This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa
File: CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (raw, json)
Hash identifier: chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=
Subject key identifier: 08:20:D5:0D:0D:8E:AE:EC:A6:D4:A8:C3:0E:B9:E0:70:70:37:31:EC
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019B7A5AAB6E19A78007B6C0DA188A7FCC99
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa
Signing time: Thu 01 Jan 2026 16:18:40 +0000
ROA not before: Thu 01 Jan 2026 16:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 185.42.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:ab:6e:19:a7:80:07:b6:c0:da:18:8a:7f:cc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jan 1 16:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0820d50d0d8eaeeca6d4a8c30eb9e070703731ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:08:cf:ab:51:82:51:9a:78:eb:eb:6d:53:
32:3b:df:93:ed:62:b3:c6:3f:75:e7:87:8d:c0:80:
f8:cd:32:6d:da:53:10:d8:76:cd:40:45:27:04:dd:
a2:fa:97:3f:70:5a:4b:dd:0a:e7:c3:cb:21:84:f8:
00:48:3e:ce:0b:0e:cd:17:04:e1:2b:7c:71:b2:de:
bd:ec:d1:c9:ad:98:58:2d:ad:fa:0c:35:7e:92:ba:
51:e5:be:97:13:c8:d6:88:d0:03:39:2f:96:a8:a5:
8b:15:49:f8:a8:1f:b7:36:6a:9e:82:23:ec:29:cb:
b4:39:d1:23:1f:89:5a:05:40:05:a7:0e:97:bc:25:
35:2b:1c:3d:e3:ce:2e:09:b9:03:2d:50:2c:37:d7:
7e:ff:3c:74:e0:56:28:21:8b:08:a6:06:62:14:cd:
db:f5:1e:bb:6c:98:ab:e3:46:6c:5f:aa:7e:77:df:
cd:6d:e9:a3:fc:a4:cc:1a:7a:53:89:85:ef:ab:f3:
45:b2:73:07:f0:60:fb:8a:f9:0e:c9:48:6c:66:30:
59:ba:60:77:23:69:87:0e:ef:ae:3f:b9:de:08:37:
60:a4:6c:37:aa:f7:4e:ec:70:df:ee:6e:b1:f1:e1:
dd:ca:c1:3c:02:cf:b7:88:a2:59:77:66:7e:14:a5:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:D5:0D:0D:8E:AE:EC:A6:D4:A8:C3:0E:B9:E0:70:70:37:31:EC
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.163.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8a:1c:95:18:78:09:a4:b2:5b:ed:76:b8:d7:c9:78:fd:19:
9f:36:98:24:20:86:78:e0:73:01:e7:19:4f:46:fd:42:2a:50:
0c:a0:a5:52:ad:aa:70:8b:51:73:92:ac:85:ab:50:92:7b:74:
22:72:79:0f:7c:0e:72:7d:a1:fb:f2:21:2b:fb:55:eb:c2:97:
d6:af:47:39:b1:7f:8a:3b:51:a6:f1:92:92:62:76:c9:24:d6:
ab:f4:7a:51:c5:48:26:7f:4b:06:18:02:b6:b4:b1:3d:7e:92:
d4:4e:6c:17:44:12:7c:4e:aa:84:b2:87:43:51:c0:c7:b4:ad:
5b:2d:24:04:9f:77:d7:f3:40:78:c8:bb:63:8f:55:8d:74:73:
cc:40:a5:b4:d9:78:0c:b0:e8:a9:67:a8:ba:d0:21:49:3e:3c:
93:30:8f:bc:73:69:51:e0:3e:8f:c2:77:2a:b2:05:fb:64:91:
7b:16:27:0f:a6:81:b8:10:38:52:9f:77:c7:5b:d6:c9:3c:3c:
6f:bc:64:fc:53:3f:7c:61:82:1a:f6:9a:8a:d6:41:05:b3:1b:
e9:5c:47:f7:9f:93:3b:36:a0:03:ac:e2:7b:c5:72:e0:79:be:
c9:8d:5b:a2:b0:7d:4f:71:1a:8f:de:7f:96:d3:1c:9f:5a:a2:
5f:40:7f:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WqtuGaeAB7bA2hiKf8yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODIwZDUwZDBkOGVhZWVjYTZkNGE4YzMwZWI5ZTA3MDcwMzczMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwIz6tRglGaeOvrbVMyO9+T7WKz
xj9154eNwID4zTJt2lMQ2HbNQEUnBN2i+pc/cFpL3Qrnw8shhPgASD7OCw7NFwTh
K3xxst697NHJrZhYLa36DDV+krpR5b6XE8jWiNADOS+WqKWLFUn4qB+3NmqegiPs
Kcu0OdEjH4laBUAFpw6XvCU1Kxw9484uCbkDLVAsN9d+/zx04FYoIYsIpgZiFM3b
9R67bJir40ZsX6p+d9/Nbemj/KTMGnpTiYXvq/NFsnMH8GD7ivkOyUhsZjBZumB3
I2mHDu+uP7neCDdgpGw3qvdO7HDf7m6x8eHdysE8As+3iKJZd2Z+FKXZwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgg1Q0Njq7sptSoww654HBwNzHsMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvQ0NEVkRRMk9ydXltMUtqRERybmdjSEEzTWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSqjMA0G
CSqGSIb3DQEBCwUAA4IBAQCIihyVGHgJpLJb7Xa418l4/RmfNpgkIIZ44HMB5xlP
Rv1CKlAMoKVSrapwi1FzkqyFq1CSe3QicnkPfA5yfaH78iEr+1XrwpfWr0c5sX+K
O1Gm8ZKSYnbJJNar9HpRxUgmf0sGGAK2tLE9fpLUTmwXRBJ8TqqEsodDUcDHtK1b
LSQEn3fX80B4yLtjj1WNdHPMQKW02XgMsOipZ6i60CFJPjyTMI+8c2lR4D6Pwncq
sgX7ZJF7FicPpoG4EDhSn3fHW9bJPDxvvGT8Uz98YYIa9pqK1kEFsxvpXEf3n5M7
NqADrOJ7xXLgeb7JjVuisH1PcRqP3n+W0xyfWqJfQH8W
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:17 2026 by rpki-client