This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa
File: n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa (raw, json)
Hash identifier: htARq6EX3Sp+hmNjOwGerogqy143+hwQcapChVQW1G8=
Subject key identifier: 9F:BB:E1:BC:9F:4C:20:62:20:64:1B:E9:1B:08:61:9C:D4:A1:44:04
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019B7E3885C512EE1670EDF15D4A7C65C8DB
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa
Signing time: Fri 02 Jan 2026 10:19:52 +0000
ROA not before: Fri 02 Jan 2026 10:19:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47647
IP address blocks: 78.130.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:85:c5:12:ee:16:70:ed:f1:5d:4a:7c:65:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 10:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fbbe1bc9f4c206220641be91b08619cd4a14404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:c0:7a:46:04:fd:4c:dc:7d:34:8f:3c:5b:
ac:7a:76:d4:5b:27:5c:55:e6:c6:37:d8:43:52:9b:
bf:6b:c3:b9:30:0a:98:07:a3:6a:db:ce:da:9a:da:
bc:3a:47:6a:37:2f:c5:bd:3d:a0:3c:02:f2:49:6b:
a0:6a:b4:cb:bf:dc:38:18:c1:95:3c:68:4c:b3:0c:
33:7d:5f:f1:50:38:53:81:62:c0:60:b3:e9:da:88:
30:7a:41:43:b0:d5:59:65:fe:2c:60:08:8e:29:d3:
fb:1a:a7:3f:ec:3f:ad:98:d0:76:ca:98:7f:3f:ab:
3a:f8:58:86:a8:fd:dd:bf:56:f5:4c:55:5c:b8:cf:
94:a3:06:df:ae:7a:ed:91:7e:73:61:ec:00:59:40:
93:4b:75:1b:92:34:0a:02:75:1b:b6:32:c1:78:76:
6f:95:5a:40:ab:36:9b:f2:99:38:e8:c9:cb:6e:3d:
16:27:39:71:4b:fe:15:11:6a:2c:47:90:ea:77:24:
2d:c7:b7:89:ed:cb:34:df:ee:bf:33:cb:74:c4:e4:
13:47:20:74:bf:3f:4b:ef:8f:47:40:a0:89:7c:d7:
b3:52:d9:51:c0:4a:de:33:cb:db:c6:be:e7:eb:91:
8d:f6:7d:d0:e3:be:07:b0:f3:35:a6:66:36:65:6c:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:E1:BC:9F:4C:20:62:20:64:1B:E9:1B:08:61:9C:D4:A1:44:04
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.143.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c2:7a:ab:8c:fb:65:00:47:aa:44:d6:2d:3b:68:90:f9:07:
50:1a:bb:e0:6c:7f:77:41:a1:5a:b4:34:aa:1e:bb:19:1c:08:
d9:36:6e:d3:af:c3:9e:36:50:da:c7:f1:22:1b:7a:58:28:9c:
80:c4:3b:ce:9e:f1:97:d9:da:9e:c7:fb:22:cb:59:11:07:77:
0e:e5:8f:57:b9:ca:7c:ef:7d:48:e2:5e:c8:80:ea:bb:6c:3a:
46:f7:dd:83:b4:13:16:dd:d1:5e:3f:08:f4:ed:9a:8b:4f:1c:
59:e8:ca:7f:19:5b:8a:84:cb:7f:d9:3f:50:7c:af:a9:1b:58:
46:bb:98:54:49:e4:85:54:9d:16:1a:1f:12:0f:65:fb:8f:cc:
09:b3:c9:5a:4a:e4:cb:25:c9:ae:1f:ae:3c:47:7f:ba:42:b3:
10:9f:eb:59:b0:68:27:06:b2:09:9d:54:9a:bc:60:c3:3b:28:
6f:99:99:2c:dd:48:2c:85:24:0b:50:a2:11:7f:2f:2f:ab:24:
99:18:a4:7b:e4:9d:55:68:58:3a:fa:86:76:90:5a:a2:eb:39:
8c:6c:8c:19:87:7f:ba:69:aa:c6:e3:b6:44:ac:4b:72:fa:cf:
80:34:a5:69:c4:c8:a3:3c:10:1d:48:2c:98:11:60:20:db:63:
21:19:7d:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OIXFEu4WcO3xXUp8ZcjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmJiZTFiYzlmNGMyMDYyMjA2NDFiZTkxYjA4NjE5Y2Q0YTE0NDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzAekYE/UzcfTSPPFusenbUWydc
VebGN9hDUpu/a8O5MAqYB6Nq287amtq8OkdqNy/FvT2gPALySWugarTLv9w4GMGV
PGhMswwzfV/xUDhTgWLAYLPp2ogwekFDsNVZZf4sYAiOKdP7Gqc/7D+tmNB2yph/
P6s6+FiGqP3dv1b1TFVcuM+UowbfrnrtkX5zYewAWUCTS3UbkjQKAnUbtjLBeHZv
lVpAqzab8pk46MnLbj0WJzlxS/4VEWosR5DqdyQtx7eJ7cs03+6/M8t0xOQTRyB0
vz9L749HQKCJfNezUtlRwEreM8vbxr7n65GN9n3Q474HsPM1pmY2ZWzhlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+74byfTCBiIGQb6RsIYZzUoUQEMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvbjd2aHZKOU1JR0lnWkJ2cEd3aGhuTlNoUkFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToKPMA0G
CSqGSIb3DQEBCwUAA4IBAQBvwnqrjPtlAEeqRNYtO2iQ+QdQGrvgbH93QaFatDSq
HrsZHAjZNm7Tr8OeNlDax/EiG3pYKJyAxDvOnvGX2dqex/siy1kRB3cO5Y9Xucp8
731I4l7IgOq7bDpG992DtBMW3dFePwj07ZqLTxxZ6Mp/GVuKhMt/2T9QfK+pG1hG
u5hUSeSFVJ0WGh8SD2X7j8wJs8laSuTLJcmuH648R3+6QrMQn+tZsGgnBrIJnVSa
vGDDOyhvmZks3UgshSQLUKIRfy8vqySZGKR75J1VaFg6+oZ2kFqi6zmMbIwZh3+6
aarG47ZErEty+s+ANKVpxMijPBAdSCyYEWAg22MhGX28
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:01 2026 by rpki-client