This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/APfc6JNEU6PdULzFR5BxZMOlk6o.roa
File: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (raw, json)
Hash identifier: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=
Subject key identifier: 00:F7:DC:E8:93:44:53:A3:DD:50:BC:C5:47:90:71:64:C3:A5:93:AA
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019B7F138BE9354DA14CC3074B9405FF33F7
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/APfc6JNEU6PdULzFR5BxZMOlk6o.roa
Signing time: Fri 02 Jan 2026 14:19:06 +0000
ROA not before: Fri 02 Jan 2026 14:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207228
IP address blocks: 77.243.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:8b:e9:35:4d:a1:4c:c3:07:4b:94:05:ff:33:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 2 14:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00f7dce8934453a3dd50bcc547907164c3a593aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:84:d8:ed:99:4f:fc:ba:49:bb:76:98:d2:
58:42:89:47:d0:2e:3b:ed:86:fd:f5:9f:34:f6:85:
95:6f:0c:4a:99:5b:e3:00:a4:2b:5b:e3:06:3e:00:
ef:39:23:40:9d:bd:e9:a9:f6:84:92:7f:3d:6c:34:
7f:7d:9d:52:4e:a4:ed:1c:10:8d:4c:3d:07:52:b9:
6b:b9:42:dd:25:3e:4e:06:0e:e4:70:30:a2:cb:ce:
57:a3:34:5b:22:99:23:ad:64:08:13:40:7f:6a:5d:
35:48:49:06:62:70:77:1d:40:a8:fa:eb:d9:b0:54:
ce:5e:96:fa:fe:6e:41:71:ac:77:f5:f2:f2:f8:30:
a5:db:0d:aa:9e:16:e2:93:2f:aa:f5:98:ec:71:fd:
10:d3:62:9a:f9:e6:90:e1:54:d7:d2:1d:1b:10:f0:
5b:63:a8:69:6c:fd:23:59:2a:3e:bd:e6:ac:b3:b8:
5b:20:e5:5b:6d:0c:a0:78:5f:67:2a:99:64:f6:41:
30:bf:ec:db:fe:f0:d7:f1:88:b8:64:d9:c8:32:36:
6b:85:c5:f7:7d:8c:8d:78:db:e7:7e:49:56:b8:d9:
6d:7c:d1:2a:fe:96:96:df:0d:4f:2c:90:ea:0d:00:
65:5d:c8:65:eb:f9:11:3d:b2:bb:21:ed:2f:05:5a:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F7:DC:E8:93:44:53:A3:DD:50:BC:C5:47:90:71:64:C3:A5:93:AA
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/APfc6JNEU6PdULzFR5BxZMOlk6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.126.0/24
Signature Algorithm: sha256WithRSAEncryption
07:09:04:6c:49:9d:d8:de:75:ef:7d:02:61:20:ea:b1:a3:6b:
02:8d:7b:59:99:0e:f2:53:ad:88:63:9b:7a:06:7e:57:fe:d3:
ec:b3:cc:b3:89:dd:21:b5:61:76:24:2d:23:e7:2b:d7:86:8a:
7c:2e:ab:a3:ae:24:e9:e2:00:c0:07:da:10:36:d1:c4:f7:bc:
fc:4c:f1:d9:a1:e2:40:26:13:81:ad:f9:d9:40:ff:81:ee:f9:
55:cd:4c:e3:28:69:29:72:76:b0:15:5f:76:00:6a:10:e2:1c:
de:3a:36:6b:3a:36:18:60:51:ad:7a:ef:e1:25:29:b7:e1:72:
da:3b:42:e0:93:dd:ae:c7:b8:86:2a:4c:ce:19:23:34:c4:d2:
7e:f8:12:9e:48:56:a4:77:d8:69:8e:13:01:99:c6:c3:0d:c8:
ea:20:51:19:ec:23:e8:b2:fb:f0:41:ec:c8:5a:a4:ac:44:61:
63:38:e5:96:0f:f9:e5:0f:bc:5b:87:fb:59:92:a9:ee:08:a9:
56:70:e4:c3:44:2b:92:09:5c:77:d6:5c:cd:fd:2d:eb:26:24:
c7:7d:19:56:6b:70:5a:4d:12:bb:56:c5:ad:f6:24:df:d5:bc:
58:be:9e:ff:08:2d:28:78:65:0c:46:30:b2:2e:7c:38:92:56:
1a:81:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:20 2026 by rpki-client