This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e75qYMKQSjIrlFzW2E6USMj3uO4.roa
File: e75qYMKQSjIrlFzW2E6USMj3uO4.roa (raw, json)
Hash identifier: KdA+nn5s8rKZzxrXgurdWiX/Tr9GVbX0/w990nHYjG0=
Subject key identifier: 7B:BE:6A:60:C2:90:4A:32:2B:94:5C:D6:D8:4E:94:48:C8:F7:B8:EE
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019B7CEE6C403BC80BEB3710B65F88F1D0FE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e75qYMKQSjIrlFzW2E6USMj3uO4.roa
Signing time: Fri 02 Jan 2026 04:19:18 +0000
ROA not before: Fri 02 Jan 2026 04:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211615
IP address blocks: 79.172.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:6c:40:3b:c8:0b:eb:37:10:b6:5f:88:f1:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 04:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bbe6a60c2904a322b945cd6d84e9448c8f7b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:ed:56:12:df:a9:a4:59:85:4c:b9:e3:d5:
be:07:d3:77:87:34:7c:a0:98:da:a9:b8:30:83:db:
4a:3d:fa:06:90:5f:ff:1b:b0:b8:96:b0:e4:f7:ed:
d1:e3:9c:47:b3:7d:42:71:28:c2:c3:89:2e:c2:bb:
42:05:28:ae:48:02:96:e4:8b:ce:64:f3:e6:43:bf:
85:42:14:a8:be:ab:81:37:0a:f7:92:6b:1a:46:31:
0e:10:ce:1f:24:aa:03:cb:1e:d8:2e:6e:8f:5d:07:
47:1b:5d:a6:a9:58:22:b7:c6:b6:b2:69:5d:79:2b:
48:9a:b6:d0:33:d3:66:d2:9d:c9:57:e8:78:ad:2c:
a2:1a:1e:02:32:78:5d:23:92:18:9c:d3:64:ea:aa:
e8:92:37:5e:95:40:4f:b9:2c:e7:60:0a:49:9a:9b:
ce:c6:7c:51:29:9a:cf:cc:be:a0:fe:7f:57:9f:34:
ba:55:71:85:10:b1:c7:af:0b:ee:4e:df:93:3b:9f:
45:e9:b2:86:da:58:f4:03:b7:72:99:c8:db:38:b5:
ff:4f:d0:88:cf:32:89:7f:a2:e1:bf:11:65:8d:b7:
95:ba:2d:e9:b0:8f:e3:a1:72:9d:ae:d2:43:7e:3e:
59:7a:01:c7:53:8b:6b:6c:44:79:e0:64:de:95:67:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:6A:60:C2:90:4A:32:2B:94:5C:D6:D8:4E:94:48:C8:F7:B8:EE
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e75qYMKQSjIrlFzW2E6USMj3uO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:08:eb:75:a8:80:e3:d8:13:73:c4:1b:ec:dd:5e:49:6f:30:
85:07:01:55:66:66:42:42:1b:1c:26:a1:3e:41:63:17:5c:50:
c2:3e:37:5a:74:5b:8e:14:9a:e5:64:21:08:d7:ef:3d:08:66:
49:c8:33:c2:bd:c0:bf:fc:92:f1:56:fd:02:1e:27:c1:0c:2e:
64:a2:c5:14:91:3d:e4:cb:89:fa:9a:7a:36:2a:bd:f9:fb:e7:
79:07:40:d7:a1:f2:aa:4f:4f:ca:97:e0:ed:2e:d1:ec:eb:29:
9d:65:5e:f3:b7:76:01:96:d9:dd:58:2a:df:23:f6:33:bc:23:
b1:7f:50:0d:61:2a:ef:bf:32:3a:19:b8:81:50:91:68:46:86:
9c:5e:20:6c:9f:ea:9e:6a:0f:c8:90:48:30:37:2b:00:17:03:
40:70:f9:8d:3f:cb:20:08:b9:72:ae:5d:fa:66:08:02:ec:f2:
e9:a1:6a:bf:dc:b6:74:5d:61:d2:88:72:3d:aa:7c:3e:eb:41:
29:61:91:46:a6:7d:a7:54:eb:06:da:27:1a:b7:c0:bc:6c:83:
fe:99:0b:95:c7:10:df:2a:21:59:f1:97:05:e8:5f:83:d9:8b:
97:89:c2:d2:31:a6:8b:58:30:37:a8:4f:8f:0b:d7:40:8a:fe:
cd:b5:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:45 2026 by rpki-client