This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa
File: rbSihGXODQuXmGdRnxTGjpysN_E.roa (raw, json)
Hash identifier: kNylbr0jppPNSO+4QDcJI79pqrUPxp86qMzkIb3LnQY=
Subject key identifier: AD:B4:A2:84:65:CE:0D:0B:97:98:67:51:9F:14:C6:8E:9C:AC:37:F1
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 019B7F83DD8F0B3FD857DDA9CB40C4F25877
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa
Signing time: Fri 02 Jan 2026 16:21:46 +0000
ROA not before: Fri 02 Jan 2026 16:21:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56616
IP address blocks: 31.7.88.0/22 maxlen: 24
31.7.88.0/23 maxlen: 23
31.7.88.0/24 maxlen: 24
31.7.89.0/24 maxlen: 24
31.7.90.0/23 maxlen: 23
31.7.90.0/24 maxlen: 24
31.7.91.0/24 maxlen: 24
185.116.20.0/22 maxlen: 24
185.116.20.0/23 maxlen: 23
185.116.20.0/24 maxlen: 24
185.116.21.0/24 maxlen: 24
185.116.22.0/23 maxlen: 23
185.116.22.0/24 maxlen: 24
185.116.23.0/24 maxlen: 24
2a0a:d340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:dd:8f:0b:3f:d8:57:dd:a9:cb:40:c4:f2:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jan 2 16:21:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adb4a28465ce0d0b979867519f14c68e9cac37f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:32:43:bd:68:4d:e0:10:d6:b4:d8:bb:62:
a1:60:81:2e:89:0c:f4:ea:ec:18:e0:ef:07:27:33:
db:5e:58:dc:c4:a6:3f:8b:94:c3:74:f5:45:ef:58:
a5:6d:dd:95:fd:8e:c8:da:30:9f:41:ea:cd:fb:e6:
36:82:3c:3d:1d:c3:6f:d5:46:0d:ba:8f:ae:76:28:
44:19:c6:f7:59:88:d3:f4:95:ad:27:ba:72:34:95:
0a:ef:d9:9c:39:6f:c0:93:88:f9:6a:ff:d3:ca:2c:
fa:32:d9:f6:c2:3b:53:98:bc:49:99:29:37:81:c7:
bc:72:ae:27:1a:7b:ab:65:a1:99:73:10:a1:fb:29:
01:e9:17:2e:9b:14:9b:6f:1f:21:39:b5:ed:0f:c9:
2d:da:af:cb:84:f7:5a:b5:26:c8:37:66:31:d0:47:
52:bb:d4:82:e2:12:15:eb:f5:9e:62:17:2e:9e:46:
f9:6b:69:4c:5f:3e:84:52:8d:04:1d:98:ca:54:45:
74:17:58:6c:2f:63:b7:cd:e7:46:40:8c:da:5e:f2:
a3:35:eb:dc:05:02:f8:f2:37:6b:68:b0:ac:9a:67:
b4:f4:db:34:d2:6e:86:48:f2:62:d8:db:9e:cb:fe:
3d:53:31:34:74:2e:67:d7:72:fa:95:ce:53:04:4e:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:A2:84:65:CE:0D:0B:97:98:67:51:9F:14:C6:8E:9C:AC:37:F1
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/rbSihGXODQuXmGdRnxTGjpysN_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
0a:c8:8c:67:11:03:77:8f:bf:26:dd:fd:a4:29:09:45:48:46:
19:fc:19:f7:f6:bb:32:7d:bd:93:94:7d:b9:e7:cb:14:1c:03:
77:f1:33:27:bb:92:ac:41:0b:b6:79:a6:7d:5e:c3:cc:f0:4c:
4f:54:a4:d3:76:f9:ce:79:d4:bb:19:bf:25:b1:4f:42:8a:80:
e2:de:0e:b9:c9:63:19:e2:11:f9:a6:2c:86:63:c7:22:70:65:
2b:7e:cc:6c:a6:fa:a3:4d:98:de:0d:7e:7b:b9:52:c7:f6:f6:
b9:cb:a3:d5:cf:7d:6f:04:6a:69:e4:21:13:1f:4e:bc:69:77:
89:fd:f4:87:9f:0f:2b:b1:18:d7:39:67:03:3b:f1:22:32:f1:
cf:e0:af:14:4a:f9:de:44:01:cf:cb:02:82:9d:60:42:de:57:
a7:f2:f1:bb:dc:8f:ed:5e:82:86:7e:0d:7a:b4:93:a2:26:63:
4a:79:19:af:40:56:95:81:f2:27:04:07:c7:3b:df:55:69:6f:
6e:23:74:c2:4b:77:94:c3:8d:ae:9e:e8:2b:df:13:c4:6a:2d:
a2:e0:c1:41:f2:14:b8:0f:a7:07:f6:a3:57:c0:3e:42:53:6c:
31:f7:70:cf:b3:5c:65:01:e1:6f:0a:8e:3e:e2:b1:89:d4:74:
03:99:9f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:26 2026 by rpki-client