This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa
File: UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa (raw, json)
Hash identifier: 6Dahf9gKo3spL66J3FQf4jt5WqJRr1c/pSpOxLB19HE=
Subject key identifier: 51:67:3A:61:08:CC:F6:DD:5F:7E:62:3E:2D:5C:40:51:3F:CE:C1:B2
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019B79EBBA7605BCE2301F00B2802DC69536
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa
Signing time: Thu 01 Jan 2026 14:17:30 +0000
ROA not before: Thu 01 Jan 2026 14:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 185.146.92.0/22 maxlen: 22
2a07:4f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:ba:76:05:bc:e2:30:1f:00:b2:80:2d:c6:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jan 1 14:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51673a6108ccf6dd5f7e623e2d5c40513fcec1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:63:46:68:b4:44:58:c1:26:65:6d:33:e8:
af:29:ad:09:d0:38:34:97:70:2c:a2:8e:52:0d:de:
ff:ba:7e:55:15:55:38:79:42:67:5b:5c:03:79:40:
83:0f:2c:2d:d7:11:30:fe:ce:ca:1f:54:3f:65:18:
eb:50:9d:b6:be:d0:1b:3b:ee:bc:1e:16:ca:06:d7:
8a:b5:2e:65:3e:94:c9:77:f6:56:35:37:b0:cc:4c:
ea:d0:47:8b:ec:10:2e:ad:bd:03:67:8d:93:fe:32:
c7:5c:a2:00:9b:20:78:ef:77:91:c6:1c:55:ea:3b:
43:60:16:09:7f:17:bd:4a:71:a1:3d:7a:85:bd:13:
0d:8f:5d:9c:9c:93:ea:4a:4f:de:c8:bf:1e:38:c9:
20:9a:bf:6e:18:b8:f8:0a:65:13:dc:74:42:d6:d4:
ed:1c:61:bd:95:32:c3:99:18:55:14:c3:b8:f5:d7:
81:8d:ea:99:51:9d:20:40:93:6d:4f:55:47:26:55:
4c:39:80:18:b6:17:f6:26:88:31:25:a0:26:77:e2:
2e:0c:1f:06:8c:15:25:c3:8f:84:d0:ce:39:d6:92:
83:be:b2:e1:d2:d4:5d:20:d2:f3:8d:ae:9d:ac:4d:
a3:94:ca:fe:30:b9:f1:97:ed:cb:aa:46:3c:58:ad:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:3A:61:08:CC:F6:DD:5F:7E:62:3E:2D:5C:40:51:3F:CE:C1:B2
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/UWc6YQjM9t1ffmI-LVxAUT_OwbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.92.0/22
IPv6:
2a07:4f40::/29
Signature Algorithm: sha256WithRSAEncryption
1b:12:a6:aa:32:09:5b:c9:2d:60:cb:82:74:e6:1a:f8:a3:00:
61:2e:72:b9:be:91:8c:ca:91:a4:cb:63:7c:82:37:9e:96:e0:
8b:95:84:46:83:2a:bb:7a:5c:b6:84:8e:74:db:7b:9d:ca:e1:
2e:b1:d4:7b:87:64:93:12:ee:55:ce:ba:3f:98:83:56:2c:6a:
97:13:51:d0:00:66:44:84:bd:3d:b7:59:61:3e:68:07:37:4b:
5d:67:61:ed:cd:c4:eb:1b:09:2b:a8:71:f8:07:bf:7f:53:32:
05:6e:12:a6:51:ba:25:69:f4:83:13:31:f3:c1:c2:62:ee:8b:
61:a4:80:bf:8e:fd:b0:b6:95:ca:87:88:7a:df:6e:39:6b:b7:
0c:76:c4:3b:57:a1:34:53:fd:be:68:65:a2:a5:fd:3f:77:39:
27:b8:ca:50:9d:4f:40:a0:a1:6d:31:85:9b:5a:52:47:2f:9b:
38:3c:8d:25:26:83:ff:7f:c7:40:5c:7a:9c:09:cd:b5:27:20:
e2:73:0b:5e:a0:7a:d5:45:79:59:25:c1:23:d9:7e:a2:42:d9:
c1:d9:c8:8c:91:86:e0:7d:49:65:98:86:cb:6c:53:65:0b:66:
a0:b9:67:94:b4:d4:b3:ec:13:00:5d:39:e7:4a:ee:52:fa:8b:
9d:28:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:54 2026 by rpki-client