This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/s-BpkK8dZ7sg-pX8o8tJNmYf9Qs.roa
File: s-BpkK8dZ7sg-pX8o8tJNmYf9Qs.roa (raw, json)
Hash identifier: 6VRWTccFJ1A1t6K+WnteXjr92q9SqwFuxG0nKbIo1P8=
Subject key identifier: B3:E0:69:90:AF:1D:67:BB:20:FA:95:FC:A3:CB:49:36:66:1F:F5:0B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B77590DCC1754F6BBE1A5FCE5C6691101
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/s-BpkK8dZ7sg-pX8o8tJNmYf9Qs.roa
Signing time: Thu 01 Jan 2026 02:18:03 +0000
ROA not before: Thu 01 Jan 2026 02:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206632
IP address blocks: 85.202.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:0d:cc:17:54:f6:bb:e1:a5:fc:e5:c6:69:11:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e06990af1d67bb20fa95fca3cb4936661ff50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:9f:c6:bf:b5:c6:ea:84:19:c0:f3:1d:a5:
8d:08:ce:89:49:63:69:2c:a2:b7:eb:ec:e7:ea:4e:
ab:dd:c5:b5:8d:f8:3c:a5:39:fe:f6:f5:87:c4:35:
13:4a:2b:0d:e3:03:8c:9b:54:b5:52:af:ce:61:48:
2c:38:fc:e0:ef:f2:e8:0c:10:2c:30:c9:f9:3c:93:
a0:fa:15:6d:fa:37:0c:2b:0c:26:e8:8e:b5:03:ce:
f7:a0:f6:ae:68:31:14:83:d7:c8:af:88:3f:89:75:
85:cb:35:ee:75:93:6a:6a:be:3c:7d:01:e9:8f:dd:
8f:e6:16:24:2f:08:cd:61:c7:bc:02:cd:0e:7f:e5:
1f:a9:f5:03:89:89:4e:1b:07:7c:41:a6:a6:a1:07:
64:3b:98:86:30:a3:1e:a9:07:d6:71:26:9b:d1:38:
ea:17:b1:8c:b5:fc:5f:64:fd:8d:22:48:18:7b:ed:
96:10:eb:3a:c9:4d:e2:16:22:5d:7f:ec:ed:1f:9a:
cf:76:39:20:01:68:6b:b1:43:78:a8:92:66:87:35:
17:df:3a:e6:b1:32:ee:25:47:64:56:2f:bc:98:2c:
bf:f9:67:49:ec:a7:da:51:f0:58:61:f9:3b:35:51:
99:29:04:93:76:cc:82:d8:27:1c:65:50:a7:16:09:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:69:90:AF:1D:67:BB:20:FA:95:FC:A3:CB:49:36:66:1F:F5:0B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/s-BpkK8dZ7sg-pX8o8tJNmYf9Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.50.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ad:e0:94:c9:89:19:ec:38:d5:05:7d:b2:e3:4b:46:21:17:
ab:c7:04:6f:49:cc:7a:22:21:9d:96:07:15:2c:ce:d5:95:8f:
ac:71:c4:ff:d2:12:cd:1b:7d:a4:94:1e:f7:00:b8:ef:c1:54:
9a:aa:54:53:33:d7:3d:5e:c1:37:89:90:e7:03:3c:44:d1:4d:
10:fc:2e:f4:bf:dd:db:b3:5b:a0:d4:5d:8d:b0:49:db:a0:62:
8e:d7:cc:43:56:7d:1a:99:24:e4:03:99:c1:62:15:0a:f2:c8:
99:c8:b6:b0:29:97:d4:b2:06:ab:dd:d4:20:15:70:d5:a4:83:
8c:fc:5b:ea:9a:47:e4:74:42:7f:11:a1:14:2c:b2:8b:44:54:
3a:cb:ce:4c:89:e7:33:c6:e6:af:21:b2:25:da:82:fc:12:ed:
43:1e:68:6e:78:f2:04:31:52:90:38:36:0e:2f:f9:1e:86:8d:
36:b4:21:ba:92:a3:f1:3f:79:1a:81:a5:29:a4:f2:0a:fd:64:
95:01:ee:07:ce:3c:44:7d:18:4c:d6:af:e5:11:13:2b:a5:42:
12:f9:56:78:e9:d7:89:b1:8c:19:78:51:c3:1f:3b:85:84:9b:
fa:6a:10:53:2b:b7:f4:30:fb:7c:b5:ea:4e:37:8d:5a:f9:64:
20:c8:b5:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WQ3MF1T2u+Gl/OXGaREBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2UwNjk5MGFmMWQ2N2JiMjBmYTk1ZmNhM2NiNDkzNjY2MWZmNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEqfxr+1xuqEGcDzHaWNCM6JSWNp
LKK36+zn6k6r3cW1jfg8pTn+9vWHxDUTSisN4wOMm1S1Uq/OYUgsOPzg7/LoDBAs
MMn5PJOg+hVt+jcMKwwm6I61A873oPauaDEUg9fIr4g/iXWFyzXudZNqar48fQHp
j92P5hYkLwjNYce8As0Of+UfqfUDiYlOGwd8QaamoQdkO5iGMKMeqQfWcSab0Tjq
F7GMtfxfZP2NIkgYe+2WEOs6yU3iFiJdf+ztH5rPdjkgAWhrsUN4qJJmhzUX3zrm
sTLuJUdkVi+8mCy/+WdJ7KfaUfBYYfk7NVGZKQSTdsyC2CccZVCnFgmgyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLPgaZCvHWe7IPqV/KPLSTZmH/ULMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvcy1CcGtLOGRaN3NnLXBYOG84dEpObVlmOVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcoyMA0G
CSqGSIb3DQEBCwUAA4IBAQB2reCUyYkZ7DjVBX2y40tGIRerxwRvScx6IiGdlgcV
LM7VlY+sccT/0hLNG32klB73ALjvwVSaqlRTM9c9XsE3iZDnAzxE0U0Q/C70v93b
s1ug1F2NsEnboGKO18xDVn0amSTkA5nBYhUK8siZyLawKZfUsgar3dQgFXDVpIOM
/FvqmkfkdEJ/EaEULLKLRFQ6y85MieczxuavIbIl2oL8Eu1DHmhuePIEMVKQODYO
L/keho02tCG6kqPxP3kagaUppPIK/WSVAe4HzjxEfRhM1q/lERMrpUIS+VZ46deJ
sYwZeFHDHzuFhJv6ahBTK7f0MPt8tepON41a+WQgyLW2
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:59 2026 by rpki-client