This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/84SPRa3_ewxAnHZXEwBV1kLi3VM.roa
File: 84SPRa3_ewxAnHZXEwBV1kLi3VM.roa (raw, json)
Hash identifier: xgIumFcFLchK1z/1Csr0/oD3z8aKLtyk1tFqPTQqxyc=
Subject key identifier: F3:84:8F:45:AD:FF:7B:0C:40:9C:76:57:13:00:55:D6:42:E2:DD:53
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019B7F12F9DBAB2A28CE76347797BE98A156
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/84SPRa3_ewxAnHZXEwBV1kLi3VM.roa
Signing time: Fri 02 Jan 2026 14:18:28 +0000
ROA not before: Fri 02 Jan 2026 14:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207080
IP address blocks: 185.194.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:12:f9:db:ab:2a:28:ce:76:34:77:97:be:98:a1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 14:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3848f45adff7b0c409c7657130055d642e2dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:b3:55:fe:b6:19:12:02:03:e5:df:06:b3:
20:a6:56:fd:42:79:f7:13:9e:90:40:46:39:d5:0a:
25:1a:19:51:0b:77:83:c3:5e:71:af:c1:eb:30:0f:
24:8b:90:26:9d:28:a4:0e:72:66:c9:54:5e:6a:de:
b0:4e:77:10:89:7b:55:c4:f7:cd:37:38:a8:2e:48:
e1:e5:44:e0:cd:81:21:e2:7d:c6:d4:f8:14:1d:f8:
d3:c7:1f:d3:19:f8:19:20:be:ed:26:eb:b5:09:05:
52:9a:0a:65:34:b0:df:9e:8f:18:a3:73:15:ea:0c:
13:a8:12:c0:62:e8:ea:e1:03:ee:75:4f:2b:5d:4d:
07:2b:88:60:e6:58:8d:ee:08:a3:f6:6e:99:51:3c:
7a:80:6e:66:21:f0:75:fd:6f:19:52:b0:c6:60:ef:
06:7f:28:cf:33:ed:36:12:cd:32:f8:39:3c:97:dc:
4a:60:35:d8:0b:92:cd:9a:9c:30:70:b7:38:a3:dc:
f5:a8:18:ed:2f:c1:14:2a:dc:19:36:a4:35:71:ff:
91:35:16:6f:68:a6:c5:6e:ba:83:49:06:3d:fc:66:
70:bf:44:06:4a:84:89:36:b2:6c:b9:36:58:e8:8a:
a7:37:97:fc:d8:99:86:fa:b1:5e:36:ef:04:f0:a9:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:8F:45:AD:FF:7B:0C:40:9C:76:57:13:00:55:D6:42:E2:DD:53
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/84SPRa3_ewxAnHZXEwBV1kLi3VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.113.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6d:f3:e1:cf:b8:86:68:4c:4c:48:59:6b:b0:9c:fd:7d:56:
eb:35:fb:df:18:bc:0b:99:5f:82:df:54:20:83:6c:2f:b1:3d:
b0:66:c1:c6:38:f0:35:dc:de:b2:97:84:a3:8a:31:e2:aa:28:
35:3c:1f:55:24:ae:5c:cf:1f:1a:3d:20:cd:d6:d9:97:2f:f3:
2a:66:15:5f:c5:81:de:51:45:e9:f0:3d:ce:88:c7:f5:28:ff:
9c:ec:08:99:cc:aa:b7:20:c4:fa:f3:e4:5c:24:13:40:69:3e:
19:e7:a7:76:cf:5c:4d:7d:30:ce:14:9c:5b:30:69:6b:59:a5:
40:14:f9:55:db:56:8e:09:3a:6d:90:39:c5:49:95:e9:de:f6:
3d:52:3d:74:05:00:24:48:b1:52:76:c2:c5:04:66:95:12:be:
61:86:4e:b2:04:a2:b3:eb:0e:16:00:c1:5f:ef:2e:df:47:da:
68:c6:ea:3c:aa:81:e1:b4:cb:30:1c:be:7e:07:93:6c:89:8f:
73:d9:12:ad:c7:1a:77:5d:1b:77:ae:cc:30:96:69:55:dd:48:
95:85:b5:43:36:d1:7a:75:01:b3:98:15:ce:39:5a:74:c3:83:
1a:b0:d3:c9:38:4f:c5:9a:7b:60:0a:f8:92:f5:a9:65:bd:42:
97:ca:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:00 2026 by rpki-client