This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa
File: NpN7l3_hUP3xVFpljOuMEBlStvc.roa (raw, json)
Hash identifier: T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=
Subject key identifier: 36:93:7B:97:7F:E1:50:FD:F1:54:5A:65:8C:EB:8C:10:19:52:B6:F7
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019B7C129D099715BA2BF620967F7DCF6452
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa
Signing time: Fri 02 Jan 2026 00:19:13 +0000
ROA not before: Fri 02 Jan 2026 00:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57199
IP address blocks: 80.67.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:9d:09:97:15:ba:2b:f6:20:96:7f:7d:cf:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 00:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36937b977fe150fdf1545a658ceb8c101952b6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:87:6a:70:01:fa:ae:e4:31:41:73:db:93:
52:93:3e:76:3b:9b:0d:0b:ba:7c:91:b9:a1:1b:ab:
dd:89:38:a9:60:6a:c7:68:e2:56:f5:ac:24:7d:5c:
6f:ad:e7:0e:b2:13:5a:ce:e9:4b:1e:82:2e:1b:5c:
75:5d:86:78:80:a6:4e:7f:c7:23:fa:ca:ee:e6:b0:
07:75:60:09:84:3d:f8:2d:b2:18:9b:88:7f:48:d4:
62:9f:d0:a3:6e:5c:53:57:54:f2:9f:51:af:75:8a:
c5:dc:97:ea:db:02:ef:8b:3b:7c:d5:9c:83:f7:d9:
a5:b8:fd:81:5f:a9:91:df:a8:d9:e4:6e:50:0f:39:
86:d7:39:31:74:8f:da:84:f0:84:22:cb:2e:94:89:
af:38:94:29:db:23:41:11:71:75:ba:cd:ef:c1:14:
8c:bb:74:a9:08:7d:6b:8c:2a:e9:5a:16:fb:3c:8b:
6b:f8:b1:a6:32:fa:1e:d4:3e:d9:9d:47:f1:ec:98:
eb:70:75:7f:f0:32:fd:8b:16:24:26:21:22:39:90:
07:8c:50:2b:fb:9d:a7:3b:ec:2c:60:9f:4d:f7:eb:
fc:50:58:67:77:a0:24:c1:c6:cb:57:08:72:db:de:
2a:a5:88:62:50:bc:14:ab:7b:72:ca:4d:6b:46:76:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:7B:97:7F:E1:50:FD:F1:54:5A:65:8C:EB:8C:10:19:52:B6:F7
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.167.0/24
Signature Algorithm: sha256WithRSAEncryption
67:60:a4:1b:4a:71:95:86:fb:df:35:2c:9a:ff:5d:84:7a:cd:
bf:c7:05:89:08:9a:1c:79:d1:b7:4a:b9:65:bd:85:94:00:54:
ea:76:92:ce:b3:35:dd:0b:89:ca:12:13:54:03:9a:30:8b:76:
bb:78:2d:ae:60:4b:27:b3:4f:b0:37:e3:94:e3:ba:56:97:4a:
6e:d6:dd:bf:22:9b:9d:0e:44:9c:c2:6d:b6:5b:c2:b9:06:9d:
76:01:5a:e3:92:ec:32:07:90:7e:b6:f1:72:fa:1f:8f:bd:f9:
c1:48:1b:ad:34:47:ac:6a:d2:d2:98:37:ca:c8:a0:0e:f8:56:
0c:f8:30:94:1e:2e:fc:fd:da:7e:52:bf:a8:b6:8a:2d:55:c0:
bf:0d:98:dc:75:f2:6c:71:de:cc:db:c9:f3:aa:ea:f6:6b:ac:
c2:a2:b2:35:8f:a9:85:d7:6c:cf:50:74:c7:cb:50:ca:99:40:
c3:06:c1:44:82:e8:ac:de:40:7b:8e:6f:fd:21:89:d1:91:b5:
6f:19:4a:f1:57:2a:47:8d:cb:0d:62:85:2c:c5:60:18:45:4f:
79:12:2f:2e:f6:8c:2b:e6:d4:b1:d3:99:81:59:d8:8d:94:a0:
c1:0e:0f:a2:65:61:42:b2:1a:c0:5c:5a:72:23:ff:3d:8f:12:
7f:18:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:27 2026 by rpki-client