This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/7DTaYq58DszxL3typMJ_Z8sgHiw.roa
File: 7DTaYq58DszxL3typMJ_Z8sgHiw.roa (raw, json)
Hash identifier: QOb3N70dWy19+rmSZK4iBpA9tvZZyMZV5R3SBFHpjuA=
Subject key identifier: EC:34:DA:62:AE:7C:0E:CC:F1:2F:7B:72:A4:C2:7F:67:CB:20:1E:2C
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019BB79773434B9FDA16C11FC6FB5E543014
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/7DTaYq58DszxL3typMJ_Z8sgHiw.roa
Signing time: Tue 13 Jan 2026 13:41:54 +0000
ROA not before: Tue 13 Jan 2026 13:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.191.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b7:97:73:43:4b:9f:da:16:c1:1f:c6:fb:5e:54:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 13 13:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec34da62ae7c0eccf12f7b72a4c27f67cb201e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:d0:5c:fe:22:ad:6c:b4:23:f4:db:fb:c2:
b8:97:cd:e9:eb:22:80:3c:39:4d:b0:32:6b:25:43:
eb:a6:ee:c7:72:0f:86:23:7c:23:35:de:b0:f0:93:
26:d7:65:f0:29:4b:bf:b4:7d:a1:02:b4:3d:35:db:
fb:e3:17:86:66:c6:61:b7:a9:bd:36:f5:a3:e6:86:
0d:f8:d0:f9:87:54:28:ef:d9:5e:30:b7:b3:4d:6c:
b0:b4:3d:6a:1b:36:aa:d9:15:41:70:78:31:64:7f:
69:d0:cb:b8:e3:dd:3c:0f:7e:3b:f7:a9:a4:a6:db:
a3:2e:7d:3d:54:d3:25:87:42:93:bf:36:52:54:3b:
b3:66:d2:97:60:a6:d6:0d:48:f7:2e:9e:13:d9:ac:
73:c3:5e:a8:8b:d5:4b:68:0b:29:9b:ba:58:4e:7f:
53:60:10:34:a1:68:cc:39:86:20:bb:c5:47:ed:40:
e4:09:ab:dd:5f:c4:96:05:16:cd:56:ae:1b:28:a0:
f6:2e:fa:1b:5a:c6:04:4b:1a:6c:27:ca:d1:1f:5e:
b7:38:9e:db:6e:0d:20:2c:6e:f1:c8:ed:ad:99:00:
0b:d0:2f:e4:43:a2:84:89:e1:a3:d9:b6:b0:ee:4f:
9a:e6:74:e0:e0:74:b4:ec:5b:3c:63:b4:c4:59:27:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:DA:62:AE:7C:0E:CC:F1:2F:7B:72:A4:C2:7F:67:CB:20:1E:2C
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/7DTaYq58DszxL3typMJ_Z8sgHiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ba:d2:fb:db:9d:d9:ac:23:35:b5:df:bb:2f:10:55:5a:30:
05:0b:58:45:e2:08:1c:9c:30:9e:0e:13:90:1d:3b:59:69:3f:
61:f7:54:d3:4b:1c:cb:e1:57:0a:2e:50:60:c0:3d:16:c3:5d:
0b:9f:59:0d:d2:80:4a:4a:b4:00:49:67:99:0e:a8:7f:ad:19:
82:b4:fe:02:c5:66:85:91:f1:9a:78:6c:73:71:c0:a0:94:da:
12:89:84:b2:80:45:80:9c:b1:51:f9:e8:56:44:c5:4e:fb:97:
c5:22:e3:45:2b:b7:14:5c:bb:72:8d:07:e9:3d:45:89:bf:ad:
dc:38:99:90:a6:06:1b:a7:92:4d:d4:49:cc:37:e4:b3:5f:8f:
fa:e2:5c:62:a0:b7:e5:d5:1b:d8:db:a2:01:97:58:8e:e4:0b:
ac:76:30:6e:d1:b2:1e:c1:db:9d:9c:5e:f1:b8:43:c2:05:e7:
2b:4d:70:74:bc:c9:2f:9f:10:04:ce:2f:13:bb:19:23:fe:46:
f3:db:78:ff:0c:bb:f1:6c:80:b2:23:05:94:1f:58:38:5c:49:
6b:10:66:2c:be:c0:c3:61:fd:a8:ac:86:5e:37:b4:79:92:1b:
3e:1f:5e:fa:b1:99:6b:4f:aa:a7:a8:9a:23:8e:71:23:5d:7d:
9c:c2:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:05 2026 by rpki-client