This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/7CcrAdktIbmIWLIGRKt4XmzFkcg.roa
File: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (raw, json)
Hash identifier: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=
Subject key identifier: EC:27:2B:01:D9:2D:21:B9:88:58:B2:06:44:AB:78:5E:6C:C5:91:C8
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019B7AC8C04E085EC636D8F8C50E3F02EECE
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/7CcrAdktIbmIWLIGRKt4XmzFkcg.roa
Signing time: Thu 01 Jan 2026 18:18:55 +0000
ROA not before: Thu 01 Jan 2026 18:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 185.235.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:c0:4e:08:5e:c6:36:d8:f8:c5:0e:3f:02:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jan 1 18:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec272b01d92d21b98858b20644ab785e6cc591c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:ec:b7:c3:cb:cd:25:9d:28:5b:9e:e5:77:
fd:05:07:57:1d:22:63:e6:bc:7d:b2:67:f2:5d:50:
2b:1e:53:56:bf:89:2f:17:04:f0:80:f9:a8:e0:a2:
96:74:b8:83:95:11:a1:5d:69:a1:b7:9c:2d:65:64:
b4:ed:0a:62:1a:c6:ce:5f:81:db:90:0e:09:a1:f3:
82:41:d6:4e:95:b1:58:20:a1:07:fc:70:46:eb:1d:
6a:d2:c7:74:16:36:9e:45:35:96:37:e0:1e:db:ba:
15:ca:5a:99:33:fa:93:e3:7c:51:72:a5:2d:4d:41:
0b:d1:95:29:45:15:7c:c0:23:dd:72:83:be:7b:c2:
06:6c:76:68:06:eb:bd:11:c6:b3:b0:b6:b2:bb:3c:
94:af:2a:1a:0f:67:09:a3:f3:2a:2f:a8:78:cc:a2:
51:68:2e:01:8e:1d:f6:c8:3e:f8:10:a5:b0:20:ee:
ee:fd:a6:ec:56:b4:70:20:6b:94:70:d4:f3:43:3b:
1f:e1:72:16:a7:6c:25:f9:5c:3a:2f:24:1c:48:f6:
08:22:9e:cc:25:18:82:31:ea:5d:63:38:91:52:e8:
58:e2:67:93:d2:77:d4:e2:58:3e:03:dc:b7:8b:d2:
0f:0e:2b:7b:a4:3c:2b:02:83:2e:db:23:41:7c:7e:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:2B:01:D9:2D:21:B9:88:58:B2:06:44:AB:78:5E:6C:C5:91:C8
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/7CcrAdktIbmIWLIGRKt4XmzFkcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.198.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6a:8a:7a:a8:b6:c5:fa:5c:69:94:9f:dc:62:35:93:76:59:
55:da:8d:39:7c:8a:96:62:24:8e:22:a4:f3:4f:83:21:ea:5e:
e1:96:0e:05:24:b8:bc:e1:58:f2:58:dd:47:ea:2f:03:73:61:
a0:92:ed:80:1f:f4:f5:cf:46:18:df:39:cb:d7:84:a7:2e:1e:
5b:61:d0:29:24:2f:1e:d8:0c:a2:f7:2e:e1:6f:5b:09:f4:8c:
8d:52:52:77:a7:65:c1:e1:18:92:7b:3c:f7:1c:9b:c8:6e:dc:
4b:a8:38:dc:9e:1a:11:37:db:84:a5:53:a3:22:5c:41:8e:4d:
0e:af:2b:32:5e:3b:17:32:63:a2:b9:18:34:1f:d0:89:c8:11:
4d:86:8b:01:aa:6e:90:21:be:5f:4f:12:3a:3d:75:4a:3d:5f:
b1:d1:7b:fd:c6:41:0e:a5:16:bb:be:02:16:34:5b:86:cc:70:
d5:a4:3c:83:39:41:d7:10:a9:4b:f1:79:38:dc:a9:e0:6a:91:
ed:27:8b:3e:d7:e9:0d:69:49:e7:e2:8c:8a:91:46:47:7a:96:
b9:6d:87:45:c1:d5:8d:cb:cd:1b:46:70:9e:8a:05:c6:48:dd:
ec:87:9b:1c:83:2a:fa:97:03:b6:11:f4:bc:84:61:94:01:c9:
5f:83:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:49:40 2026 by rpki-client