This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa
File: Nm1WmzvZyBv0QX7kUWti6s0fygw.roa (raw, json)
Hash identifier: LK6k3pFVBlbjOoI7rGyfAfmFQes9uOk/iJq0hN/qLgw=
Subject key identifier: 36:6D:56:9B:3B:D9:C8:1B:F4:41:7E:E4:51:6B:62:EA:CD:1F:CA:0C
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FF0240645DF5E08A552F3693063A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa
Signing time: Thu 01 Jan 2026 02:17:59 +0000
ROA not before: Thu 01 Jan 2026 02:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199910
IP address blocks: 85.202.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ff:02:40:64:5d:f5:e0:8a:55:2f:36:93:06:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=366d569b3bd9c81bf4417ee4516b62eacd1fca0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:0d:31:de:d0:22:a8:27:56:94:08:f6:ee:
96:75:16:62:08:e6:14:42:2a:d6:1b:63:e0:ba:af:
14:9a:d7:16:f8:99:d5:1d:91:0f:28:a4:4e:2e:96:
70:69:14:b2:17:f8:96:63:02:d5:1e:88:bf:45:61:
ca:eb:99:e4:59:90:be:ec:5c:f5:b6:60:fc:f2:fb:
0a:04:dc:ec:3a:31:fa:6d:61:45:cd:4f:b7:ae:28:
c6:1c:b0:c3:3c:1e:19:c4:1e:68:8f:16:35:fe:ce:
00:51:b6:a4:94:f9:46:fe:8d:e5:67:a2:cc:69:25:
4e:7b:30:e5:88:73:01:8d:22:5a:4d:6b:32:a6:31:
ae:49:74:57:0f:46:c4:8d:6f:03:44:9f:f6:fd:3f:
ef:05:8e:ec:46:ca:6a:12:d3:49:14:ac:16:9d:b2:
f3:ab:be:2e:5c:85:87:31:11:21:75:cb:4d:5c:7d:
b5:58:ef:77:20:b4:d1:15:1d:d6:2a:27:95:bf:90:
3c:b8:83:ca:19:34:16:58:0d:b6:8a:1e:d6:46:b0:
a3:49:e3:45:cc:b8:cb:69:c8:c6:7d:08:c8:1d:2b:
70:7c:e5:0a:9e:ec:bd:f8:b8:22:6c:99:8c:8b:72:
43:13:df:b4:0b:99:c3:f0:eb:e3:05:c5:64:8a:30:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:56:9B:3B:D9:C8:1B:F4:41:7E:E4:51:6B:62:EA:CD:1F:CA:0C
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:be:a1:b1:76:6c:fa:10:e6:a9:b1:95:bf:1c:59:62:8e:3b:
ce:cd:f3:f1:5d:6a:f2:61:1c:79:48:90:19:5d:9f:9e:24:15:
da:b8:a9:47:48:02:28:98:51:67:0a:6f:78:1a:f0:12:25:f2:
5a:39:06:07:dd:c2:f9:3f:e7:37:7d:98:1a:43:93:fb:0b:bc:
be:0a:42:51:a9:eb:4e:98:53:28:2f:a9:7d:1b:35:77:57:a6:
c2:13:6d:55:c1:fd:9a:d0:4a:3c:81:62:79:db:1d:6e:fd:0f:
8f:52:6e:2f:1c:b8:96:0d:93:4f:95:d2:c5:96:66:81:25:24:
5d:d5:82:da:3e:d8:77:fb:60:f2:40:ca:ac:76:64:73:7e:13:
b6:85:63:69:d8:18:09:40:dc:11:85:ca:f1:aa:6d:98:11:9d:
99:d9:1d:43:b7:a5:6f:80:06:f3:47:68:af:b3:45:f5:40:43:
24:99:f4:ed:fc:60:88:f6:4c:0b:47:01:0c:44:42:1c:9e:77:
ff:d4:86:e8:b2:42:14:f9:a4:6d:eb:1e:2c:90:b6:76:c5:90:
b7:bd:8f:33:24:cf:e5:3b:58:72:bd:f6:7b:58:69:a1:a4:18:
05:84:d1:24:a1:7d:33:c5:32:84:9b:89:37:df:4d:f6:b3:9c:
f7:a4:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:01 2026 by rpki-client