This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa
File: dCl0q4_GuogKF8XrFPMUNq696G8.roa (raw, json)
Hash identifier: hFHFWlVTeWBAVwx1gQtse8jDVZwunN7tx8D56G5e0Is=
Subject key identifier: 74:29:74:AB:8F:C6:BA:88:0A:17:C5:EB:14:F3:14:36:AE:BD:E8:6F
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 019B7F15B03EC9DCF994D006875F829D5268
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa
Signing time: Fri 02 Jan 2026 14:21:26 +0000
ROA not before: Fri 02 Jan 2026 14:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201628
IP address blocks: 185.68.180.0/23 maxlen: 23
185.68.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:b0:3e:c9:dc:f9:94:d0:06:87:5f:82:9d:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 2 14:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=742974ab8fc6ba880a17c5eb14f31436aebde86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:91:b9:8a:da:d9:3b:50:31:6b:40:b4:14:
c8:a1:04:a0:10:e5:0e:64:4d:2a:5a:7d:7e:aa:b4:
16:ae:12:94:a9:ac:bf:c8:87:93:6e:7b:56:d8:46:
c8:59:bd:f1:42:6e:23:28:74:bc:8c:12:78:fa:21:
34:46:9f:22:20:6e:03:b6:3c:78:8f:35:e1:64:15:
4a:42:ea:9e:4c:cc:2d:12:ff:40:2d:dc:f9:b7:42:
df:7d:26:11:54:11:f0:de:76:2e:09:b1:13:c6:81:
58:02:aa:d1:f1:0b:4c:49:7b:88:7b:b6:88:aa:b2:
fc:06:c8:db:63:91:91:6a:44:ae:40:79:b3:da:c1:
1c:5d:bf:28:d2:0a:2f:11:09:b1:eb:c9:81:37:af:
90:67:1c:cb:1c:5e:47:0f:2a:31:00:75:d9:2d:93:
d1:04:0d:a7:83:ed:b2:10:63:ab:6d:e3:45:a8:42:
2e:25:c6:a3:81:aa:33:64:6c:13:14:94:8e:78:af:
03:1f:aa:92:e0:0d:e4:c9:7b:1e:15:91:37:e0:ff:
fe:ce:9c:51:67:b4:b8:6d:06:b2:28:e0:eb:32:12:
79:cb:88:e6:bd:db:87:cc:d8:5b:f9:3e:da:6c:05:
92:81:b1:5d:18:49:f1:0f:04:b3:b3:80:aa:cd:7b:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:74:AB:8F:C6:BA:88:0A:17:C5:EB:14:F3:14:36:AE:BD:E8:6F
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.180.0/23
185.68.183.0/24
Signature Algorithm: sha256WithRSAEncryption
65:99:5f:ad:31:6c:42:56:d6:48:7c:9e:81:70:1b:6d:00:e8:
a7:e8:7b:4a:a9:d4:67:d0:f0:86:2d:a9:02:4e:ae:d1:7e:ac:
82:5a:aa:a3:c0:1d:2f:8b:4b:84:ca:cc:96:a9:eb:c9:de:1d:
82:97:0c:01:7c:04:ce:2f:92:b8:68:06:01:3e:e7:c8:b4:d4:
c6:39:49:af:89:3f:6e:3d:a7:85:1a:0e:88:20:a9:e9:0c:0d:
96:5d:b2:e7:dc:f0:56:f6:fa:c3:4c:15:50:44:be:f1:3f:ec:
36:44:af:33:3f:5e:66:90:bc:e3:8f:76:f4:d6:5b:3f:a4:01:
bb:0d:6e:bf:c3:39:b6:a8:46:1a:f0:e6:7d:48:69:6a:ee:6e:
2e:31:64:2a:f5:ad:ee:64:1c:e1:32:b7:23:8a:3c:a8:9d:a3:
7e:60:c8:59:0b:d5:16:06:cf:90:5c:1b:2a:a3:8a:1b:f7:43:
ea:1b:ad:cb:f0:be:db:bc:1b:1b:4d:c5:ee:d5:de:3c:df:03:
cc:0f:31:88:18:ab:b1:0b:a9:79:bf:a9:de:10:2c:7b:13:b1:
97:3a:96:0c:18:56:37:9e:cc:b6:8a:1b:67:d6:c6:c7:62:a2:
21:0b:81:1c:ad:fb:50:6d:66:98:c5:b9:18:d1:ec:7b:8a:50:
89:a3:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:07 2026 by rpki-client