This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa
File: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (raw, json)
Hash identifier: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=
Subject key identifier: EC:6D:0D:08:45:B2:01:45:13:95:DE:9D:6E:1C:6C:A4:07:70:2A:EF
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 019B7E385984525B2BC581E0D7F77C192D8B
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa
Signing time: Fri 02 Jan 2026 10:19:40 +0000
ROA not before: Fri 02 Jan 2026 10:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 194.124.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:59:84:52:5b:2b:c5:81:e0:d7:f7:7c:19:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Jan 2 10:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec6d0d0845b201451395de9d6e1c6ca407702aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:d2:61:c5:96:17:f3:f8:17:fe:39:dc:94:
73:dd:6b:09:67:41:e3:3a:39:67:ab:fe:cd:02:c7:
94:9f:65:12:59:a0:e3:f1:24:fe:79:e0:d2:e5:5a:
93:b0:14:a5:ac:94:dc:bc:3c:0f:18:0c:a6:a4:6d:
93:f2:e0:6c:3d:28:e3:30:21:72:34:b2:82:9c:b2:
26:95:90:a3:84:bc:1a:aa:64:3a:da:cf:af:e4:23:
3e:43:c3:77:5b:8c:6f:17:a0:11:d3:40:a2:54:88:
7f:0a:09:87:24:08:aa:0f:70:26:da:4f:6a:a4:08:
06:01:d3:6e:d8:4a:88:de:9a:9f:4a:9a:84:80:ef:
c8:0c:1c:48:c9:d0:ae:8a:73:dd:fa:aa:50:d5:a1:
06:4f:c2:6c:80:6b:c3:17:50:3c:f8:e2:af:08:11:
3d:79:ff:22:68:14:68:25:21:b3:30:10:58:72:73:
1d:b2:0b:b8:b7:1f:dd:d9:7f:3e:50:3b:1c:64:12:
49:42:61:4a:ae:08:4d:28:22:70:28:c0:9c:40:8e:
ba:9e:9a:d8:83:12:67:40:15:bb:1d:10:38:9f:ed:
92:b1:a2:2d:44:e6:dc:3b:d4:ef:53:2d:8b:44:40:
02:52:05:58:9d:1b:ed:86:c3:38:d2:c7:77:ae:4e:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:0D:08:45:B2:01:45:13:95:DE:9D:6E:1C:6C:A4:07:70:2A:EF
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.142.0/23
Signature Algorithm: sha256WithRSAEncryption
85:22:50:39:1f:c6:f0:b3:46:33:b5:11:9e:6c:ed:2d:fd:da:
53:6f:b9:a9:bb:a7:20:a7:af:c4:a9:1c:1a:67:7c:b1:57:65:
e8:f6:e2:01:41:8d:b3:57:cd:97:7c:f5:5b:45:05:ee:ba:bc:
c2:dd:28:14:fa:79:4a:79:39:a8:9e:3f:43:5a:c7:f1:56:62:
86:4b:73:6c:84:81:94:6a:3f:56:9d:5b:74:9c:80:8b:b5:73:
d4:83:63:7c:49:5e:26:a3:f6:7a:3d:e2:75:92:a4:91:74:79:
d3:1a:c3:d8:40:5e:35:a2:74:f3:f2:78:28:bf:8c:35:13:95:
8f:f8:f4:7e:12:16:23:93:c0:79:68:d0:f2:e9:81:9d:bd:94:
7c:16:66:63:3a:bb:b9:0d:fa:49:35:15:19:f0:bb:a0:d7:2a:
87:aa:98:18:28:45:15:3e:cb:da:af:44:03:04:ea:1b:87:cb:
3d:cf:b3:ae:1b:fd:a2:30:80:6e:8c:c8:d2:2f:7e:9c:ee:bd:
ad:db:90:f8:6e:99:3d:7f:9a:70:04:c3:e5:67:14:82:0f:5e:
71:fd:72:83:24:b5:51:0f:81:6a:79:c3:c3:70:8b:54:2a:a8:
37:bf:22:25:a7:be:d3:7c:13:07:87:f4:1d:7a:e4:a2:7f:cc:
e2:ef:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:37 2026 by rpki-client