This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa
File: RGMNPdrgdeaj_MoPn_xM4Fk747M.roa (raw, json)
Hash identifier: JMOWzOuHFSfds0/vg+9JuHFT7U/BE1oxV80LZLK3fOo=
Subject key identifier: 44:63:0D:3D:DA:E0:75:E6:A3:FC:CA:0F:9F:FC:4C:E0:59:3B:E3:B3
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019B4AC910DEEB0CA24C0EE506F6FA9E97D2
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa
Signing time: Tue 23 Dec 2025 10:37:29 +0000
ROA not before: Tue 23 Dec 2025 10:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 271791
IP address blocks: 82.86.104.0/21 maxlen: 21
82.86.104.0/24 maxlen: 24
82.86.105.0/24 maxlen: 24
82.86.106.0/24 maxlen: 24
82.86.107.0/24 maxlen: 24
82.86.108.0/24 maxlen: 24
82.86.109.0/24 maxlen: 24
82.86.110.0/24 maxlen: 24
82.86.111.0/24 maxlen: 24
82.86.168.0/21 maxlen: 21
82.86.168.0/24 maxlen: 24
82.86.169.0/24 maxlen: 24
82.86.170.0/24 maxlen: 24
82.86.171.0/24 maxlen: 24
82.86.172.0/24 maxlen: 24
82.86.173.0/24 maxlen: 24
82.86.174.0/24 maxlen: 24
82.86.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:c9:10:de:eb:0c:a2:4c:0e:e5:06:f6:fa:9e:97:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Dec 23 10:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44630d3ddae075e6a3fcca0f9ffc4ce0593be3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:ab:e3:a9:b3:8b:5d:fb:23:e9:bc:8b:74:
0f:c2:1b:de:5c:50:1b:0c:bb:bd:20:3a:07:33:ac:
2f:d9:6d:d8:27:36:d8:cd:19:b3:cb:d3:68:73:e9:
f5:b6:a2:9d:e3:a7:b6:02:64:e5:c0:cf:e7:41:71:
4b:e9:4f:10:bf:4a:15:26:36:85:72:3a:21:52:c2:
ca:79:30:13:84:50:b3:2d:74:65:05:bb:2a:93:03:
82:0b:90:75:b5:53:79:6b:66:2a:65:94:1f:ff:cd:
4e:4b:c4:20:70:50:f2:da:ec:4e:36:3b:95:36:82:
43:01:0e:a5:62:c0:5e:28:c3:2a:76:77:10:8d:d7:
5d:7b:6a:18:5d:18:a9:96:57:89:93:b4:c2:3d:0f:
55:72:fe:90:a7:15:0c:6b:bd:6f:f9:48:9e:30:d1:
c6:d2:db:55:01:e4:01:c2:49:4c:00:b7:a2:34:6b:
3b:cb:b9:b2:fd:bc:69:52:6e:de:5e:02:59:28:b0:
45:17:0e:4d:bc:77:a0:5d:67:36:ae:b1:99:61:96:
a4:39:91:8d:d1:94:22:eb:dd:bf:b1:d4:c5:95:21:
11:bf:77:b0:fd:f0:9d:45:72:03:9e:3a:9a:d4:53:
be:dc:17:4d:23:2f:2f:33:60:90:44:5b:e4:a2:fb:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:63:0D:3D:DA:E0:75:E6:A3:FC:CA:0F:9F:FC:4C:E0:59:3B:E3:B3
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/RGMNPdrgdeaj_MoPn_xM4Fk747M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.104.0/21
82.86.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:ea:77:83:42:da:34:31:97:85:56:aa:98:d5:98:e9:e3:ab:
4c:fb:5e:e8:47:b2:20:f6:a8:59:3e:bb:f5:c7:a3:27:a3:2b:
8f:32:85:1f:48:36:d8:09:27:d5:85:7f:2b:75:d7:9f:41:a6:
46:c8:d1:46:8d:d0:01:61:a7:3b:45:12:d9:db:2e:c9:27:42:
8f:0c:d2:e5:db:7e:f8:79:36:e3:25:a4:85:3e:48:24:88:57:
b0:59:10:8a:4f:aa:4c:1b:b9:a3:d4:b1:e4:09:9d:5f:91:b6:
b6:1e:4f:6f:e5:38:8d:b2:c2:4c:3b:fd:7b:16:29:2b:51:ae:
d9:87:d8:6d:90:98:5d:02:f7:46:bb:ef:b4:97:c5:a9:ba:94:
83:76:92:cd:c2:a8:b2:e7:2d:c2:d0:4b:78:ed:14:e6:b0:6a:
9d:da:5c:04:6c:c0:73:b0:53:63:8c:3a:81:4c:3a:49:5f:75:
22:cb:e4:36:3d:8f:a9:d4:cc:8c:57:49:36:bd:bc:21:24:21:
06:15:e1:20:e1:ef:d2:0b:30:2a:cd:dc:88:d2:c6:dd:43:7d:
ec:43:72:a5:6c:3c:5b:d5:2e:09:6e:38:da:c2:17:41:b4:cb:
24:9c:b4:10:8b:51:b3:70:a4:bb:4a:0a:a4:8b:91:d2:a3:62:
7b:b1:e1:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZtKyRDe6wyiTA7lBvb6npfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjUxMjIzMTAzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDYzMGQzZGRhZTA3NWU2YTNmY2NhMGY5ZmZjNGNlMDU5M2JlM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ber46mzi137I+m8i3QPwhveXFAb
DLu9IDoHM6wv2W3YJzbYzRmzy9Noc+n1tqKd46e2AmTlwM/nQXFL6U8Qv0oVJjaF
cjohUsLKeTAThFCzLXRlBbsqkwOCC5B1tVN5a2YqZZQf/81OS8QgcFDy2uxONjuV
NoJDAQ6lYsBeKMMqdncQjddde2oYXRiplleJk7TCPQ9Vcv6QpxUMa71v+UieMNHG
0ttVAeQBwklMALeiNGs7y7my/bxpUm7eXgJZKLBFFw5NvHegXWc2rrGZYZakOZGN
0ZQi692/sdTFlSERv3ew/fCdRXIDnjqa1FO+3BdNIy8vM2CQRFvkovs7zQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFERjDT3a4HXmo/zKD5/8TOBZO+OzMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvUkdNTlBkcmdkZWFqX01vUG5feE00Rms3NDdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUlZoAwQD
UlaoMA0GCSqGSIb3DQEBCwUAA4IBAQCj6neDQto0MZeFVqqY1Zjp46tM+17oR7Ig
9qhZPrv1x6MnoyuPMoUfSDbYCSfVhX8rddefQaZGyNFGjdABYac7RRLZ2y7JJ0KP
DNLl2374eTbjJaSFPkgkiFewWRCKT6pMG7mj1LHkCZ1fkba2Hk9v5TiNssJMO/17
FikrUa7Zh9htkJhdAvdGu++0l8WpupSDdpLNwqiy5y3C0Et47RTmsGqd2lwEbMBz
sFNjjDqBTDpJX3Uiy+Q2PY+p1MyMV0k2vbwhJCEGFeEg4e/SCzAqzdyI0sbdQ33s
Q3KlbDxb1S4JbjjawhdBtMsknLQQi1GzcKS7Sgqki5HSo2J7seEd
-----END CERTIFICATE-----
Generated at Sun Dec 28 07:40:54 2025 by rpki-client