This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa
File: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (raw, json)
Hash identifier: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=
Subject key identifier: 07:59:A5:89:CD:CC:04:A7:56:97:24:55:CA:D8:93:B1:A8:85:12:9A
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019B7B365222D63767F82217C32DAB8049B2
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa
Signing time: Thu 01 Jan 2026 20:18:36 +0000
ROA not before: Thu 01 Jan 2026 20:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208914
IP address blocks: 2a10:4741:32::/48 maxlen: 48
2a10:4741:33::/48 maxlen: 48
2a10:4741:34::/48 maxlen: 48
2a10:4741:35::/48 maxlen: 48
2a10:4741:36::/48 maxlen: 48
2a10:4741:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:52:22:d6:37:67:f8:22:17:c3:2d:ab:80:49:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jan 1 20:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0759a589cdcc04a756972455cad893b1a885129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:ab:f8:fb:f7:a5:56:b1:7d:88:34:df:da:
3a:a7:cb:71:40:bc:51:27:41:e1:59:7a:c1:f5:91:
fa:8a:f8:02:42:42:c8:2b:ea:dc:77:9c:ba:c0:85:
00:49:25:a8:a4:18:7d:f8:d3:e4:c9:e2:81:78:ec:
00:c0:92:17:07:56:00:42:e4:c2:48:ca:07:92:f1:
ef:0a:e7:3d:a5:e1:40:bf:7a:49:c9:5f:ea:4a:1c:
ae:d5:dd:d0:b1:0c:36:4a:a5:38:44:4a:0d:e8:a8:
d0:63:2e:b0:0d:e8:14:3d:27:1c:bb:b6:e9:7d:10:
3b:6d:09:ea:6e:7f:bb:52:1b:90:81:69:9e:de:a4:
f1:b9:44:16:94:e4:90:25:66:ae:e0:83:ef:38:d4:
9c:3f:c3:0b:80:6a:46:42:44:7e:65:2d:c3:36:ca:
15:3c:3f:08:2e:ac:ca:a6:23:ed:32:9c:bd:25:dc:
01:42:95:27:10:db:04:a4:0b:2f:1a:2f:ce:4d:5b:
c8:e2:48:69:d1:47:7a:e4:10:bf:60:f8:18:94:96:
a2:c5:41:e0:67:63:e5:ab:67:8b:06:38:f3:7a:c0:
9c:d5:bc:45:f4:3b:ce:a9:91:62:0b:59:ed:74:4e:
00:db:59:ee:71:2a:d6:bf:32:c6:0f:b1:6b:86:3e:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:A5:89:CD:CC:04:A7:56:97:24:55:CA:D8:93:B1:A8:85:12:9A
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/B1mlic3MBKdWlyRVytiTsaiFEpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4741:32::-2a10:4741:37:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:ea:37:71:16:b5:e3:19:20:a7:5e:be:01:3e:a8:10:1e:02:
72:22:6e:df:85:0c:30:25:ea:83:13:8d:55:5c:60:ad:79:61:
ee:50:6e:66:6f:9d:de:d2:73:40:c5:b6:15:ba:f5:46:4c:7c:
5b:23:1f:86:ce:ac:2e:8f:75:b4:a4:a1:60:4e:a0:6a:e6:13:
c9:ab:d2:97:37:ba:48:f2:0f:0b:6e:c0:f8:c7:8f:7c:98:73:
94:19:cf:ec:35:89:d4:75:0b:75:d1:bd:7c:28:91:d0:af:8a:
36:14:bf:0e:50:ef:80:38:0d:50:f4:ee:ab:02:19:13:9c:f7:
80:de:e8:db:c5:55:8c:4e:4a:3b:f5:e0:46:8d:1e:28:93:9f:
3d:c2:43:89:f2:63:ee:e5:5d:06:e3:95:12:19:36:aa:8d:0e:
53:cf:29:18:ef:1b:89:3b:78:d8:e0:04:44:b9:20:09:e3:dc:
a3:30:7c:82:08:c1:4d:c1:75:a3:33:0f:56:6c:4d:25:bf:94:
08:4f:33:bd:8c:eb:d7:8c:e6:a1:b9:4d:6f:32:59:15:49:99:
b8:6a:21:33:c3:a1:28:fe:40:c6:32:94:db:a2:b5:37:32:65:
01:8f:a5:ac:64:be:b9:e5:24:e4:58:2d:75:14:87:51:94:b8:
7b:0f:7f:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:34 2026 by rpki-client