This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa
File: iwkzEw-xYne2_moODPhsHHvfJEE.roa (raw, json)
Hash identifier: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=
Subject key identifier: 8B:09:33:13:0F:B1:62:77:B6:FE:6A:0E:0C:F8:6C:1C:7B:DF:24:41
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019B77C74EB9F0C5B6F92A680EF940E054CE
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa
Signing time: Thu 01 Jan 2026 04:18:29 +0000
ROA not before: Thu 01 Jan 2026 04:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 185.5.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:4e:b9:f0:c5:b6:f9:2a:68:0e:f9:40:e0:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 1 04:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b0933130fb16277b6fe6a0e0cf86c1c7bdf2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:31:6c:74:b1:9d:a9:4e:f7:a2:8a:0b:ba:
72:25:83:52:86:39:58:d3:16:b9:aa:77:65:40:2d:
43:63:12:96:a1:87:61:cf:c7:e3:af:79:bf:75:33:
2d:ab:a6:d4:4b:aa:ed:0f:ab:ef:25:0b:5e:91:6e:
fd:a0:be:9d:31:ef:34:f0:35:65:60:c0:6b:fe:f6:
9d:ef:05:d7:00:ed:a2:55:37:b3:7e:27:76:ae:6c:
dc:53:aa:ae:09:40:24:5f:40:0a:7c:a2:72:6c:ec:
91:32:a2:f4:94:63:71:5c:2a:ae:1d:f6:a5:f1:ea:
6a:e8:1b:28:6e:0f:63:b3:18:d8:1d:0b:d7:a6:c2:
ad:56:36:a3:f8:18:63:64:bf:b4:4d:3c:8f:d9:df:
a6:3a:21:12:96:79:56:ff:82:4e:68:b0:2d:59:7c:
d4:2f:26:40:2d:79:f6:28:24:89:e0:80:d3:59:5e:
a4:ba:11:ed:90:88:5f:ab:fd:52:18:37:9c:f1:a4:
48:b1:b2:76:e2:5a:3e:ee:c7:9d:10:49:c8:49:f7:
fd:23:3b:8d:0b:f1:6b:6b:16:75:ff:77:21:28:42:
20:ac:87:3f:fc:67:c6:3a:24:af:24:ca:66:e4:d6:
53:5c:91:5a:1f:aa:70:1d:53:b8:a8:8c:f7:33:97:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:33:13:0F:B1:62:77:B6:FE:6A:0E:0C:F8:6C:1C:7B:DF:24:41
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.92.0/23
Signature Algorithm: sha256WithRSAEncryption
87:01:b0:91:d5:d8:01:96:e2:7b:7c:53:e0:70:d1:68:89:83:
70:1a:ad:6b:c7:9c:40:ea:b2:cf:46:f7:98:60:7a:ad:09:9a:
bd:b5:8b:6a:3d:26:22:87:d5:03:c7:ac:71:d7:74:fa:6c:02:
34:29:1e:ad:e8:87:24:aa:fb:60:3c:62:8a:83:43:11:19:35:
4f:f0:15:f6:20:1b:0e:de:9f:ab:a3:e9:21:4d:bb:cf:37:d3:
1f:19:c0:ee:ea:ca:f3:7f:2c:7e:d5:bf:19:cb:61:ac:cc:eb:
93:6c:ea:04:1f:48:c4:ce:f4:3c:33:8d:12:c6:ab:5a:6a:d6:
77:4b:e7:a3:45:60:cd:42:4b:af:b6:fc:e0:1c:aa:cb:76:93:
0f:4f:d9:43:5b:0d:48:a3:9e:a5:6b:68:a1:80:c1:ef:c1:60:
0a:9b:5e:cf:3e:e7:a0:f9:b1:b7:23:9d:76:7f:4a:13:61:42:
18:84:85:d7:bc:26:ae:90:9a:c4:2c:39:20:cf:a4:d3:2b:d8:
ab:49:72:10:4f:78:cd:04:b0:de:d4:5d:7c:47:e4:87:38:e4:
af:57:68:14:2c:a7:c7:1b:72:df:52:a8:d6:27:a3:5f:9f:20:
12:7a:62:2e:b6:05:d5:78:22:5b:cc:33:58:ad:ab:5b:c3:d7:
47:e0:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:50 2026 by rpki-client