This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wCrdreEenBFJr40kfhAiXxXP4VE.roa
File: wCrdreEenBFJr40kfhAiXxXP4VE.roa (raw, json)
Hash identifier: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=
Subject key identifier: C0:2A:DD:AD:E1:1E:9C:11:49:AF:8D:24:7E:10:22:5F:15:CF:E1:51
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019B7F830C2EBB839EDB5025E9707868A5EE
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wCrdreEenBFJr40kfhAiXxXP4VE.roa
Signing time: Fri 02 Jan 2026 16:20:53 +0000
ROA not before: Fri 02 Jan 2026 16:20:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203918
IP address blocks: 185.117.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:0c:2e:bb:83:9e:db:50:25:e9:70:78:68:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 16:20:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c02addade11e9c1149af8d247e10225f15cfe151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:4f:11:7a:94:6a:48:67:6a:13:eb:37:cb:
da:52:9b:fc:13:47:7d:17:f6:92:19:d6:33:0b:9d:
e9:be:8e:72:99:ae:63:ab:35:66:7f:e5:ff:3b:4c:
0d:d8:17:e1:d1:64:83:7c:99:5d:9a:5d:29:21:35:
ff:3a:20:9a:ce:cd:b6:ad:89:b0:ac:82:a1:ea:87:
e8:4f:9c:53:98:12:d1:25:d6:63:f7:0a:06:e2:de:
cc:c8:7f:ea:b7:e3:19:e7:5a:e3:6a:db:54:ce:a1:
a2:72:65:10:81:d4:fa:78:60:4e:d1:44:eb:de:b7:
48:42:cc:15:12:8c:82:45:e0:43:0f:08:f1:c1:29:
22:7e:b8:33:a7:be:7d:0b:b6:5c:95:34:bf:d0:38:
49:13:97:55:db:07:c1:ab:77:ca:f4:54:68:f2:a1:
2f:fe:a6:3e:06:2e:f9:e8:00:1a:a9:0c:7b:4d:86:
9f:d3:e7:bc:2b:5e:5a:0f:18:c6:b3:38:17:87:30:
f7:aa:b2:6f:2d:c9:b4:28:15:a6:16:f4:0f:b4:b5:
2a:fc:8f:08:8b:8b:0a:ac:87:f2:bb:dc:b7:a8:10:
da:b6:85:90:24:43:71:6d:db:54:0b:e0:89:ab:49:
90:14:f6:82:15:49:46:79:e8:11:86:77:f0:cf:e1:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:DD:AD:E1:1E:9C:11:49:AF:8D:24:7E:10:22:5F:15:CF:E1:51
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wCrdreEenBFJr40kfhAiXxXP4VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:88:7a:78:3a:df:f2:04:77:9a:73:93:0a:24:f7:0c:ab:93:
47:6a:13:f5:9b:4a:d2:74:7e:91:85:0c:53:74:60:05:5d:ab:
c0:35:96:72:5f:f1:ba:8b:55:23:8b:7a:b0:a8:f6:c8:82:8f:
a9:73:60:49:95:d4:d3:6d:56:4e:a5:75:39:4b:c5:44:92:6e:
6e:62:b3:7e:f7:58:49:c0:85:11:71:96:db:e1:d2:a3:a6:40:
6f:53:86:cd:b6:32:b2:8a:bb:ba:0b:bb:40:7a:47:3c:d1:9d:
0c:c6:c6:2a:82:ce:3d:c1:67:28:ad:a1:77:b3:ca:e3:73:93:
8e:72:87:cf:e0:63:b3:9d:3d:0b:a9:fc:ca:13:14:47:df:e9:
b7:9f:61:42:f7:18:bd:29:2c:1b:a5:27:43:9d:e6:9c:7f:d8:
60:07:b9:68:5b:bb:1c:91:d0:19:1d:12:6a:3f:f8:f4:ff:55:
9a:92:d8:ce:32:23:f6:eb:80:5e:67:36:26:e8:0f:90:fa:fc:
eb:d1:54:f8:bb:41:d7:47:01:97:ee:92:64:3b:27:81:ef:36:
78:df:53:c7:1f:76:b1:e4:a1:4d:fe:eb:5b:69:ef:33:ff:9a:
9b:f9:ce:28:cc:91:17:67:c7:92:e0:33:bd:74:cd:80:11:73:
6f:2f:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:22 2026 by rpki-client