This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa
File: DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa (raw, json)
Hash identifier: swf8YmD6Ki4+UjZ5FglBvmHT7MtzNkXVGqo+SXTTnU4=
Subject key identifier: 0C:8A:E6:59:DE:79:9C:AB:C0:A0:9F:32:7F:FE:23:5A:0C:AB:94:D8
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019B7AC7A77BDAA79F70DAE38E61FE5A23CC
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa
Signing time: Thu 01 Jan 2026 18:17:43 +0000
ROA not before: Thu 01 Jan 2026 18:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273944
IP address blocks: 185.240.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:a7:7b:da:a7:9f:70:da:e3:8e:61:fe:5a:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 18:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c8ae659de799cabc0a09f327ffe235a0cab94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:2a:2a:f1:ca:12:b3:62:db:b8:aa:aa:0e:
c6:7d:37:fc:30:19:23:3f:2a:ee:22:2b:6b:1d:c3:
79:da:7c:03:55:66:47:ee:20:ab:aa:24:ae:f9:ea:
31:f3:b6:17:ea:0f:44:15:d7:32:8d:be:86:c6:00:
f1:78:f4:e9:d0:d2:a7:18:2b:b1:04:e6:14:66:d2:
ad:65:c6:a1:5f:54:1f:40:1b:16:78:b4:0d:84:91:
03:fa:30:d9:d1:cc:0c:9b:c2:5a:11:30:4e:c6:9c:
0c:2e:9e:0c:5e:dd:c3:7e:4b:4a:1c:5b:c5:83:d5:
80:7d:1f:e1:d1:33:d3:f8:c1:37:1a:a0:2e:3d:5c:
da:0d:bd:cd:f9:99:8a:c7:f6:f0:e8:e9:2e:8c:3d:
09:67:6a:46:fa:50:6d:cd:b3:34:dd:1d:a4:89:7b:
7e:59:45:f6:9a:30:54:9e:66:46:1d:77:9a:db:62:
1a:b4:51:70:d2:f6:e7:19:f6:04:aa:d7:cf:92:ad:
1b:49:13:3e:49:cb:14:78:4e:c7:3e:1e:17:3a:81:
54:5d:24:1b:9d:8e:13:32:58:3a:eb:55:91:b3:c6:
b5:30:c8:a2:31:1d:e6:aa:88:6f:d5:8b:ac:7a:a2:
c3:56:c5:26:72:c8:9c:47:48:7a:62:48:86:a7:cf:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:E6:59:DE:79:9C:AB:C0:A0:9F:32:7F:FE:23:5A:0C:AB:94:D8
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DIrmWd55nKvAoJ8yf_4jWgyrlNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.90.0/23
Signature Algorithm: sha256WithRSAEncryption
63:b2:75:68:15:c2:78:48:78:79:11:5c:9f:aa:7b:39:00:75:
71:c9:d0:35:2f:a7:96:40:0b:df:fd:c6:78:f2:18:b8:f6:84:
a6:32:62:a9:04:d9:01:97:e4:ea:2a:92:56:ca:17:bf:77:ab:
1e:56:43:56:d6:80:1f:8d:4e:fe:af:59:ff:6b:c2:8d:2a:dc:
4e:f6:7b:98:b1:21:ee:77:93:fd:25:85:e8:7c:29:88:be:3b:
19:cf:c5:b3:e1:b2:00:00:e8:3f:2c:20:94:99:fa:80:ec:76:
5e:79:4d:95:b4:dd:0a:9c:ba:55:90:12:f3:1f:a0:53:eb:51:
4d:7b:0a:26:ee:ac:13:88:89:f6:f6:bf:34:7c:b2:43:23:17:
b9:03:d7:92:89:04:c7:df:a0:4e:65:a9:21:0f:66:62:7c:c7:
e9:73:d4:69:9a:5d:59:83:62:95:ea:5a:ac:19:e1:51:08:2c:
84:ba:7e:e7:a1:dc:63:c3:c5:fa:d1:9f:f5:66:75:10:70:11:
59:dc:9e:97:d6:7e:d2:55:6e:20:a3:ff:6f:b1:1c:de:8b:1e:
2e:79:c2:f3:86:91:d4:51:b3:0b:d4:e8:64:e3:b7:ae:4f:70:
4b:5a:d6:44:34:2b:94:4d:fe:1e:9e:c3:a2:d2:d5:7a:0b:1f:
bf:3b:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:07 2026 by rpki-client