This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/BgYgNXUiTeu31n67bX2V90cAvTI.roa
File: BgYgNXUiTeu31n67bX2V90cAvTI.roa (raw, json)
Hash identifier: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=
Subject key identifier: 06:06:20:35:75:22:4D:EB:B7:D6:7E:BB:6D:7D:95:F7:47:00:BD:32
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 019B76EB2CF695E07C34F50B3DE1167981F1
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/BgYgNXUiTeu31n67bX2V90cAvTI.roa
Signing time: Thu 01 Jan 2026 00:18:02 +0000
ROA not before: Thu 01 Jan 2026 00:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 80.87.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:2c:f6:95:e0:7c:34:f5:0b:3d:e1:16:79:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 00:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0606203575224debb7d67ebb6d7d95f74700bd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:58:10:53:07:62:62:7a:e6:72:3b:34:17:
8a:fa:56:2d:3b:58:24:c9:0b:9a:e0:0f:32:8f:52:
a0:d3:69:0f:82:ea:52:03:23:c9:75:ec:84:07:b4:
3f:c6:95:5e:af:28:78:4c:f7:ed:bf:b3:ca:ed:20:
66:e8:57:48:df:40:c4:f1:09:40:2f:e8:b9:ab:39:
1a:de:d7:39:02:5e:96:f1:b1:d1:26:33:b5:4e:29:
b6:4f:14:41:a0:87:c1:90:93:a1:29:81:8b:98:ba:
92:b0:9b:07:57:b9:ed:e7:19:f0:e5:f5:4e:15:e2:
aa:f0:5e:f8:0e:6f:f2:12:e1:a7:c3:82:df:31:2d:
23:6a:5c:84:6a:cf:9b:b3:47:67:c8:e6:fc:af:4e:
2c:61:16:f9:63:ac:05:b2:ed:74:79:88:26:02:56:
5a:1a:e4:08:1d:4c:e2:47:4a:12:36:47:d7:8d:8a:
64:65:4b:f7:a9:1f:de:ae:09:cf:91:58:56:82:d5:
fc:37:33:f3:e7:2f:e5:e5:bb:21:c3:7f:3b:f2:82:
6f:61:43:6a:ec:3b:84:1a:d7:5b:f3:a9:b4:17:d2:
db:67:57:7e:e0:99:66:25:46:1d:b1:9c:77:25:c9:
a6:a1:c1:46:f8:62:f1:a1:91:80:e5:da:64:00:e5:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:20:35:75:22:4D:EB:B7:D6:7E:BB:6D:7D:95:F7:47:00:BD:32
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/BgYgNXUiTeu31n67bX2V90cAvTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.206.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1d:7e:a1:4b:35:fb:3b:95:86:d5:de:e8:79:37:8d:41:b8:
c8:bc:3a:b0:c7:fe:9c:9f:78:65:42:c1:a9:ac:a7:7d:00:94:
7b:f2:ec:11:f1:82:b2:00:d1:80:90:c2:27:cc:e9:5c:ba:9f:
5b:1c:de:0c:03:34:ce:c2:f1:9c:6f:c8:f2:fb:b4:23:3b:c7:
1c:90:f6:22:86:74:6b:48:90:b1:ec:33:51:e2:be:bc:70:f1:
d5:c8:5c:7d:d1:9f:fe:43:71:bb:60:e4:86:4b:d0:9f:03:c7:
4f:8d:c3:4a:8f:f4:5f:bc:83:93:cb:bd:a4:d0:08:ea:93:ac:
d3:6a:4e:b7:ae:82:76:0e:01:5f:a6:f0:96:fd:91:82:0e:f2:
d1:d7:11:89:85:9a:a9:88:20:fe:e8:92:8d:7f:8a:ad:31:5b:
e5:07:a7:8f:0d:fe:2d:af:6b:9d:49:61:00:31:5b:4e:eb:1e:
c8:8b:94:9e:5c:5d:ee:f5:8a:08:59:3a:6c:46:3d:f7:97:09:
5e:03:2b:bb:f6:3a:d9:7b:22:f6:71:5f:f6:91:11:b6:d0:9b:
95:fe:00:d1:79:42:69:c2:08:7c:ef:b1:d9:f5:70:59:2b:ec:
cb:d3:a4:39:16:73:bb:5c:83:db:19:fc:74:45:c4:c0:97:af:
42:d5:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:36 2026 by rpki-client