This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/q4BgbuvkzVB8ZRL3SkFinweXq-I.roa
File: q4BgbuvkzVB8ZRL3SkFinweXq-I.roa (raw, json)
Hash identifier: aCMbnoKcpfu50sjGN6TL9OokrXx+Ehkmz9YH9z+ZFCA=
Subject key identifier: AB:80:60:6E:EB:E4:CD:50:7C:65:12:F7:4A:41:62:9F:07:97:AB:E2
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 019B7A5B9E08D8121C20D4341FE503B46E09
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/q4BgbuvkzVB8ZRL3SkFinweXq-I.roa
Signing time: Thu 01 Jan 2026 16:19:43 +0000
ROA not before: Thu 01 Jan 2026 16:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208006
IP address blocks: 185.204.168.0/22 maxlen: 24
185.215.232.0/22 maxlen: 24
185.215.234.0/24 maxlen: 24
185.215.235.0/24 maxlen: 24
2a0d:4ac0::/48 maxlen: 48
2a0d:4ac0:1::/48 maxlen: 48
2a0d:4ac0:2::/48 maxlen: 48
2a0d:4ac0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:9e:08:d8:12:1c:20:d4:34:1f:e5:03:b4:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Jan 1 16:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab80606eebe4cd507c6512f74a41629f0797abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:70:5f:d8:8b:87:89:98:10:9a:b2:b1:83:
e0:2e:b3:8e:35:83:86:97:c5:33:5b:fe:2d:f1:dd:
e8:c6:4f:6a:72:af:32:d9:65:24:8b:5f:d6:6c:4a:
84:ac:a2:72:a2:aa:55:df:0b:fd:e5:e3:1d:02:6b:
80:80:47:cc:6c:2d:bf:43:cd:97:72:7d:0f:17:5c:
51:b7:e7:ab:2e:34:0f:28:3b:65:f6:58:11:9a:fd:
cf:e7:13:68:74:65:53:df:f9:fa:3a:01:ee:96:30:
2d:99:e9:9d:5b:86:29:4b:8d:95:36:30:61:6d:5b:
f8:29:cd:8c:43:6f:03:9a:be:26:98:0c:f3:61:75:
18:a0:e0:4b:4b:b4:77:7b:dc:2e:b3:c6:87:94:be:
c4:4c:2d:47:2a:ad:86:20:17:da:93:98:16:ca:6f:
af:f5:eb:66:0b:83:db:b1:f8:cb:70:1a:86:c3:85:
a8:7b:0a:29:ad:be:0a:a1:5d:91:cf:3f:75:73:82:
37:bb:64:c5:58:90:c2:d1:cc:11:33:60:e0:71:71:
43:0b:93:94:43:a6:b5:1b:70:60:2b:84:a4:a5:3c:
f6:63:e1:55:44:ad:d2:8f:47:7e:32:2c:73:6b:be:
1b:18:db:cd:a3:c0:62:64:e8:f0:14:c8:e2:d7:f3:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:60:6E:EB:E4:CD:50:7C:65:12:F7:4A:41:62:9F:07:97:AB:E2
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/q4BgbuvkzVB8ZRL3SkFinweXq-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.168.0/22
185.215.232.0/22
IPv6:
2a0d:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
c2:5e:20:7a:b5:d6:40:0e:6d:7f:ca:60:31:07:fc:45:c0:83:
be:7e:54:82:7a:64:b9:0b:49:c1:c1:e0:4a:ee:ab:c0:5e:d7:
cb:52:0a:08:5d:ea:dd:3c:3c:cd:54:4a:3e:1b:7e:f3:8a:64:
22:70:e9:4c:9a:5b:23:e8:5a:4b:4e:50:6c:22:83:65:86:12:
b0:81:16:a2:8b:fe:6e:24:85:3a:c1:83:d3:74:21:35:f8:76:
a1:9b:c3:ea:b3:12:c6:4b:4f:0f:ae:a8:ec:4b:c7:ea:2d:f1:
81:32:70:b1:f0:bf:8c:b9:9f:7c:a2:cc:0a:02:40:09:8c:58:
da:d9:14:6b:81:e7:0c:43:bf:f2:9c:5c:ec:f7:93:ad:05:8d:
1c:4a:dd:ac:76:45:ef:0e:17:e7:c1:01:25:c6:d3:66:1e:7a:
7c:47:a4:21:fd:f1:22:c0:df:1a:a8:97:90:05:1d:28:b2:57:
59:64:6a:4e:1a:39:05:8f:a1:6c:1e:d9:6d:25:63:1a:08:7d:
03:c0:12:b8:88:80:60:0b:54:e2:c3:59:ed:61:80:51:51:1a:
c0:76:57:b1:5b:d8:1b:1b:b3:06:0b:0f:26:52:c9:a0:15:16:
31:64:07:09:ab:0e:64:ca:01:6b:ca:e0:20:b5:69:e6:f2:dd:
8b:86:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:14:07 2026 by rpki-client