This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa
File: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (raw, json)
Hash identifier: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=
Subject key identifier: EE:EA:8C:51:38:DF:E7:F7:51:66:D9:58:E5:6E:AE:23:25:49:20:1C
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019B76EB4A8947023B142215D3A92B86908E
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa
Signing time: Thu 01 Jan 2026 00:18:09 +0000
ROA not before: Thu 01 Jan 2026 00:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50198
IP address blocks: 193.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:4a:89:47:02:3b:14:22:15:d3:a9:2b:86:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jan 1 00:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeea8c5138dfe7f75166d958e56eae232549201c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:a4:6a:1a:9e:d7:ed:06:30:0d:8b:81:a8:
7d:17:b0:2a:98:dc:78:e6:48:8f:47:1a:3a:dd:5a:
d8:bd:30:c1:4f:ca:24:6d:3e:05:e4:60:f6:3b:c7:
17:63:02:36:87:ca:f7:0a:81:b0:89:82:c5:f6:82:
7d:84:0d:fc:31:33:9e:d5:d5:d0:4e:59:01:f6:2c:
ab:5e:3e:3c:eb:99:71:92:9e:7c:f7:3e:2d:85:b8:
fa:16:a1:e8:5c:92:8a:af:b8:15:2b:47:fc:36:7a:
71:b1:ec:0d:41:f2:4a:99:8e:32:fb:89:b2:b1:36:
33:64:70:21:92:44:99:b6:c1:30:e1:47:75:b8:18:
17:3d:cc:1e:ba:da:4e:76:7a:84:6c:eb:ad:1b:cd:
c8:5d:03:9a:cc:78:0f:ae:6f:ae:a0:c1:64:2a:05:
1f:36:4e:83:40:6a:6f:b6:b2:00:fa:03:c0:6f:1c:
71:da:b8:58:7a:94:5b:3c:73:9b:bd:de:b5:b6:0b:
5d:e1:80:db:ba:42:a9:ee:d5:af:70:3e:c8:17:6c:
61:2d:72:e7:54:e7:37:d4:0c:33:5a:43:b0:a7:df:
7f:41:44:a9:6b:fb:dd:55:77:7c:3e:e6:98:73:b3:
9e:3c:76:bc:fa:7c:b9:ec:93:c7:7a:ee:18:f1:28:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:8C:51:38:DF:E7:F7:51:66:D9:58:E5:6E:AE:23:25:49:20:1C
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7b:af:18:0b:c0:f1:54:46:66:d6:a1:dd:77:04:d3:1f:98:
48:69:de:f1:dc:ba:54:14:a0:19:cc:1d:64:05:11:f7:36:bc:
fd:31:a0:05:93:3e:fc:f1:1a:71:8c:42:75:92:0a:75:1a:f6:
3c:d0:00:f6:5c:9c:39:54:10:44:0a:ed:55:67:48:fa:a2:25:
d2:cc:e1:f2:be:84:4e:89:44:f5:a1:31:ef:ce:73:f4:e4:4e:
83:fe:25:8e:12:33:ac:b8:a7:bd:f4:9e:84:c0:13:6c:72:a8:
f5:75:fb:66:d4:9e:f9:af:b4:6b:c7:54:65:c8:49:b7:c8:a4:
b3:6a:55:d2:0f:eb:b5:67:d1:ab:44:3e:b5:bd:09:b2:c8:28:
f7:65:6d:38:1a:b9:83:f8:99:24:c0:38:ba:66:eb:52:03:9e:
10:ba:75:7d:56:32:ae:df:4b:11:c8:02:08:b7:f2:29:97:c6:
82:22:22:b3:d1:33:59:5d:ae:08:95:a8:17:d5:d6:7f:5e:1a:
bb:6b:34:13:22:cb:c9:6d:23:ce:4c:43:86:cc:9a:9b:48:1a:
03:20:93:f1:e3:22:01:76:c0:19:51:f8:a0:40:f1:0f:cf:51:
e5:c3:5e:a2:fa:59:a1:49:10:e5:91:53:cb:07:5c:9d:e7:7b:
f6:aa:ed:b2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt260qJRwI7FCIV06krhpCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWVhOGM1MTM4ZGZlN2Y3NTE2NmQ5NThlNTZlYWUyMzI1NDkyMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Rukahqe1+0GMA2Lgah9F7AqmNx4
5kiPRxo63VrYvTDBT8okbT4F5GD2O8cXYwI2h8r3CoGwiYLF9oJ9hA38MTOe1dXQ
TlkB9iyrXj4865lxkp589z4thbj6FqHoXJKKr7gVK0f8NnpxsewNQfJKmY4y+4my
sTYzZHAhkkSZtsEw4Ud1uBgXPcweutpOdnqEbOutG83IXQOazHgPrm+uoMFkKgUf
Nk6DQGpvtrIA+gPAbxxx2rhYepRbPHObvd61tgtd4YDbukKp7tWvcD7IF2xhLXLn
VOc31AwzWkOwp99/QUSpa/vdVXd8PuaYc7OePHa8+ny57JPHeu4Y8SgyMwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFO7qjFE43+f3UWbZWOVuriMlSSAcMB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xLzd1cU1VVGpmNV9kUlp0bFk1VzZ1SXlWSklCdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAxLWJjODI3N2U3NWUw
Yy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADByn8w
DQYJKoZIhvcNAQELBQADggEBAI97rxgLwPFURmbWod13BNMfmEhp3vHculQUoBnM
HWQFEfc2vP0xoAWTPvzxGnGMQnWSCnUa9jzQAPZcnDlUEEQK7VVnSPqiJdLM4fK+
hE6JRPWhMe/Oc/TkToP+JY4SM6y4p730noTAE2xyqPV1+2bUnvmvtGvHVGXISbfI
pLNqVdIP67Vn0atEPrW9CbLIKPdlbTgauYP4mSTAOLpm61IDnhC6dX1WMq7fSxHI
Agi38imXxoIiIrPRM1ldrgiVqBfV1n9eGrtrNBMiy8ltI85MQ4bMmptIGgMgk/Hj
IgF2wBlR+KBA8Q/PUeXDXqL6WaFJEOWRU8sHXJ3ne/aq7bI=
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:52:52 2026 by rpki-client