This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/L7Hj1Bue0yLhcJbBMYLcaamXMEc.roa
File: L7Hj1Bue0yLhcJbBMYLcaamXMEc.roa (raw, json)
Hash identifier: fk7riasegUBl6ubSAdzmg/ylWLroozrR8JvmbKpFAIc=
Subject key identifier: 2F:B1:E3:D4:1B:9E:D3:22:E1:70:96:C1:31:82:DC:69:A9:97:30:47
Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Certificate serial: 019B7C7FE17B3FDD7A1719237428F5926C8A
Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/L7Hj1Bue0yLhcJbBMYLcaamXMEc.roa
Signing time: Fri 02 Jan 2026 02:18:34 +0000
ROA not before: Fri 02 Jan 2026 02:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57033
IP address blocks: 193.106.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:e1:7b:3f:dd:7a:17:19:23:74:28:f5:92:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5
Validity
Not Before: Jan 2 02:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb1e3d41b9ed322e17096c13182dc69a9973047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:0d:ee:e7:13:81:a1:58:25:04:21:96:80:
a0:50:da:f8:01:02:14:16:89:e7:f4:af:69:4f:3c:
bc:2a:15:b4:46:f4:94:7e:5c:c3:a9:ca:2f:4f:8c:
0e:4d:c9:70:d6:df:d5:a1:49:ed:c9:70:95:fc:e2:
e7:1b:64:45:1e:da:f9:f2:d3:1f:8d:77:b2:24:a2:
5a:bd:3c:00:74:96:cc:0f:5b:6c:83:45:81:f4:0f:
5e:ae:72:44:08:63:40:6c:13:72:fc:30:7e:3b:df:
72:fc:9e:78:85:f4:be:18:52:af:2b:13:ae:5d:48:
22:76:52:87:37:af:46:c5:5d:c4:87:13:d8:0c:30:
25:60:bd:64:c4:8c:97:5e:5b:a3:ea:27:89:8f:d5:
4d:e1:33:36:f5:d9:03:37:79:3a:bd:a8:bf:45:61:
be:b6:ee:03:6c:66:15:39:2a:36:92:16:5d:c8:7f:
bf:aa:79:a3:2f:9a:3e:31:4e:2e:90:cc:11:a9:e7:
ef:29:e1:38:fc:97:b7:a5:2b:35:b6:70:78:2e:8c:
21:96:3c:5f:02:e4:07:88:ac:b8:f9:95:c0:d9:e8:
38:b7:bb:69:da:47:a5:d3:05:dc:5b:94:7e:c4:62:
ab:0d:79:98:82:61:4a:7a:5a:ad:60:65:f6:32:71:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:E3:D4:1B:9E:D3:22:E1:70:96:C1:31:82:DC:69:A9:97:30:47
X509v3 Authority Key Identifier:
keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/L7Hj1Bue0yLhcJbBMYLcaamXMEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.66.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6d:11:c4:65:c2:e4:6e:5e:73:65:1b:01:cc:9e:58:df:7f:
d8:38:83:99:78:bf:fd:bd:ef:43:07:dd:42:4e:b8:80:37:b5:
1a:fc:e8:1d:c2:9c:83:a5:24:0d:12:39:15:4a:e3:b4:56:b5:
b1:19:95:c3:d3:d1:e6:5d:59:5d:e2:02:f4:4b:b2:3c:95:3f:
22:58:ae:a2:f6:cb:a8:8c:7f:db:24:49:ba:30:e8:a3:b3:ed:
3c:44:33:4f:f0:61:54:85:49:ea:63:b0:65:4f:67:85:dc:09:
1d:07:24:67:03:aa:c1:ef:0a:e5:d5:94:cb:6e:6e:72:c1:e3:
44:b6:81:3c:eb:63:fa:95:1e:c2:57:17:5c:d0:98:8a:75:5b:
2f:45:3a:3d:a6:f7:69:4c:bc:58:56:e2:f7:68:d6:60:09:70:
e5:1f:6e:2f:a5:1a:e3:dc:9a:94:e3:9b:b3:95:51:6d:91:ba:
6b:45:50:fd:22:ba:58:dd:8f:c4:d2:fe:be:4b:62:f7:1f:89:
df:9f:15:4d:0b:09:ee:c2:ed:14:5b:68:80:85:15:d0:36:e5:
a4:e7:f6:f5:2c:bb:b3:4b:a7:e1:4b:8b:af:9b:32:14:08:85:
fb:49:3e:a6:ef:a0:4c:39:86:e7:e7:3c:c5:35:41:08:60:44:
71:a0:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:59:51 2026 by rpki-client