This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa
File: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (raw, json)
Hash identifier: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=
Subject key identifier: B9:1E:AA:93:90:DE:82:55:16:35:BC:F2:03:C5:FF:CF:10:67:FD:4B
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019B797EF83C42C8C5EDC910E246A212D90E
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa
Signing time: Thu 01 Jan 2026 12:18:42 +0000
ROA not before: Thu 01 Jan 2026 12:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 95.141.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:f8:3c:42:c8:c5:ed:c9:10:e2:46:a2:12:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jan 1 12:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b91eaa9390de82551635bcf203c5ffcf1067fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:43:71:67:f3:65:10:d4:b9:c2:1d:40:e2:
f5:11:6d:ce:a1:18:b8:17:36:83:16:bc:9a:f1:7d:
12:31:9d:0b:0c:4b:eb:16:9f:ac:72:14:40:42:f9:
9b:d9:c0:8c:d6:f5:94:54:b0:f9:a4:42:27:b0:45:
d4:18:82:07:9e:c4:e4:d5:25:12:08:39:b0:4f:2e:
ba:ea:9f:dd:d2:de:cf:53:c5:15:45:7d:d2:1c:e3:
a3:73:ca:f3:0a:95:ef:90:c0:6f:a9:ed:21:81:ce:
e3:c2:11:84:36:34:16:23:ac:a2:b1:3f:7c:7a:f6:
21:64:8b:2d:80:b3:bb:a3:33:0f:01:de:a0:36:1e:
fa:4f:aa:81:4a:1e:66:76:dd:7f:ab:88:a8:fc:dd:
e7:51:83:98:87:ad:6a:f4:1c:bf:98:32:4f:50:eb:
8a:45:b8:ce:a7:12:41:9d:72:91:d2:0d:39:4f:75:
ae:1b:d1:f9:ec:03:eb:a4:b3:40:4a:f9:1a:8a:0c:
f9:7c:e0:a4:6b:74:df:2c:1f:b1:1d:2e:66:70:83:
76:a6:89:5d:8b:01:52:55:b6:96:14:c1:25:0a:2a:
68:81:96:16:d5:1e:f9:3a:62:82:12:ad:d2:34:56:
bd:29:d4:a2:bb:31:62:74:fa:16:f5:5d:9f:bd:be:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:AA:93:90:DE:82:55:16:35:BC:F2:03:C5:FF:CF:10:67:FD:4B
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/uR6qk5DeglUWNbzyA8X_zxBn_Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1b:ac:f9:e7:8f:90:fb:3f:0b:61:5c:7e:75:6b:54:2b:f4:
64:34:fb:3f:e1:ab:43:04:9c:48:66:06:c9:dd:1b:ed:f8:d3:
02:63:08:a9:29:65:64:ef:61:22:a8:db:3e:2f:ba:c0:f0:64:
dd:49:4e:27:8d:34:5e:0b:92:df:fc:c7:6a:59:97:e7:df:4e:
a4:c8:1a:6a:c6:03:e7:8c:96:29:88:9f:16:80:e3:20:b0:69:
0d:f8:a9:1a:2a:33:54:a7:5d:a1:45:8b:6e:39:32:83:83:c1:
b5:67:80:59:26:6d:9d:8e:42:9f:68:a7:b5:04:57:ec:ad:08:
a0:65:2c:22:87:b4:d6:2c:b8:41:f6:3a:55:88:d5:a4:0e:72:
4d:d1:3a:1a:e0:9b:1d:9e:17:4e:fb:60:4f:26:4d:d2:7d:ca:
7c:97:a2:d5:bd:ff:0d:dc:8d:30:6c:c3:1c:b9:3b:e2:5f:90:
d0:e5:13:3d:8a:5e:27:a9:9b:32:84:40:28:ec:21:af:d1:c3:
a0:8e:09:70:f2:06:b1:e2:4e:dc:36:38:97:0b:b5:09:8c:0b:
cd:0c:4b:bb:df:86:d3:83:53:ac:ae:ab:a0:60:52:ce:65:c5:
8d:3e:78:24:3b:25:94:d0:1b:9c:78:ac:71:4b:3d:da:4b:e5:
ee:fa:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:20:25 2026 by rpki-client