This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/pt0vpyYLtzmKEkPORjUEbfLrK04.roa
File: pt0vpyYLtzmKEkPORjUEbfLrK04.roa (raw, json)
Hash identifier: aNfm1fqgMjkcUsOwar3uLSqc/xreSHXCvlrwdm4pI3s=
Subject key identifier: A6:DD:2F:A7:26:0B:B7:39:8A:12:43:CE:46:35:04:6D:F2:EB:2B:4E
Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Certificate serial: 019B797E3BEF81CC4644B0F96683C21AF583
Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/pt0vpyYLtzmKEkPORjUEbfLrK04.roa
Signing time: Thu 01 Jan 2026 12:17:54 +0000
ROA not before: Thu 01 Jan 2026 12:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198139
IP address blocks: 185.195.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:3b:ef:81:cc:46:44:b0:f9:66:83:c2:1a:f5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254
Validity
Not Before: Jan 1 12:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6dd2fa7260bb7398a1243ce4635046df2eb2b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:91:59:09:f3:ce:30:f7:df:04:14:80:1c:
66:8b:95:43:1c:2d:4d:44:cb:9b:bd:61:f4:f2:60:
80:73:5a:cd:60:13:2e:93:a8:86:d1:0b:04:9e:ce:
88:3b:34:48:8d:43:40:85:b9:84:ac:d2:4c:b2:df:
39:6e:74:1d:7c:8a:a7:d0:1d:0a:cd:ec:ce:c8:8c:
4b:d9:fa:19:8d:3d:61:ef:b6:ad:00:0a:55:50:fb:
d3:9d:76:04:2f:69:74:3a:3b:04:be:ad:01:32:de:
13:33:c3:75:7f:61:08:07:48:e9:64:66:43:bb:3d:
d3:7e:a3:b3:3b:22:98:97:c1:af:ae:c0:94:4c:11:
81:09:5b:21:c7:7e:7b:58:50:59:f0:08:86:7a:f6:
90:f0:f5:f6:7c:2c:5d:58:21:d2:93:ea:47:49:d4:
0c:94:91:80:c8:78:1e:f7:60:94:a0:52:f3:c3:a7:
e2:a6:bf:34:23:10:df:bf:cf:7a:2d:3e:29:e9:06:
f8:74:f7:61:c6:59:bd:b5:7f:7b:cd:59:a5:e2:b0:
d9:ca:50:aa:0e:fd:82:b5:8f:87:10:64:75:cd:e0:
db:61:67:bd:30:a3:4e:a6:db:16:cd:93:5a:c4:f5:
5f:f4:b2:fb:7a:56:25:58:c5:f7:94:cd:a8:79:5b:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:2F:A7:26:0B:B7:39:8A:12:43:CE:46:35:04:6D:F2:EB:2B:4E
X509v3 Authority Key Identifier:
keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/pt0vpyYLtzmKEkPORjUEbfLrK04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
15:90:37:fc:49:0c:51:3b:cb:15:dd:f2:10:25:c1:b9:d7:3f:
12:b0:d2:49:a4:1f:df:98:75:17:cb:ac:d2:af:41:3f:70:9e:
b2:bd:60:77:0d:b7:ab:de:18:c8:67:4c:ef:57:13:ff:fa:31:
18:12:2e:d1:f0:cb:3e:2d:58:e9:65:9f:9b:62:60:ed:d6:3f:
2e:f5:ea:e4:a7:1e:85:d2:b2:3e:06:be:6a:6e:e8:94:7d:6d:
b1:3a:3c:4a:82:9f:61:52:94:94:a4:66:a2:a0:2a:90:5e:ab:
15:5b:ba:4e:f9:6d:a4:1c:99:96:ed:7d:aa:9e:79:e6:e5:f5:
63:39:4e:b5:48:90:3e:ee:b4:e2:30:9c:03:8f:3d:e1:a9:ca:
2c:81:81:2c:98:11:8f:ab:75:9d:10:5f:e1:84:70:e0:80:8b:
2c:2f:4b:a0:56:ad:23:a8:ad:6a:41:19:95:e8:2d:a4:26:97:
90:3d:29:12:3e:1b:80:63:36:d0:aa:af:43:89:55:f4:43:8c:
04:43:ba:1a:2e:7c:99:fd:8a:7c:04:17:76:00:7a:7f:b2:1d:
24:37:13:fb:e4:b0:13:7e:e6:e2:92:61:93:ec:42:37:24:79:
42:c6:ed:eb:58:74:65:6e:ed:ef:e9:49:b2:dc:ec:c1:cf:09:
38:65:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:20 2026 by rpki-client