This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa
File: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (raw, json)
Hash identifier: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=
Subject key identifier: CF:3D:AE:6C:85:88:4F:6C:B7:2E:B3:E0:58:0F:96:BE:AF:3A:38:CB
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019B7AC7E2247854E7A6DB89532C915D54D1
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa
Signing time: Thu 01 Jan 2026 18:17:58 +0000
ROA not before: Thu 01 Jan 2026 18:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 185.94.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e2:24:78:54:e7:a6:db:89:53:2c:91:5d:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 18:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf3dae6c85884f6cb72eb3e0580f96beaf3a38cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:4d:a0:32:2f:aa:11:c1:48:d0:36:bb:4f:
3b:50:e4:09:87:9f:47:2b:9a:b0:2c:21:20:02:21:
40:69:ce:0e:c4:c1:3b:68:67:26:41:2c:41:00:28:
a4:6e:93:16:f1:45:24:b3:d8:b8:c8:5f:8a:f3:c6:
61:fb:4c:a2:5b:49:ce:1f:9b:da:e3:b6:6c:1b:2e:
2e:77:15:21:4f:31:56:81:ee:ce:35:c1:db:a9:07:
8b:2f:90:50:c7:b2:2f:45:59:c8:5b:b8:34:45:e6:
e6:19:25:c9:0e:c8:47:0b:35:56:b3:e6:a9:77:47:
05:a5:96:36:67:83:8c:82:31:1a:58:99:62:20:c7:
4b:e8:f1:83:00:2d:52:e8:58:e8:f6:3c:26:9f:08:
74:ce:d6:b9:91:a9:91:80:98:be:55:69:a3:71:a4:
ab:ad:f9:a6:3f:76:cc:46:e7:07:0e:b6:26:fb:94:
fc:b7:a1:0c:f3:0c:4e:46:f0:ab:05:f5:e8:c0:37:
81:2c:60:1c:20:ff:43:7a:c4:13:ec:9c:49:81:73:
09:c9:fa:a6:ee:74:74:ef:be:45:84:52:40:ac:b4:
c8:5c:d0:24:94:3b:cf:56:df:5e:7e:28:05:e0:42:
2a:12:81:44:4a:bc:ab:3e:23:a0:b7:b2:30:bb:46:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:AE:6C:85:88:4F:6C:B7:2E:B3:E0:58:0F:96:BE:AF:3A:38:CB
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a5:24:2b:1c:49:28:5e:66:01:22:78:be:07:b6:f1:7b:2d:
14:16:36:c1:2c:85:a2:98:a0:ed:fb:84:98:f8:de:64:f4:1b:
4c:cb:5d:e7:08:0a:ef:b6:bf:6c:21:94:99:de:2e:c4:6d:e8:
dd:c7:e3:67:a6:1c:23:4e:97:af:aa:e2:09:a4:41:f1:cb:62:
fc:c5:85:a5:26:c0:af:d0:b5:a7:c6:ba:51:e6:1f:21:a5:82:
94:a6:82:f7:bf:73:f6:b6:e5:f4:f9:9f:79:7f:e1:29:55:8a:
23:41:08:6f:5f:6b:55:f5:9d:c8:cd:49:f8:ee:35:38:07:31:
b4:90:2f:fe:5a:5c:2b:a0:f3:e8:31:37:e1:67:34:21:e1:ee:
27:e6:29:fa:6a:38:31:36:a5:84:52:28:61:1c:51:e6:7b:05:
3f:93:3f:45:77:38:f7:5b:8b:76:56:2a:e1:c6:d7:3c:1b:70:
99:9b:43:56:1c:00:38:da:7e:2b:e2:78:fe:53:a8:da:3c:81:
d4:fa:4d:1f:57:c3:c6:67:bd:9c:a2:9d:8d:f4:00:63:1d:8d:
ee:1d:20:73:f9:de:22:42:70:8a:2f:50:42:9a:12:8f:27:54:
94:ae:cf:c7:e2:de:89:a5:da:4a:1c:ea:5e:61:02:9e:77:8f:
43:78:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:14 2026 by rpki-client