This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa
File: 7ccus9d8ao2TYBIJE7U4ezc4ldM.roa (raw, json)
Hash identifier: xp5Zw6824KuZXiYqun6ANMBu3lMg4c+QxXyGPgHYlf8=
Subject key identifier: ED:C7:2E:B3:D7:7C:6A:8D:93:60:12:09:13:B5:38:7B:37:38:95:D3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C77A977AEEECAD76B70797109477AC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa
Signing time: Thu 01 Jan 2026 04:18:40 +0000
ROA not before: Thu 01 Jan 2026 04:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51393
IP address blocks: 195.136.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:7a:97:7a:ee:ec:ad:76:b7:07:97:10:94:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc72eb3d77c6a8d9360120913b5387b373895d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:cf:47:09:4b:e9:5d:2f:03:22:2b:c9:4e:
2f:3d:f1:41:dd:c1:4f:cd:cb:85:cd:f7:80:aa:38:
dc:8b:4b:f5:db:06:79:20:5f:ba:d1:42:d1:fc:8b:
a6:73:09:ea:93:d4:9a:94:9f:9c:7b:cf:8b:24:42:
48:a2:d1:43:b6:a8:4d:54:82:e3:76:5e:14:74:a0:
c3:28:e5:a6:8a:a8:31:a7:e6:b2:3d:f4:2f:6c:a6:
68:79:3b:ac:33:e6:1c:f9:84:5f:d9:34:4e:7d:11:
b7:76:4f:37:c9:67:86:b4:b6:1f:87:a5:ca:75:c2:
d9:d1:1e:ec:77:00:a1:3a:1a:22:1e:a6:5a:73:aa:
6b:9b:6a:1a:ba:00:83:3f:91:fc:9b:4d:a4:bb:45:
a7:4b:24:36:77:86:9b:e0:a9:25:5f:ab:55:06:af:
5a:ff:5e:1b:fd:b1:2e:52:ce:12:76:b4:8f:7a:b3:
90:4c:40:d0:d8:76:88:e2:89:45:3a:c0:d7:4d:8d:
ff:91:a0:36:6a:5b:14:25:29:d0:ea:de:77:cc:b5:
10:d6:59:dc:df:56:0a:4d:ae:1e:8d:60:5b:a1:9b:
2b:bc:5d:26:74:ae:af:31:a0:f3:91:aa:78:dc:e0:
fa:00:d3:0c:a6:a9:82:0d:2d:1f:58:4b:2d:c4:e3:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:2E:B3:D7:7C:6A:8D:93:60:12:09:13:B5:38:7B:37:38:95:D3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:3f:61:ed:f5:a8:b0:9d:65:39:5e:22:ba:bc:52:f7:fd:ce:
1a:d3:28:89:6f:8e:e8:44:df:fe:a3:c1:ba:c2:9b:02:0f:53:
70:78:14:4c:82:78:2e:17:34:75:3d:dd:c9:de:f8:7f:61:72:
4e:d7:5a:03:a0:80:61:f8:ca:d8:b9:23:85:1b:1d:df:c6:67:
9a:c3:1a:60:7f:f6:90:62:5b:1d:d6:d7:5d:e1:a8:a0:ec:f3:
c9:05:04:1a:0b:f0:7b:57:8c:71:3b:64:7b:76:e0:d5:b0:93:
cf:5f:6d:10:e6:4d:a7:5a:f9:62:86:9c:2c:20:9a:16:22:df:
3f:f8:00:11:7a:29:03:d3:e0:b6:78:03:40:54:c4:9a:35:d8:
da:2e:73:5e:03:7b:2f:74:c9:5d:e2:a0:4f:9e:06:a2:1c:10:
9c:54:d5:b7:d7:26:de:81:7a:c2:63:85:13:c4:08:ab:82:22:
16:8a:c1:92:9e:e5:98:f5:e9:ff:76:a6:af:7a:c0:1c:82:d8:
f2:a1:ff:e5:2c:40:46:d4:e7:5d:c7:a1:48:ae:5c:c6:5e:b1:
e9:b1:72:f5:48:5e:b0:2f:00:91:bb:e6:f6:80:92:04:20:4a:
d5:68:5d:ec:e6:ea:ad:d6:ab:85:b4:33:4b:7d:35:25:84:4b:
3e:8d:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:00 2026 by rpki-client