This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/V6MbHQ4IlulkadnPNR4GjRCTQBc.roa
File: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (raw, json)
Hash identifier: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=
Subject key identifier: 57:A3:1B:1D:0E:08:96:E9:64:69:D9:CF:35:1E:06:8D:10:93:40:17
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 019B7E3810300F901CB0FC75AA06C44CE8AB
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/V6MbHQ4IlulkadnPNR4GjRCTQBc.roa
Signing time: Fri 02 Jan 2026 10:19:21 +0000
ROA not before: Fri 02 Jan 2026 10:19:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209183
IP address blocks: 185.196.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:10:30:0f:90:1c:b0:fc:75:aa:06:c4:4c:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Jan 2 10:19:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a31b1d0e0896e96469d9cf351e068d10934017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:23:90:b8:94:24:26:1f:e7:0e:dd:bf:d7:
31:1d:4c:fe:64:71:4a:42:9c:d3:2e:27:91:e4:05:
17:0e:04:2d:4f:c1:f4:07:f9:31:8c:2c:8b:4a:64:
38:c4:69:4e:a8:8b:98:b1:43:15:95:c6:5a:96:37:
6c:0b:76:37:00:a7:fa:b7:2b:b7:88:4c:ec:36:7c:
62:7e:36:39:00:ef:fa:c2:13:0a:86:ca:cd:d4:5f:
98:f3:11:ea:b6:d5:0f:80:e9:c7:c7:9f:64:21:b8:
e3:b7:8a:12:8d:1b:e6:8f:dd:a3:7e:42:22:47:70:
4f:bd:58:ab:cf:f5:c6:77:e5:eb:d7:3c:f8:8d:aa:
23:53:5d:9b:6f:f9:98:5e:9e:0c:64:f8:0f:2e:22:
c4:a5:67:4f:ba:f3:a0:30:12:86:31:bb:b8:e5:36:
42:39:9b:ea:13:8f:1a:84:54:ad:01:0a:2b:c1:02:
2b:fe:0f:7b:1d:3e:81:00:06:8e:ca:b6:89:56:1c:
86:83:54:c9:c8:39:84:46:2c:e6:49:62:de:7f:db:
6a:76:7f:95:0b:64:35:d4:4c:c3:d4:6d:5f:76:6b:
8b:3c:3b:a8:64:9c:e9:49:89:14:f5:9f:e6:83:87:
96:f0:8f:4a:91:8d:49:b3:05:b7:ff:23:95:26:e8:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:1B:1D:0E:08:96:E9:64:69:D9:CF:35:1E:06:8D:10:93:40:17
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/V6MbHQ4IlulkadnPNR4GjRCTQBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.44.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f7:65:a6:5d:50:18:91:4c:24:99:e8:c2:cd:5c:f3:e4:0f:
97:ba:ef:b2:5c:dc:ba:c7:38:52:a7:04:16:03:7f:6e:c3:ed:
4f:b1:90:06:d0:ae:12:f7:58:0e:4a:46:14:95:04:f6:cf:e9:
e0:b7:ed:de:3f:7f:97:90:8a:b8:82:0d:8a:b1:2f:59:82:22:
08:db:99:fc:d5:92:14:b2:14:e0:03:68:a8:24:04:7d:99:76:
53:a2:2e:2f:a2:ab:f4:88:76:47:f3:24:c3:f2:d4:33:1f:9f:
95:ed:1b:63:26:c5:dd:7d:6d:87:ba:53:27:86:cb:fb:32:12:
65:81:f3:9e:75:e0:d9:ca:29:1b:3d:97:7a:73:05:1f:8a:a5:
90:13:41:ee:08:00:a3:77:81:d4:50:0a:c8:c9:42:01:b3:75:
31:eb:80:30:12:15:93:a1:33:ca:90:02:64:3d:3b:63:45:97:
d2:5c:29:97:b0:a9:db:bd:b9:22:17:6f:38:27:cc:48:a8:2f:
05:3d:d9:f3:f9:39:bc:a7:2b:6d:37:f7:53:a5:e0:b9:58:d9:
1a:f2:6e:70:aa:db:5e:2a:47:8c:b5:b8:79:2f:ea:96:df:b7:
9f:2c:28:0b:3f:99:89:c0:cc:fc:21:72:ad:63:70:cf:a1:a6:
03:96:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:59:07 2026 by rpki-client