This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa
File: foV-97aSM2J17L6HTgvN2wr-MCc.roa (raw, json)
Hash identifier: ziu79fnSFBF1I8pOYgL2UURHoDwOvi1qVp+GJ/gyfms=
Subject key identifier: 7E:85:7E:F7:B6:92:33:62:75:EC:BE:87:4E:0B:CD:DB:0A:FE:30:27
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019B7E39398E9F5AEEFD21D1227D7FEF9379
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa
Signing time: Fri 02 Jan 2026 10:20:37 +0000
ROA not before: Fri 02 Jan 2026 10:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48960
IP address blocks: 95.173.200.0/24 maxlen: 24
2a02:a48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:39:8e:9f:5a:ee:fd:21:d1:22:7d:7f:ef:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Jan 2 10:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e857ef7b692336275ecbe874e0bcddb0afe3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:ba:86:8a:d7:bf:3d:31:ae:44:48:bf:37:
cc:37:57:ae:64:01:b6:54:b7:aa:66:dc:64:0d:41:
a7:99:83:ca:d8:62:46:ff:5c:3c:e8:88:f4:89:e9:
43:b5:66:7a:7a:07:71:06:1c:41:6b:a3:f4:b6:6a:
37:74:52:bb:0a:c8:9d:19:ac:2f:1f:ff:fc:86:3c:
b2:d0:cb:52:69:6d:51:56:c3:55:eb:e4:e7:2d:4f:
3d:fd:76:cb:41:7e:c1:a2:f5:ac:b3:fa:dc:53:49:
60:76:08:85:bc:91:08:15:0e:29:93:97:62:63:13:
12:75:ca:f6:8f:0f:04:3c:8b:b0:09:7a:3a:12:20:
3b:07:a5:da:b4:f2:75:c8:52:b7:6c:2a:b3:8f:16:
68:39:64:fe:ac:b8:66:31:17:72:db:4b:bc:81:46:
0f:e0:a1:0f:c0:8a:7c:2c:94:0a:d7:96:be:85:97:
6d:93:de:94:ae:78:f4:40:7e:58:a5:2a:3e:2d:3e:
6e:0d:6f:9c:be:39:c8:ba:e1:31:8b:05:3f:27:11:
7c:22:13:96:89:a3:98:08:61:79:33:e8:94:a0:3a:
97:b6:8e:37:9e:bf:89:b5:f7:c4:b3:64:a7:e5:9e:
45:a1:f8:48:a7:88:d8:31:c0:0b:c2:17:12:b2:db:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:85:7E:F7:B6:92:33:62:75:EC:BE:87:4E:0B:CD:DB:0A:FE:30:27
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/foV-97aSM2J17L6HTgvN2wr-MCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0/24
IPv6:
2a02:a48::/32
Signature Algorithm: sha256WithRSAEncryption
40:3d:a5:42:e1:13:f1:94:72:9c:50:50:ad:38:3c:dd:96:51:
1e:26:ae:53:0a:2d:25:9e:19:bd:5f:5f:25:e1:42:2b:63:91:
ef:af:a1:35:d8:9d:c4:d5:8d:24:e2:2c:a3:33:48:18:6b:41:
5e:83:7c:7f:3e:25:52:38:df:3a:b9:29:73:00:02:9f:71:5b:
9b:7d:fe:55:e2:d7:41:b5:23:ba:28:81:21:ec:46:18:d8:7b:
ae:a3:e8:df:8e:9b:2f:39:e8:77:53:e2:f2:30:75:cf:79:3f:
f4:f6:b5:ff:a7:3a:1b:77:0e:89:51:9f:ab:6f:76:05:f1:dc:
b8:36:e7:66:2f:d7:3a:eb:14:bb:07:4b:66:d1:84:32:e0:d3:
23:8f:a8:73:17:49:dc:2c:2b:60:f8:69:1b:f3:31:ae:af:77:
f5:f8:09:68:6d:60:14:45:63:cc:c4:ac:63:56:3e:1b:46:e9:
fc:e9:5f:bc:2a:98:08:3f:97:33:c9:9a:5f:8f:f9:ee:69:fb:
c5:99:7e:6e:4e:16:2c:62:f7:b6:55:b6:69:f7:c6:79:e2:a1:
4d:05:22:2f:18:49:db:99:ed:21:e7:22:42:b8:c4:ae:ae:8a:
b2:64:59:20:be:79:fe:83:ff:98:81:2b:83:1f:24:6b:76:53:
d4:1c:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:33:51 2026 by rpki-client