This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa
File: b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa (raw, json)
Hash identifier: VDng1uCTJGN5zS/D2Ww5fMBkjxBVpzoQf6gFfDENzfQ=
Subject key identifier: 6F:E6:6B:C4:8B:7A:0F:46:B8:83:75:0B:55:D0:84:22:DC:8E:A5:93
Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial: 019B7834BCB6F66939E2DDCB0960BB71DB0B
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa
Signing time: Thu 01 Jan 2026 06:18:00 +0000
ROA not before: Thu 01 Jan 2026 06:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206375
IP address blocks: 45.135.204.0/24 maxlen: 32
45.135.205.0/24 maxlen: 32
45.135.206.0/24 maxlen: 32
45.135.207.0/24 maxlen: 32
139.28.104.0/24 maxlen: 32
139.28.105.0/24 maxlen: 32
139.28.106.0/24 maxlen: 32
139.28.107.0/24 maxlen: 32
185.188.128.0/24 maxlen: 32
185.188.129.0/24 maxlen: 32
185.188.130.0/24 maxlen: 32
185.188.131.0/24 maxlen: 32
185.219.176.0/24 maxlen: 32
185.219.177.0/24 maxlen: 32
185.219.178.0/24 maxlen: 32
185.219.179.0/24 maxlen: 32
2a0b:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:bc:b6:f6:69:39:e2:dd:cb:09:60:bb:71:db:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Validity
Not Before: Jan 1 06:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fe66bc48b7a0f46b883750b55d08422dc8ea593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:0d:86:95:54:1a:81:15:da:8e:11:7f:52:
2d:c3:60:59:e8:e9:41:17:a2:31:a4:96:5f:75:0e:
e0:36:69:41:b6:03:1c:7d:02:64:b3:43:66:c5:56:
70:2f:48:c2:74:92:ea:a0:f9:11:d7:5f:7b:f6:da:
c6:4e:23:8b:11:94:73:cb:34:e4:21:60:b9:cb:0c:
9e:7d:c9:52:67:c5:54:f6:fe:7a:6c:ef:39:47:ec:
53:55:14:fd:7b:2a:27:9f:d0:6a:f6:0b:f0:38:97:
73:73:da:a7:71:ca:6b:b3:84:a2:21:4e:f9:ce:14:
48:49:70:e3:c3:65:c6:47:32:c0:09:0a:3d:a3:8f:
31:e3:90:1b:85:c6:9b:a6:9a:aa:ed:16:f1:ec:c3:
21:2f:92:20:46:86:e6:6a:0a:e0:a2:04:53:b2:1e:
80:5a:d5:ca:3d:2b:bf:ac:36:25:8c:46:c9:44:f3:
87:d2:07:3b:67:d4:6c:33:1d:40:a2:ca:b9:0d:d9:
55:21:dd:d1:7a:8f:58:07:43:d4:1e:70:85:b0:9b:
cd:12:5a:bc:32:03:73:cd:1f:aa:64:2b:84:32:e1:
5a:15:16:bc:26:c5:20:71:67:ca:f8:6c:db:42:78:
dc:6f:86:71:b1:35:e3:89:55:ce:58:eb:20:c1:d2:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E6:6B:C4:8B:7A:0F:46:B8:83:75:0B:55:D0:84:22:DC:8E:A5:93
X509v3 Authority Key Identifier:
keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.204.0/22
139.28.104.0/22
185.188.128.0/22
185.219.176.0/22
IPv6:
2a0b:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
02:64:e5:c9:4c:04:62:0b:23:83:4b:ee:0a:fb:43:d3:95:52:
0d:16:75:84:9a:3b:87:74:61:22:09:09:e2:aa:16:9b:7e:7b:
9e:13:62:cd:25:47:26:48:aa:9f:93:32:ee:d9:cb:21:9b:81:
f4:1a:1a:4f:d5:af:c5:5d:05:50:e6:41:b6:89:e4:4d:9f:d7:
2c:3e:3e:36:c3:36:05:d8:39:55:30:31:61:48:64:f9:61:f3:
6b:51:d6:b0:79:22:37:e3:90:07:7a:24:7a:e0:04:95:86:0a:
69:7b:3e:ba:8e:65:24:50:1f:6a:9f:98:4c:b1:20:50:9a:f5:
7d:ac:67:81:9f:e1:e7:f8:d7:d9:c0:2f:65:1c:0c:2a:0f:25:
bb:66:72:78:12:fc:6a:cf:44:e6:bd:92:7a:53:5c:e6:c3:90:
3a:79:ae:d6:a8:9e:af:d2:0f:ea:57:c8:07:17:41:b3:dd:56:
94:68:09:27:ed:66:ee:c7:36:f8:92:e2:69:e7:eb:ac:5d:25:
05:ae:39:c0:5d:f3:75:0d:9d:9a:c4:ac:f4:89:c9:6d:d1:41:
37:da:08:ae:b3:3c:72:92:c6:49:da:07:cb:7a:7d:0c:3e:29:
53:fd:56:06:3f:23:9f:0a:f6:21:1b:74:43:64:5a:36:9f:7f:
b6:6d:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:14 2026 by rpki-client