This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xsb80TsEg5gDhvG_dHnY_wiD7IU.roa
File: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (raw, json)
Hash identifier: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=
Subject key identifier: C6:C6:FC:D1:3B:04:83:98:03:86:F1:BF:74:79:D8:FF:08:83:EC:85
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019B797E44716D288BD9D3416E1BE81EB28D
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xsb80TsEg5gDhvG_dHnY_wiD7IU.roa
Signing time: Thu 01 Jan 2026 12:17:56 +0000
ROA not before: Thu 01 Jan 2026 12:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201476
IP address blocks: 5.183.12.0/22 maxlen: 22
185.73.100.0/22 maxlen: 32
185.73.104.0/22 maxlen: 32
185.73.108.0/22 maxlen: 32
185.167.184.0/22 maxlen: 32
217.75.214.0/23 maxlen: 32
217.75.216.0/23 maxlen: 32
2a03:4260::/29 maxlen: 48
2a03:4260::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:44:71:6d:28:8b:d9:d3:41:6e:1b:e8:1e:b2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 12:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c6fcd13b0483980386f1bf7479d8ff0883ec85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:87:f2:c9:78:2d:ed:70:b9:d4:df:22:4e:
df:1e:27:be:be:db:60:01:4e:68:a6:11:a7:de:db:
06:6b:c6:c7:10:6d:ca:3c:52:bf:5f:44:41:12:12:
4b:0f:60:1d:ff:05:99:1a:76:84:fe:a1:93:6b:5e:
1b:ce:48:62:93:c7:42:c5:a4:e6:df:94:01:64:ff:
59:b2:99:03:0c:b8:b2:5c:73:f6:65:ee:ee:f3:0b:
7a:9b:e4:7d:7c:b3:be:0a:44:67:13:a7:a8:d4:f3:
4c:71:4c:d5:de:e0:13:53:e9:84:bf:3f:5a:af:df:
0a:93:f5:4d:dd:7a:31:ed:9e:12:3e:ff:ce:f4:54:
0c:fc:87:81:7f:ef:ae:f4:ea:c0:5c:d8:05:83:cf:
8f:01:67:7b:32:db:27:9f:0a:14:40:18:21:db:5f:
d4:8f:58:da:ae:28:2f:57:b9:d1:58:13:39:58:c8:
0d:f0:eb:12:fe:c5:78:29:c5:63:c8:22:17:8e:b5:
9d:c0:01:58:3c:e2:e5:0b:e5:41:35:74:dc:c4:62:
56:ab:72:2b:54:bc:fe:1d:cd:55:5e:54:81:86:8f:
6e:8c:00:88:91:79:14:9e:0b:55:a6:86:1e:8b:dd:
6d:c5:2a:b8:19:6e:f7:bb:59:19:27:0a:68:42:d0:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:FC:D1:3B:04:83:98:03:86:F1:BF:74:79:D8:FF:08:83:EC:85
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/xsb80TsEg5gDhvG_dHnY_wiD7IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.12.0/22
185.73.100.0-185.73.111.255
185.167.184.0/22
217.75.214.0-217.75.217.255
IPv6:
2a03:4260::/29
Signature Algorithm: sha256WithRSAEncryption
c6:2b:54:14:1d:c9:ea:bc:5f:a1:a6:86:bf:e5:e7:71:81:b4:
97:75:0d:c4:50:78:18:13:28:37:fa:ac:2c:ba:c1:57:fb:6a:
39:53:7f:ab:03:4a:c6:54:35:d8:f1:b6:83:48:6d:d9:cc:51:
96:d3:a3:16:78:8f:da:d2:ab:78:32:b9:98:56:51:94:3d:a4:
16:0e:3b:9d:0b:e1:ba:da:cd:1c:a7:e1:f5:6c:0c:cd:fc:8b:
de:f8:66:42:32:f4:dc:1a:7a:47:46:7d:bd:5b:be:32:1e:a7:
b3:27:74:99:a5:12:f4:35:93:9b:fe:b0:12:8e:75:e9:d0:d8:
6c:1d:ff:5d:2e:db:e6:ac:16:22:be:72:2a:b6:3a:db:05:a6:
8f:4c:99:e9:db:26:d4:b9:8b:73:71:45:4a:ee:d2:ee:5b:f5:
49:b3:2f:e0:1e:a8:8d:8c:83:c3:a1:74:e4:f6:7d:fb:77:aa:
50:94:1b:92:a3:b9:62:8c:e9:17:44:37:f5:f9:43:b7:61:d1:
44:ff:6e:0e:9e:81:0c:78:22:6f:57:2b:d4:c2:f5:1b:df:08:
ce:bf:2c:bf:f0:34:87:e8:8a:56:44:52:94:ff:99:c4:3f:7a:
a9:99:45:7b:46:2b:cd:de:b7:b0:21:6f:fd:21:e1:be:25:52:
fe:1a:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:32:37 2026 by rpki-client