This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/EFVOpOWZdKE35rgrU-jtXznNsuI.roa
File: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (raw, json)
Hash identifier: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=
Subject key identifier: 10:55:4E:A4:E5:99:74:A1:37:E6:B8:2B:53:E8:ED:5F:39:CD:B2:E2
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 019B7A5B6E002A8E0EAB37E00A75D9614561
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/EFVOpOWZdKE35rgrU-jtXznNsuI.roa
Signing time: Thu 01 Jan 2026 16:19:30 +0000
ROA not before: Thu 01 Jan 2026 16:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15695
IP address blocks: 185.86.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:6e:00:2a:8e:0e:ab:37:e0:0a:75:d9:61:45:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Jan 1 16:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10554ea4e59974a137e6b82b53e8ed5f39cdb2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:71:a8:c1:23:2d:17:6b:d0:30:e0:f2:16:
bc:1f:90:3f:e7:2e:d9:fb:12:51:17:3c:5f:e3:9f:
31:94:4b:09:e5:b8:05:e3:52:1f:87:98:12:44:1f:
e6:37:84:89:3b:e3:a0:cd:ab:d0:b6:29:5c:38:6e:
22:a0:27:0c:0a:ee:b8:a8:b3:11:07:09:31:95:bb:
37:14:af:54:a4:bb:47:aa:77:15:44:b9:c6:ee:f7:
0e:d7:cd:20:a9:2f:55:1e:ce:e4:f3:82:71:2a:d2:
b7:f9:79:2c:30:84:55:9c:9a:b7:fc:2a:8d:50:4d:
9d:ec:43:a4:49:6f:e6:1e:1c:4d:f5:38:19:68:6e:
b4:48:68:f1:2d:2e:ac:17:a1:e9:4c:b3:0b:54:89:
0e:d5:01:05:7f:d4:99:24:80:91:a0:a0:5a:b2:53:
9e:63:14:9a:4f:cc:9d:6d:70:de:46:91:81:53:97:
d9:0d:51:4d:7c:ab:ea:c9:8e:bb:14:ea:c4:c7:79:
3e:db:06:5d:24:01:68:a9:88:c6:21:00:8f:03:3f:
53:10:4d:de:3d:2e:a4:26:20:be:f5:0f:42:4b:d7:
11:19:3f:ed:3e:1c:c6:8d:1f:5f:c4:17:a9:25:28:
9d:0e:30:d7:f0:76:2f:08:8a:23:11:df:90:78:6e:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:55:4E:A4:E5:99:74:A1:37:E6:B8:2B:53:E8:ED:5F:39:CD:B2:E2
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/EFVOpOWZdKE35rgrU-jtXznNsuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.55.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:85:02:de:aa:c3:f6:e2:8b:c4:db:ac:a7:ff:01:12:8d:
00:99:c4:97:7b:dc:6d:61:17:ad:ba:df:74:6c:be:f9:59:4c:
f8:e7:5f:f4:3e:47:f0:23:02:df:2a:20:38:3e:06:83:1c:52:
ba:82:37:d4:52:8e:96:a5:bd:72:62:32:af:1d:a7:cf:83:99:
8a:29:bd:c4:47:16:28:c1:37:b9:52:46:a3:81:66:40:a8:48:
71:8e:72:5a:72:ad:e3:d1:07:80:7d:af:a9:c1:45:9c:96:4d:
ef:05:e2:24:ea:56:12:a6:13:f8:0a:95:17:b7:c2:0f:40:75:
fd:da:15:cb:1d:6d:72:df:f8:8b:f7:ca:5f:d7:dc:31:a0:72:
4e:04:92:86:e9:d8:56:08:84:d7:e8:4a:d9:9c:b7:ff:fd:4f:
97:51:b1:7a:6a:3a:53:52:a3:46:0e:74:73:39:9e:81:48:8d:
6a:70:9c:3b:69:98:1a:c5:fb:25:c7:7d:49:27:61:f7:40:08:
91:b3:00:10:f3:5a:84:c3:3b:74:9f:fd:f4:14:8b:fa:cf:dc:
13:46:40:a3:61:b1:c6:a4:4a:ac:a8:d7:a9:d8:ce:eb:89:56:
9d:5f:73:14:b6:fd:0e:c2:5b:09:71:73:6e:03:ba:64:6f:b5:
d5:23:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:55:26 2026 by rpki-client