This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3jVe3oWfFjGA0bFkAickXDhiBTk.roa
File: 3jVe3oWfFjGA0bFkAickXDhiBTk.roa (raw, json)
Hash identifier: /B1hbyZvITPy4r435troyRlK46+NdXGVMqL2hC0atuM=
Subject key identifier: DE:35:5E:DE:85:9F:16:31:80:D1:B1:64:02:27:24:5C:38:62:05:39
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 019BB3A773AD9B621493832D11C2B936FCCE
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3jVe3oWfFjGA0bFkAickXDhiBTk.roa
Signing time: Mon 12 Jan 2026 19:20:54 +0000
ROA not before: Mon 12 Jan 2026 19:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21460
IP address blocks: 195.98.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b3:a7:73:ad:9b:62:14:93:83:2d:11:c2:b9:36:fc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 12 19:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de355ede859f163180d1b1640227245c38620539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6b:c7:e0:bb:8c:42:8b:bb:34:20:83:bd:65:
88:f1:55:69:d6:af:8d:f1:0a:2a:5f:ba:94:ab:f7:
d1:5f:f7:90:46:67:90:e4:62:0b:4f:d0:1d:dc:da:
60:79:5a:9e:fa:d7:58:16:c5:b7:eb:c9:f4:df:2b:
fc:79:51:06:e3:52:67:14:6c:8d:9f:46:9f:40:a2:
e5:47:2f:50:d9:bd:eb:1e:53:77:be:14:f1:b3:58:
8c:3e:85:63:d4:f9:c7:be:b8:e9:77:35:4d:5d:f1:
f4:08:21:c5:1a:26:72:6b:a0:27:85:aa:28:73:14:
1c:6b:06:7f:4a:ed:0c:8a:3b:e1:cd:97:6c:b4:fe:
e1:7f:18:7b:e6:1e:70:e6:5a:07:06:50:b3:0e:27:
2e:1f:a8:19:40:cd:c3:c9:16:18:87:89:9a:fd:8a:
81:4b:92:72:be:bf:52:e3:83:e3:cb:97:a9:6c:16:
9e:e4:89:ac:7c:3c:13:35:18:d0:4c:84:52:54:a2:
f5:86:3f:53:b4:79:6b:06:bc:a6:b7:d3:5a:a1:a5:
2b:b2:2e:dc:c6:c2:31:eb:99:65:d3:82:82:40:68:
63:81:b9:71:1e:44:41:ec:43:02:7b:c3:be:e7:ec:
1b:0d:58:78:c7:8b:df:68:91:17:42:d3:8b:ff:ac:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:5E:DE:85:9F:16:31:80:D1:B1:64:02:27:24:5C:38:62:05:39
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/3jVe3oWfFjGA0bFkAickXDhiBTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ce:ab:f5:4c:a6:be:c3:c0:f9:64:c4:dc:19:b4:2a:cc:82:
73:5d:c8:33:f6:17:df:a5:46:a6:1f:54:1a:68:d3:e9:f2:27:
68:44:1d:17:71:cb:e6:8c:cf:74:2d:a8:77:8d:09:a8:76:a2:
71:cc:61:93:52:c2:2c:9e:64:ec:3f:e0:50:be:3c:e5:ad:28:
b4:21:fd:8e:5f:2e:21:d6:1f:98:bf:2c:53:5c:c7:29:bb:ee:
6e:57:d6:68:3a:82:40:ea:48:fb:d1:14:63:33:4a:f7:e3:4e:
e3:33:d0:1e:ae:31:75:07:8d:d4:8a:90:72:37:bd:8a:c1:b8:
9a:7a:29:5a:32:42:c1:4f:70:7f:c1:ca:ae:45:e4:52:a3:e4:
dc:ca:d7:81:b3:5f:07:6c:cb:c4:99:f9:2b:41:db:07:11:ed:
76:6d:35:48:ca:b8:a5:eb:dd:8a:63:b3:c2:9a:bc:ce:9e:f7:
89:a6:04:ff:78:d6:92:e4:cf:ff:79:b2:56:26:15:ec:e5:31:
a9:77:53:0f:a5:f8:db:e9:54:cc:95:8d:9a:7f:cd:42:f7:32:
1d:17:92:27:af:75:79:ed:79:24:35:c7:bb:dc:ae:82:a6:0f:
5c:18:33:c0:04:a7:41:ab:b3:36:b1:7d:51:00:88:9f:30:c8:
c6:ba:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:17:04 2026 by rpki-client