This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa
File: ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa (raw, json)
Hash identifier: ia9NgZrL/DdllfSMu50SQNusjrApTyAFAcYBy1z+uwU=
Subject key identifier: 7A:34:F6:3B:CD:AB:01:9F:E2:B8:7C:E4:D9:3F:B6:1E:83:8B:FD:A7
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019B7C80C9E1809071958C66D8039593198D
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa
Signing time: Fri 02 Jan 2026 02:19:33 +0000
ROA not before: Fri 02 Jan 2026 02:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 996
IP address blocks: 217.77.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c9:e1:80:90:71:95:8c:66:d8:03:95:93:19:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 2 02:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a34f63bcdab019fe2b87ce4d93fb61e838bfda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:c3:1e:32:ab:ff:d4:fc:02:5d:f0:ef:3d:
84:8d:64:c6:f8:80:ed:4e:b1:df:e1:a8:7c:39:3c:
f3:c1:33:e1:d3:7c:b3:13:e0:91:3b:4e:39:90:85:
4b:21:9b:12:13:fe:d2:32:0b:85:b1:9b:68:14:8e:
d9:e4:60:c8:fd:17:66:c6:91:82:56:61:68:90:91:
5b:37:98:32:87:07:05:14:a1:07:be:dc:93:2b:c5:
6f:93:84:32:01:59:1a:48:2e:13:0e:a2:c2:9e:5b:
f2:f1:91:23:b9:87:f8:45:07:65:81:aa:e1:70:34:
1e:37:79:a0:30:44:42:10:6d:8b:48:c1:1e:68:69:
59:44:50:27:78:07:64:84:7a:bb:c6:fa:b7:d8:c2:
f5:77:0a:3d:46:65:cf:db:d9:b1:ba:09:d6:76:a8:
0e:76:2b:57:0a:91:f0:43:1e:65:2c:91:ec:44:ed:
e6:d0:f6:09:d4:b3:f4:d0:ff:84:15:b0:b3:8a:ab:
d1:fe:af:13:14:50:76:c9:76:7b:e4:2f:a1:4b:23:
02:aa:ba:94:1f:20:36:c8:81:ba:77:00:72:88:df:
19:be:a1:e0:ff:65:84:f4:df:73:8b:87:05:74:14:
12:44:fc:2c:b1:51:71:83:77:91:ec:38:8a:85:37:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:F6:3B:CD:AB:01:9F:E2:B8:7C:E4:D9:3F:B6:1E:83:8B:FD:A7
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.77.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c7:97:c3:ff:79:09:68:33:10:f1:12:09:70:2e:88:db:49:
7b:a5:16:70:da:03:72:84:02:92:67:cb:2c:79:d1:22:cd:82:
46:76:18:8f:c0:d0:ef:5a:cb:96:ec:0f:7d:39:8f:41:b3:e6:
d8:c0:f5:4e:cb:cf:fd:f1:34:3b:d5:ce:93:03:97:c8:f3:5a:
f4:ce:7a:9b:12:b4:51:de:f8:17:31:ee:70:72:74:a9:36:a0:
e1:2e:a2:52:8d:b0:6a:6f:93:8b:0e:1f:52:8b:cb:aa:c7:1a:
75:ed:2e:c4:ed:27:59:0d:ed:2a:18:6a:38:e2:e8:9f:b4:27:
7c:99:c9:39:d5:8d:69:66:4c:80:cf:28:cf:c9:06:a4:6a:e8:
09:ee:6c:06:a0:5c:b6:97:5e:5b:55:50:e2:db:3f:df:31:fd:
60:a5:87:1f:03:c4:d2:0f:73:00:4e:d1:17:c5:c8:f7:4d:34:
c8:f0:a2:7a:d7:a5:55:54:55:ec:0c:9e:d1:d8:ba:13:71:f3:
4f:64:a6:b6:32:d8:03:f4:46:11:3c:fa:94:be:27:39:6f:10:
aa:43:51:7f:f8:fa:36:cd:b9:d0:f3:91:09:ed:39:85:1d:80:
19:55:00:eb:4a:74:8c:a1:63:34:cb:5c:62:56:86:24:1e:65:
fa:1c:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:40 2026 by rpki-client