This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa
File: 7JHxpyxpo02zkoPorIc6uG3BVuA.roa (raw, json)
Hash identifier: b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=
Subject key identifier: EC:91:F1:A7:2C:69:A3:4D:B3:92:83:E8:AC:87:3A:B8:6D:C1:56:E0
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019B7F82DC8D31F03732BB58D35C6F8CC0C1
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa
Signing time: Fri 02 Jan 2026 16:20:41 +0000
ROA not before: Fri 02 Jan 2026 16:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207906
IP address blocks: 195.189.184.0/23 maxlen: 24
195.189.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:dc:8d:31:f0:37:32:bb:58:d3:5c:6f:8c:c0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jan 2 16:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec91f1a72c69a34db39283e8ac873ab86dc156e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:b6:d8:87:6f:75:9f:b9:0a:a1:f3:40:43:
9b:e3:fe:f7:36:ce:3b:7a:ce:73:69:71:9c:95:46:
b0:55:aa:be:60:b2:cc:92:dc:e3:06:66:4b:3d:b8:
10:5e:17:23:86:de:36:6c:4b:cc:c3:d3:4e:0e:03:
a4:1f:f6:a1:14:e6:9c:32:3a:ea:b2:4e:22:c2:aa:
e0:e9:19:67:86:7b:01:b6:25:21:88:c9:cf:3d:ea:
46:2c:fa:b7:2e:b1:e0:50:1a:ae:0c:b9:c7:00:87:
f7:e1:48:15:94:be:4f:de:ef:e3:96:55:f9:22:86:
bd:50:5d:be:ee:44:af:7e:66:60:8d:d7:f3:7b:98:
2c:34:36:c7:5c:4b:c5:18:7b:eb:d8:f9:cc:d9:93:
a9:6c:78:56:55:22:f6:0f:b8:57:60:f4:1d:f2:30:
d8:4c:85:15:9d:81:ad:6f:c6:84:60:e8:ff:c2:67:
6a:e2:4b:3d:90:41:0c:84:46:04:2c:b7:f0:6b:98:
e4:12:7c:09:38:65:77:2e:f4:52:f2:be:5f:c9:20:
d3:6a:69:bd:2c:21:66:9a:0c:f0:84:12:4a:f2:30:
69:e8:9e:32:29:a8:7f:3f:bd:30:23:ab:64:57:31:
e6:3a:59:d2:39:43:7d:14:16:dd:e8:70:12:f4:07:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:F1:A7:2C:69:A3:4D:B3:92:83:E8:AC:87:3A:B8:6D:C1:56:E0
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.184.0/23
195.189.190.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ae:cf:fe:14:79:1d:96:4c:48:2f:50:e4:70:8f:77:b7:6d:
5b:e9:2a:23:c9:28:4b:9b:3b:96:62:57:a1:06:b8:c6:e2:d6:
d5:3a:2b:7d:12:b3:2e:09:30:27:a9:66:1d:f1:6b:4d:fe:5b:
ca:d6:fd:13:e3:70:fb:74:9e:2b:f7:5a:3a:b6:0c:69:b4:c5:
ae:1b:2c:aa:8f:bc:41:e5:5d:e6:d8:95:90:3a:4f:4a:92:da:
5c:37:00:07:70:61:42:7f:95:ff:09:8a:21:2d:bd:0d:b3:32:
59:b5:0d:77:e5:2d:90:eb:75:e5:41:37:25:34:0f:86:2b:57:
eb:43:77:34:3a:c9:42:0b:35:ee:96:33:ef:f8:a4:57:aa:a5:
cb:f4:00:5c:ff:f7:93:0e:29:5f:73:82:9a:03:56:18:9c:71:
3f:2c:1d:ef:35:9f:a6:fc:05:82:6e:87:0a:54:7d:d8:9a:4d:
93:d6:13:bc:cc:d4:c7:9b:9e:24:8c:b3:99:4c:76:f8:8a:d8:
20:8e:28:ca:7f:32:47:88:9e:8c:0c:de:e9:6d:16:2a:0a:e5:
30:a7:b2:63:ee:2e:0d:59:be:3f:f8:7a:a6:b1:f0:8d:3f:94:
d7:e8:c4:e5:80:44:b1:06:7e:c7:45:13:fb:d5:3c:5e:33:07:
a6:2c:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:45 2026 by rpki-client