This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa
File: v0q74nFVUklRHXEbX3DfFnuxDhk.roa (raw, json)
Hash identifier: G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=
Subject key identifier: BF:4A:BB:E2:71:55:52:49:51:1D:71:1B:5F:70:DF:16:7B:B1:0E:19
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019B7EA4C66AADE8BD87F962205E7A5B4C36
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa
Signing time: Fri 02 Jan 2026 12:18:06 +0000
ROA not before: Fri 02 Jan 2026 12:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208711
IP address blocks: 185.92.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:c6:6a:ad:e8:bd:87:f9:62:20:5e:7a:5b:4c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 2 12:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4abbe271555249511d711b5f70df167bb10e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:09:0a:cd:b5:36:f4:51:36:1c:7d:62:c7:
47:0a:dc:63:10:2d:b5:10:cd:fa:f7:86:4f:75:ea:
b0:c6:28:3b:21:84:94:d1:8e:8c:be:41:70:9d:95:
6d:42:20:9c:d9:dc:c2:64:db:f8:62:44:87:33:8a:
00:20:6a:54:dd:61:34:1e:8d:9e:3a:2a:5e:83:d9:
cc:5a:f7:8f:c1:21:ba:92:e4:5a:d7:66:06:3a:b1:
5c:ba:38:c8:bd:59:44:0e:f5:39:71:06:4c:1c:bc:
3b:2e:a4:d8:99:f6:cc:72:05:a6:6a:04:b5:3f:78:
bd:d0:b0:c4:54:f7:19:2c:d9:47:a2:b0:ba:a7:c5:
ce:27:c7:09:df:46:35:3a:03:2d:b5:25:a5:97:3e:
ae:ac:d1:20:72:67:91:2e:6b:de:62:58:ff:51:5b:
51:a0:ad:e3:25:c2:a2:3f:13:b4:14:e3:2d:9b:85:
74:e0:1c:50:a4:9e:cb:ed:45:91:f5:16:45:b5:44:
10:c7:0f:f2:59:b8:ab:56:9a:77:7b:c0:bf:e6:60:
bd:2b:f7:43:fe:dc:5b:7e:e4:0e:01:4f:fb:c6:75:
62:45:21:fc:10:2e:d1:c3:ba:6a:7a:f0:3b:97:de:
62:14:fe:42:be:c2:ff:ab:ae:dc:1b:5a:13:cc:2b:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:BB:E2:71:55:52:49:51:1D:71:1B:5F:70:DF:16:7B:B1:0E:19
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:07:91:f8:a7:90:31:82:69:41:00:b6:c5:cc:eb:02:71:25:
a6:9f:11:33:48:d8:3c:73:a0:77:55:be:d4:c8:ea:50:21:e2:
87:3d:a2:d0:ca:4d:a6:03:35:74:8f:f1:1c:3d:10:c5:cf:26:
26:70:1f:4c:16:a1:66:fa:73:06:28:50:89:14:73:a7:b2:fc:
12:97:3e:f8:4b:a3:c5:d7:84:e5:17:84:9e:b2:28:45:bd:a9:
6d:17:0f:44:94:2a:10:71:cc:e1:9a:fc:02:6a:14:84:f4:d1:
1d:e8:c4:29:3a:92:b8:9e:0f:eb:6b:81:56:72:64:07:6d:21:
bd:d0:31:ec:dd:6d:b7:f5:cd:ef:b3:fe:eb:8b:26:ab:99:04:
ac:49:01:87:ae:b9:28:8f:5a:c5:a1:25:91:6e:6e:8f:f1:20:
68:36:d1:f2:eb:5e:aa:8b:90:4c:9e:c1:6c:97:64:d8:35:a3:
02:f7:fc:0a:f2:58:4d:2d:db:17:74:e1:ff:e3:b4:02:e1:e2:
59:c0:61:16:2f:a1:ed:35:00:49:16:60:e5:5f:dd:d6:d2:9e:
8f:90:dd:88:d4:4c:5b:56:ed:5a:23:c9:44:5b:be:9e:64:3f:
2b:24:9f:3a:c3:97:b4:9a:c4:1f:f6:c0:fb:cd:d7:28:9a:83:
4e:35:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:20:13 2026 by rpki-client