This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa
File: _no2T5wGNnY26JGUD4kdd2oqfik.roa (raw, json)
Hash identifier: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=
Subject key identifier: FE:7A:36:4F:9C:06:36:76:36:E8:91:94:0F:89:1D:77:6A:2A:7E:29
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 019B7DCB06DCBFA212A325113493FD20F467
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa
Signing time: Fri 02 Jan 2026 08:20:16 +0000
ROA not before: Fri 02 Jan 2026 08:20:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216120
IP address blocks: 185.150.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:06:dc:bf:a2:12:a3:25:11:34:93:fd:20:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Jan 2 08:20:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe7a364f9c06367636e891940f891d776a2a7e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:62:e6:24:71:b6:4a:c9:ec:56:9b:0b:69:
b9:68:14:0b:0c:90:6a:4f:1a:40:27:f8:6b:df:21:
59:8b:18:f2:13:fc:0f:70:04:a2:75:e3:6b:a2:e8:
ff:cf:ef:25:79:0e:80:1c:96:6b:03:ef:bf:00:b7:
50:0f:cf:d4:d3:e3:cb:82:85:d2:2d:d2:61:65:6f:
60:e2:32:2c:40:3a:94:a4:38:54:b0:87:10:eb:12:
79:a0:c2:07:d4:4c:3f:30:1e:4b:f7:cb:d6:d3:ef:
a5:ea:a2:b1:4e:a5:f8:bc:56:42:d6:ca:1f:f5:dd:
6a:64:96:0d:04:e7:32:ad:45:92:6f:94:66:c7:81:
a0:d2:ad:10:7b:66:4d:25:60:c4:e5:35:bc:ea:57:
54:c8:7d:6e:fd:8e:85:b8:9b:8d:53:ad:11:07:6d:
63:bc:17:70:50:96:00:4b:ab:c6:16:7c:de:9d:f1:
ca:e2:b5:ea:4d:b7:11:57:b1:b6:c4:1d:d6:a8:82:
22:be:6e:85:83:d7:99:e4:8e:46:40:20:37:46:91:
b5:73:bb:09:70:a5:a9:06:31:68:d9:d7:50:48:5f:
45:7c:91:74:d3:4f:8a:53:16:6d:a3:27:11:e4:65:
89:c5:b7:c3:76:d6:e0:05:73:df:36:7c:47:62:ea:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:36:4F:9C:06:36:76:36:E8:91:94:0F:89:1D:77:6A:2A:7E:29
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.19.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c2:74:18:7e:51:52:95:ca:48:cd:82:fc:f1:d9:fc:32:99:
46:7c:7c:21:33:0f:fe:88:83:c5:75:a0:01:b4:64:18:d7:2d:
b4:00:d5:9b:60:8a:bb:35:31:2d:ee:e3:ec:f9:b9:1c:36:aa:
90:7e:fa:11:10:0b:8a:a0:1c:4d:89:7b:e6:68:40:ab:f4:f9:
a5:09:8c:4c:38:fe:4a:40:bb:cc:32:dc:33:b8:6d:8b:66:87:
ca:eb:4a:93:ca:75:43:6d:43:eb:fc:ff:4b:9a:c2:83:70:2d:
51:a7:3d:e3:31:d7:c3:64:0e:99:cf:4d:ee:28:6d:0b:5f:ea:
c8:f6:65:e8:91:af:19:0f:a5:0c:7a:ab:84:2b:31:82:34:7b:
12:66:f2:0b:3b:f2:d2:4d:92:9d:11:83:f8:74:24:f8:a1:b7:
18:3b:87:85:08:e6:53:e7:22:7d:39:cc:6f:36:ee:bf:0d:3f:
91:63:23:28:f8:49:25:c7:cd:bb:8f:f8:cc:22:cd:2a:d6:1d:
5a:79:b3:9b:16:ce:d3:87:cd:7e:75:10:0a:a4:23:30:82:c5:
c5:be:d4:7c:1d:cf:d5:3c:51:21:f9:7c:6f:73:5c:d3:d7:71:
a9:1b:2a:f5:86:08:08:4b:62:d0:22:5a:2e:b4:e5:59:66:f3:
03:87:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:24 2026 by rpki-client