1:20:02:2f:3c:41:c7:2e:
81:fe:79:97:59:da:4f:a4:e6:ad:82:c7:0c:d4:4f:
e8:18:75:eb:78:7c:f9:21:8c:d3:84:6e:31:05:e3:
83:b9:c1:0c:ca:cf:87:36:76:49:2f:e1:7b:1a:1a:
a6:c0:70:91:00:f5:85:b1:91:24:cb:17:ec:ce:3b:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:10:08:C7:DE:E4:87:5B:8B:8D:25:9D:B9:43:98:80:66:7D:74
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B60QCMfe5Idbi40lnblDmIBmfXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:95:1f:8a:18:33:e8:71:29:5f:06:c4:2a:75:bc:3e:31:19:
5e:d4:74:94:ba:94:7f:17:c6:af:ce:3a:61:a9:35:dc:51:3f:
ec:fb:45:dd:c1:22:6f:3f:9d:12:8b:d5:cf:22:2a:1d:92:3d:
0e:88:b9:2d:43:c7:da:1b:a8:16:6c:8a:9b:8f:7d:64:e3:05:
01:75:db:06:62:5c:07:71:c1:d4:90:e7:36:d6:84:a1:8c:03:
a6:fc:50:5b:57:54:5c:aa:0d:2e:f9:e8:c9:94:f7:8c:99:87:
8c:05:01:aa:04:87:2d:ca:8e:04:4e:8d:9d:64:4c:f3:57:1c:
c7:42:a6:ac:00:5b:f2:2d:1e:c6:9c:ce:24:fb:6d:aa:bb:7a:
be:61:44:2f:f0:f0:d9:d5:f9:ee:32:57:42:d9:55:cf:c3:5e:
2b:ad:53:d1:51:6d:a6:bf:79:96:66:a0:7a:e4:80:e4:8d:02:
74:f9:bd:65:b4:4b:41:0a:bf:fc:33:ee:81:b5:cb:fd:c4:5c:
6f:29:4e:8e:87:94:63:76:75:c0:60:b6:b6:cc:05:76:cb:6b:
65:8b:36:01:3c:af:d1:5b:ed:7f:50:18:84:03:69:35:53:ab:
b4:48:52:19:cf:44:35:0f:25:7f:e6:9b:f2:f8:7f:a1:2f:8f:
11:5f:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:14:21 2025 by rpki-client