This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa
File: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (raw, json)
Hash identifier: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=
Subject key identifier: 44:67:39:7C:B8:DC:24:D9:98:74:0A:73:05:E0:51:4F:5B:13:5F:C5
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019B7834CC02D60F2C3F70B5BD0800329340
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa
Signing time: Thu 01 Jan 2026 06:18:04 +0000
ROA not before: Thu 01 Jan 2026 06:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35407
IP address blocks: 185.159.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:cc:02:d6:0f:2c:3f:70:b5:bd:08:00:32:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 06:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4467397cb8dc24d998740a7305e0514f5b135fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:d9:42:83:f6:e8:84:5d:21:5c:e0:17:55:
91:33:54:df:dd:63:dd:c1:50:5e:27:a1:0b:f0:15:
a2:f1:f4:28:b2:8e:74:63:ee:2e:e6:53:d8:3a:8d:
44:1b:67:ac:b9:e3:97:d6:dd:59:0c:f0:93:13:12:
74:1a:e6:b5:fd:89:fc:dc:10:f9:90:4c:03:23:a6:
13:9d:82:85:d4:d2:74:52:d1:e5:8d:35:e8:81:2d:
24:9b:9b:a7:81:c0:13:8d:7d:71:d9:4b:40:f2:8f:
52:18:e4:01:16:ef:61:5a:72:6f:b9:cd:e2:b3:a9:
0f:9f:90:83:8a:1b:4f:c8:da:0a:73:cb:98:01:1b:
09:de:d9:e6:cb:b3:9f:d3:bd:05:0c:1d:20:82:dc:
03:b6:c3:e6:73:16:54:c5:9e:c6:08:53:5f:a0:54:
60:01:b9:76:b5:e5:82:4f:e8:02:9a:d8:c2:1c:20:
2e:8a:e6:1d:15:ff:87:2f:2c:3c:aa:42:ac:48:f5:
6d:df:11:00:60:a1:7b:22:59:d2:0c:01:50:7f:e1:
46:26:6f:5f:c9:dc:50:21:5d:61:08:1d:30:d5:e0:
25:bc:06:73:79:fe:30:a3:5e:cf:94:e4:85:b0:12:
72:9e:5f:57:15:39:94:54:de:48:79:14:83:4f:32:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:39:7C:B8:DC:24:D9:98:74:0A:73:05:E0:51:4F:5B:13:5F:C5
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a0:c7:e8:6a:fe:f2:04:8f:98:dc:b0:92:b0:61:18:59:3f:
af:d0:90:9e:9b:29:9d:35:d3:22:d4:f5:cc:d2:a5:a4:2f:d7:
df:43:46:22:4d:12:b2:bf:f7:34:dd:b8:fc:c3:43:4d:15:d5:
cb:33:f1:04:ad:43:97:e5:9c:9c:4f:34:ca:fc:ca:63:fe:63:
1c:db:76:81:1c:ab:21:b8:c3:f1:ff:09:98:6e:34:4a:20:d4:
14:4a:ae:fd:7b:01:c4:54:30:da:8f:2b:8b:fb:15:ac:e2:4f:
32:9d:26:14:e3:a3:03:a8:d1:96:00:a1:28:de:dc:3f:f8:70:
c8:4a:c5:c7:97:b4:29:0b:2b:42:38:f5:3a:f8:3d:b9:de:80:
73:69:6c:81:36:90:ff:20:77:d0:28:0c:d0:ab:4c:2b:75:4f:
ac:33:51:05:cc:6e:25:53:ae:8a:10:29:5f:55:9f:92:c7:b9:
78:d2:a0:9f:90:73:bd:88:af:ea:8a:2b:48:81:b0:81:e9:16:
fc:22:e3:b2:e7:07:ca:f8:56:d1:6f:d1:ea:5d:b7:7e:fc:35:
27:23:c2:a7:e5:b9:9c:51:81:37:4a:b1:c4:db:63:a0:17:8b:
57:17:b7:4d:98:56:f4:fd:5f:97:db:04:65:37:40:67:f5:c0:
05:cb:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:39 2026 by rpki-client