This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/topvI4u_yc05Ro-Wd1LgO-ILlDM.roa
File: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (raw, json)
Hash identifier: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=
Subject key identifier: B6:8A:6F:23:8B:BF:C9:CD:39:46:8F:96:77:52:E0:3B:E2:0B:94:33
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 019B79EBB7CF837A3EF8BA6DFE45995FF409
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/topvI4u_yc05Ro-Wd1LgO-ILlDM.roa
Signing time: Thu 01 Jan 2026 14:17:29 +0000
ROA not before: Thu 01 Jan 2026 14:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.214.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:b7:cf:83:7a:3e:f8:ba:6d:fe:45:99:5f:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Jan 1 14:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68a6f238bbfc9cd39468f967752e03be20b9433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:a0:15:f1:82:8e:6a:4b:90:95:fc:0d:13:
08:99:55:0f:25:5d:06:41:a4:6e:0a:01:47:ec:e3:
8a:3f:3d:ab:5c:f9:ba:fe:fe:a0:39:16:86:5d:77:
56:50:1f:63:66:f5:84:9a:5e:3f:38:2c:9b:1f:29:
e9:25:d1:e5:cf:9f:75:3f:d5:a2:ab:33:e4:1a:e9:
e6:ac:48:69:f1:45:3c:10:ee:7b:ec:77:14:3f:ba:
8e:e9:5e:ed:03:5e:fb:df:2a:8b:24:5c:4a:9b:16:
a0:a2:5c:89:10:09:e5:9d:2e:ac:7a:fe:f5:fa:40:
be:af:6e:ca:60:2e:6c:22:bb:80:3a:cf:5d:6a:f4:
9b:27:a3:fd:01:31:aa:e3:ca:81:a6:dc:02:16:1b:
c1:46:d9:c1:5a:8a:55:82:58:e8:13:5f:62:3a:d0:
1f:4f:5d:e3:97:67:32:e7:59:27:1c:1d:0a:44:5f:
00:5d:f1:97:29:ed:97:5e:18:32:af:90:f2:45:35:
3c:a8:64:7d:5c:85:dc:76:bc:2e:56:3a:d4:b5:00:
c5:2d:9f:5a:7e:68:3a:00:9a:d5:a0:09:a4:b4:36:
5c:6c:78:32:8b:a8:42:d8:f1:50:77:d3:de:25:43:
e9:a4:97:e7:a3:f2:9d:86:48:f4:89:95:f8:20:84:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:6F:23:8B:BF:C9:CD:39:46:8F:96:77:52:E0:3B:E2:0B:94:33
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/topvI4u_yc05Ro-Wd1LgO-ILlDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.212.0/23
Signature Algorithm: sha256WithRSAEncryption
87:b3:06:bd:3c:8b:bb:5b:98:3b:8b:b9:f4:cd:ca:14:75:ec:
da:93:99:6b:e4:44:a4:ec:26:f5:cf:0e:da:55:b6:fc:38:52:
61:df:47:d5:86:64:69:1b:5d:e2:89:4c:7a:19:da:b9:24:f3:
77:b1:02:d3:b4:2d:26:96:e2:98:3f:a3:47:5e:fc:d0:15:cf:
96:7a:4e:02:81:b5:c9:4b:a8:dd:6e:53:62:be:95:0a:45:1f:
2b:91:29:92:94:9c:4c:34:94:45:24:cb:b9:b3:3e:77:ea:d4:
58:8f:69:96:79:d2:06:1a:e8:52:61:73:4f:22:f5:ae:46:a1:
41:a7:0d:02:42:c4:16:b5:77:1b:64:8d:e8:bc:09:e5:58:0b:
c8:87:e1:0d:36:36:33:03:b3:ef:08:a0:a1:60:8a:bd:17:53:
63:11:b3:4e:28:e3:7b:ce:a1:43:b8:47:a0:b9:2a:7a:b4:6a:
3c:54:9f:14:05:6f:7d:11:b9:25:7a:fe:1e:ce:28:c1:cb:ba:
75:1e:2b:99:e9:3a:49:34:b9:9a:97:a4:b7:c6:78:5d:d5:b4:
11:1f:1f:d7:6a:9d:4e:1e:69:21:c9:5f:ff:33:67:82:3d:aa:
3e:f4:f0:2d:4a:96:f8:87:6a:8d:3c:b7:6d:9f:55:1f:bb:40:
10:62:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:39 2026 by rpki-client