This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/AnJCTd7AgRSldDmx71BvWIQlsjc.roa
File: AnJCTd7AgRSldDmx71BvWIQlsjc.roa (raw, json)
Hash identifier: VFBhkSbr4RUTAOsdzP+CuaTF7y4EenVQsmWrwQQVwpM=
Subject key identifier: 02:72:42:4D:DE:C0:81:14:A5:74:39:B1:EF:50:6F:58:84:25:B2:37
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019B7B36988870B13CDF3D7D0BB5789BAD48
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/AnJCTd7AgRSldDmx71BvWIQlsjc.roa
Signing time: Thu 01 Jan 2026 20:18:54 +0000
ROA not before: Thu 01 Jan 2026 20:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62081
IP address blocks: 185.165.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:98:88:70:b1:3c:df:3d:7d:0b:b5:78:9b:ad:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 20:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0272424ddec08114a57439b1ef506f588425b237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:ef:3b:e6:67:4b:a4:95:44:84:23:ba:a7:
79:09:6a:70:ed:6e:8d:ca:25:c5:45:c5:6c:20:9d:
b2:55:76:98:37:50:b3:70:6b:47:7f:23:e8:15:4d:
55:84:f4:59:45:85:d3:2b:b0:fe:a5:56:f3:ef:1e:
9e:e7:aa:3c:33:0a:1c:4a:60:c7:8b:d3:53:6e:d8:
2e:a6:d9:e8:3a:fd:a2:09:79:a5:dc:b7:ea:0b:03:
b5:99:0d:9c:2a:e0:f9:e1:34:96:c9:ff:85:a4:2a:
5d:12:25:03:16:45:ad:60:16:61:bb:a2:9d:ce:b6:
6c:35:ba:06:60:8a:19:d0:25:73:3a:50:7d:6e:4b:
cf:53:9f:89:c0:23:2b:0d:44:cd:3b:8f:ea:f4:8a:
a1:8f:fe:d1:2f:9f:50:58:52:77:72:d5:cb:93:f0:
7b:54:98:70:4b:e9:12:15:42:ec:78:42:61:dc:88:
96:11:11:ae:99:2b:c4:77:55:b2:09:be:c6:b8:58:
15:82:d4:d8:25:a9:ae:5b:1c:b1:c4:c5:c8:a3:e8:
7f:b2:91:63:b9:00:4b:49:a0:ad:52:2f:37:2b:4a:
b4:26:ee:74:96:8e:90:52:d6:03:b1:6f:8f:37:ca:
a8:23:44:22:f8:13:67:c9:11:a2:8b:6f:e9:66:dd:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:42:4D:DE:C0:81:14:A5:74:39:B1:EF:50:6F:58:84:25:B2:37
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/AnJCTd7AgRSldDmx71BvWIQlsjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.149.0/24
Signature Algorithm: sha256WithRSAEncryption
74:40:7c:3d:19:58:f6:96:a0:0c:5d:89:06:a6:a8:5e:00:61:
9b:35:d7:f6:07:6f:ae:9c:7e:13:32:ed:ce:8b:3d:89:32:2b:
8c:4d:57:53:c3:7f:06:98:2a:b4:ea:24:be:17:cb:f6:39:53:
a6:cc:e7:4e:26:bb:dd:cc:84:89:1e:c5:ad:ac:65:cf:2f:22:
a0:c0:72:33:3f:bb:d3:c7:9b:bf:84:34:73:35:37:de:32:21:
ee:e3:56:fc:9f:42:e6:44:9f:78:a9:93:da:48:6f:3f:3f:4d:
04:55:6a:d4:3b:1f:11:c2:5b:9c:8d:b5:19:89:c2:8f:d2:b0:
4f:a9:29:7a:16:1a:e1:00:c6:c9:30:ca:f1:f7:42:8a:bf:b3:
81:c1:35:a0:b9:5a:bd:f0:13:c9:18:e3:6a:16:4a:df:53:01:
96:95:2e:6c:04:e1:71:81:f7:e0:1e:19:0a:c6:aa:ed:6a:5c:
4c:2a:53:20:79:18:2b:30:f7:34:ce:9b:bf:ac:bd:35:0d:51:
ca:92:45:49:6f:fa:d2:70:df:c5:e3:61:0b:eb:0b:d8:a0:ac:
4a:be:33:21:31:47:5b:ce:61:61:c3:60:6c:f5:68:60:96:ad:
ff:49:d0:31:26:8d:40:89:ba:21:6f:66:33:fe:46:e3:5b:66:
7c:f0:70:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NpiIcLE83z19C7V4m61IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx
NmMzMmEwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjcyNDI0ZGRlYzA4MTE0YTU3NDM5YjFlZjUwNmY1ODg0MjViMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrPvO+ZnS6SVRIQjuqd5CWpw7W6N
yiXFRcVsIJ2yVXaYN1CzcGtHfyPoFU1VhPRZRYXTK7D+pVbz7x6e56o8MwocSmDH
i9NTbtguptnoOv2iCXml3LfqCwO1mQ2cKuD54TSWyf+FpCpdEiUDFkWtYBZhu6Kd
zrZsNboGYIoZ0CVzOlB9bkvPU5+JwCMrDUTNO4/q9Iqhj/7RL59QWFJ3ctXLk/B7
VJhwS+kSFULseEJh3IiWERGumSvEd1WyCb7GuFgVgtTYJamuWxyxxMXIo+h/spFj
uQBLSaCtUi83K0q0Ju50lo6QUtYDsW+PN8qoI0Qi+BNnyRGii2/pZt3ZjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJyQk3ewIEUpXQ5se9Qb1iEJbI3MB8GA1UdIwQY
MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvQW5KQ1RkN0FnUlNsZERteDcxQnZXSVFsc2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaWVMA0G
CSqGSIb3DQEBCwUAA4IBAQB0QHw9GVj2lqAMXYkGpqheAGGbNdf2B2+unH4TMu3O
iz2JMiuMTVdTw38GmCq06iS+F8v2OVOmzOdOJrvdzISJHsWtrGXPLyKgwHIzP7vT
x5u/hDRzNTfeMiHu41b8n0LmRJ94qZPaSG8/P00EVWrUOx8RwlucjbUZicKP0rBP
qSl6FhrhAMbJMMrx90KKv7OBwTWguVq98BPJGONqFkrfUwGWlS5sBOFxgffgHhkK
xqrtalxMKlMgeRgrMPc0zpu/rL01DVHKkkVJb/rScN/F42EL6wvYoKxKvjMhMUdb
zmFhw2Bs9Whglq3/SdAxJo1Aibohb2Yz/kbjW2Z88HCP
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:14:12 2026 by rpki-client