This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa
File: eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa (raw, json)
Hash identifier: jPd38RvXr6qVEzTNTT/Ft+c1V1MvmsnZDnEJANdwKuo=
Subject key identifier: 78:D1:E7:EA:18:94:54:EC:49:FB:F6:39:48:99:2D:3A:D7:BA:85:79
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019B7CEE37DC4689465801F24AAEDB5EBFD3
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa
Signing time: Fri 02 Jan 2026 04:19:05 +0000
ROA not before: Fri 02 Jan 2026 04:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202196
IP address blocks: 185.150.60.0/22 maxlen: 22
185.150.60.0/23 maxlen: 23
185.150.60.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
185.150.62.0/23 maxlen: 23
185.150.62.0/24 maxlen: 24
185.150.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:37:dc:46:89:46:58:01:f2:4a:ae:db:5e:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 2 04:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78d1e7ea189454ec49fbf63948992d3ad7ba8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:57:fc:46:1b:7e:01:95:08:be:9a:b1:e6:
74:c8:97:3b:a5:50:fd:05:80:50:75:1a:c7:e3:e2:
3b:bc:65:ac:6f:9a:db:57:46:a1:39:35:43:1d:db:
dd:de:59:25:29:4b:3b:7d:d0:50:3c:7d:15:c8:79:
6f:03:84:97:b2:c0:7b:f5:97:b5:0b:da:d2:38:ce:
cb:62:75:9a:2e:a9:a3:ac:19:f6:3b:60:de:36:5c:
c2:97:d1:94:fc:2e:0b:7d:ca:2e:44:ac:74:74:fb:
f7:bf:bd:51:2d:c0:38:55:7f:8c:54:6b:42:0c:94:
c5:d3:c7:ba:8d:12:d8:30:39:2c:44:20:5d:f7:ef:
97:65:84:f5:05:77:c4:26:20:79:22:30:bd:63:85:
2b:50:b0:3d:ce:a3:ba:00:3d:fb:ac:81:78:e2:29:
f6:84:f6:7b:ea:12:b6:48:2f:75:76:18:76:c5:ac:
59:f5:1c:22:08:61:b4:35:83:9c:8a:3e:a9:6c:d8:
ed:6f:37:19:a5:bd:96:fa:65:28:81:46:95:41:7d:
07:3a:db:39:3f:70:a1:83:1e:80:df:45:8f:c6:8e:
0e:4e:88:a1:93:b0:23:61:63:53:90:10:76:57:83:
6b:38:a4:e4:1f:7d:9e:d6:bb:2d:61:26:af:65:d8:
6f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:E7:EA:18:94:54:EC:49:FB:F6:39:48:99:2D:3A:D7:BA:85:79
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/eNHn6hiUVOxJ-_Y5SJktOte6hXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7f:c2:ca:36:9c:00:ca:e0:5a:9f:a9:da:53:bc:4a:06:cc:
df:cc:63:3b:ef:7e:c8:0c:b4:7e:16:2f:2b:82:41:8c:82:5f:
31:c0:1c:11:9a:e0:f9:dc:a5:51:ee:da:20:e2:ce:e7:97:96:
4b:ef:45:a6:e1:fd:6f:7e:2b:ee:df:ce:ca:af:33:59:c0:a4:
f5:d9:31:f1:2f:d3:2d:2f:d7:79:92:c8:65:ee:8c:35:8d:af:
69:fe:d7:be:23:7b:34:ec:a5:4a:08:4a:91:5c:b1:9f:ba:f9:
e5:32:ba:0a:b2:c8:59:90:b4:f9:b2:b2:fc:0f:83:f9:6b:d4:
86:ef:26:df:82:2b:a4:92:98:c0:e5:a5:2f:75:82:ab:0b:bd:
41:e3:80:c3:88:c5:ff:5b:53:95:3e:d5:31:eb:5a:d8:50:f6:
83:39:69:59:96:19:13:8a:8b:80:bf:0e:89:88:99:e7:10:76:
2c:4b:f3:5e:c8:9c:95:fe:73:2b:ca:4e:c2:b5:99:7d:e3:1c:
53:6c:dd:7c:18:41:c0:b3:ef:3b:57:49:7c:cd:08:e2:71:b5:
38:07:7a:2c:7f:c6:e9:e6:da:21:d0:f1:9b:80:b8:c4:f5:6c:
51:64:2f:f6:fb:ed:d9:a0:b1:26:60:89:d4:e6:1b:46:3b:3f:
08:a0:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:16:44 2026 by rpki-client