This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa
File: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (raw, json)
Hash identifier: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=
Subject key identifier: 77:25:56:1E:EC:26:0B:03:5E:99:F8:40:DC:D1:03:6B:12:76:B1:DC
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019B78346BD60A9FE0E85B0119D8391C5692
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa
Signing time: Thu 01 Jan 2026 06:17:39 +0000
ROA not before: Thu 01 Jan 2026 06:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197981
IP address blocks: 185.204.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:6b:d6:0a:9f:e0:e8:5b:01:19:d8:39:1c:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jan 1 06:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7725561eec260b035e99f840dcd1036b1276b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:d8:b2:fe:7a:7f:be:14:8d:ee:ab:af:6f:
b1:dc:49:60:6c:d7:59:5a:97:66:c3:fc:77:b4:a5:
e8:62:7a:f8:ad:6a:9d:03:51:7c:4c:63:a8:09:83:
f9:35:69:08:15:d4:ad:b0:c0:c5:39:2b:0b:c1:57:
f0:58:cc:ab:1c:22:68:1d:b7:62:64:cd:48:10:fb:
cc:8b:2e:bd:12:6e:9e:7a:3b:3c:08:11:3f:e2:a6:
3f:f8:be:36:c6:93:db:21:e9:82:fe:01:d3:9c:86:
97:f5:ff:8d:02:9e:6a:c7:91:80:39:05:ec:7c:33:
96:7b:82:35:ae:f9:70:90:1c:4f:5f:ea:7c:09:42:
2b:29:63:7b:4e:c5:af:75:c8:ba:b7:19:2e:8d:24:
28:af:e1:aa:b9:47:a2:d8:b2:23:b4:cd:df:5f:61:
ae:08:0b:2a:ba:63:de:1e:25:0d:c5:13:c3:3a:43:
14:5d:e0:79:e2:01:d6:2d:61:dd:92:5a:6b:d1:49:
d1:51:91:cd:67:4c:e2:84:49:c2:e2:5d:86:15:28:
92:ae:c0:aa:e3:93:6d:65:7b:4d:e5:45:b5:8f:85:
c4:02:42:d7:a9:7f:88:df:5a:01:67:41:fe:77:81:
42:fc:c1:8c:d4:7a:00:69:bb:e9:37:28:e7:00:a3:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:56:1E:EC:26:0B:03:5E:99:F8:40:DC:D1:03:6B:12:76:B1:DC
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.40.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:fa:8e:83:be:c2:41:53:1f:92:6f:44:2c:72:ab:77:d6:c5:
af:9b:51:28:d2:e9:32:ac:bb:92:e9:a7:e0:16:30:70:3e:02:
8d:a6:46:7b:9f:70:ee:49:b1:e0:cc:13:d6:59:cd:23:22:ab:
80:c7:cc:0d:a8:5f:a1:d0:da:8d:d6:99:4f:8b:f7:15:be:c3:
a9:e2:67:a5:5b:8e:1b:10:24:b4:4b:31:90:b8:19:d9:a9:dc:
b0:ae:0e:9f:9b:c1:75:b3:b3:05:f4:b4:84:76:9c:44:d8:e1:
59:a4:25:27:c1:a1:7f:96:0a:f5:a0:c6:3a:d9:ab:f8:a8:6c:
e9:93:9b:5b:bd:2f:77:07:aa:17:2a:90:ec:42:55:87:fe:bd:
3e:07:d4:48:3a:11:30:4c:e4:fc:18:37:d7:4d:14:19:1b:51:
e5:b8:05:5a:13:c9:a1:c5:cc:4c:e9:46:c9:ef:db:79:ad:8c:
0e:7c:c4:30:b4:5d:cd:e4:a0:b2:c1:46:04:a0:87:f2:23:cf:
8a:f1:13:c7:5d:0d:99:5f:5f:46:60:c0:fe:62:7e:f0:56:62:
d2:0a:49:26:3e:7a:f1:0b:b4:b3:be:74:84:71:52:88:c4:ec:
6e:76:95:71:2e:c4:5b:a7:27:5a:01:71:05:c1:82:b4:cb:a4:
8f:24:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:14 2026 by rpki-client