This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/7QOSRsUzrv4e8s57xIcce-8fjU0.roa
File: 7QOSRsUzrv4e8s57xIcce-8fjU0.roa (raw, json)
Hash identifier: 83cvs1mHf1GPrHopw/PC9gQSK7E7muVUfyT6Z0+/0KU=
Subject key identifier: ED:03:92:46:C5:33:AE:FE:1E:F2:CE:7B:C4:87:1C:7B:EF:1F:8D:4D
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019B78343E0D66D26892789CA9969A1EC298
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/7QOSRsUzrv4e8s57xIcce-8fjU0.roa
Signing time: Thu 01 Jan 2026 06:17:28 +0000
ROA not before: Thu 01 Jan 2026 06:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8562
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:3e:0d:66:d2:68:92:78:9c:a9:96:9a:1e:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 06:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed039246c533aefe1ef2ce7bc4871c7bef1f8d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:34:9a:a0:e0:fa:9b:8f:61:e6:40:32:64:
a2:05:1d:51:ca:8e:7c:4d:50:96:3e:e6:2a:ef:ba:
e0:fc:2b:ae:78:6e:e0:05:d0:81:87:98:1b:e8:0c:
4f:07:c6:31:6d:9b:6d:4e:f6:a3:a0:fc:75:9b:8d:
d0:d0:40:5d:b4:85:12:d9:07:c8:a6:7f:93:9a:14:
20:36:39:8f:f7:d1:24:5f:97:f7:77:af:41:0b:e9:
54:07:64:e6:3d:03:71:06:56:9e:d2:3c:57:3c:63:
6a:44:3e:89:42:52:ea:7a:e1:43:7f:f7:55:01:96:
72:25:c0:1d:cd:4f:aa:99:3b:0e:e5:a7:e0:51:27:
42:48:bc:83:c5:bd:f2:d0:14:e1:0f:7e:24:9a:0d:
26:40:dd:cc:4a:5f:54:a6:64:c7:e4:0f:30:95:2b:
50:fa:17:44:6e:ff:10:8a:b7:95:34:f7:01:60:86:
24:cf:23:b6:d8:e7:cb:20:eb:55:df:d2:8c:3b:3d:
6c:63:33:38:53:fb:a7:86:c6:20:2e:e5:fd:91:f6:
83:92:c7:a4:69:0e:09:dd:ec:a1:04:ba:b2:b1:3d:
c3:89:11:2b:78:e2:a8:20:00:21:f5:f3:dc:3b:b9:
fe:b9:3f:62:55:e1:7a:fa:ce:8c:e2:3b:36:4b:6d:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:92:46:C5:33:AE:FE:1E:F2:CE:7B:C4:87:1C:7B:EF:1F:8D:4D
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/7QOSRsUzrv4e8s57xIcce-8fjU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cb:3f:9c:cb:7c:f8:f1:5d:35:81:37:38:7c:5d:90:7f:ce:
26:b0:c8:56:aa:0d:1a:0d:50:a0:2b:be:0d:ca:67:3c:a5:55:
23:a3:b8:b6:ad:17:bc:c8:35:6f:f9:0f:46:42:34:91:98:f6:
04:7a:0f:c6:37:87:66:cd:82:32:bb:aa:48:42:c1:55:74:8b:
72:f8:9b:86:b1:d8:11:dd:27:17:90:6e:a6:95:b1:c0:ec:f6:
41:a3:cc:b3:4d:44:f8:00:7e:62:b3:ba:ba:aa:b7:2b:6a:23:
9e:da:a7:97:dd:a7:e4:b9:c4:ba:01:43:1d:18:76:af:d7:9a:
17:9b:3f:e4:2e:11:5f:e4:94:bb:7c:c0:4a:60:94:de:6a:33:
01:39:01:90:6c:71:4b:a4:eb:e1:04:a6:80:e8:d2:02:d9:12:
db:03:50:8b:e8:33:98:1d:68:16:25:91:cd:9b:17:4f:ce:ce:
c9:0a:d2:bf:b4:be:28:89:30:14:21:97:23:56:75:92:47:bf:
fe:3c:fe:43:6b:0f:fb:dd:c1:74:5d:f9:49:b8:28:eb:ef:f7:
47:7c:96:43:6c:ad:06:a7:90:2b:32:0f:0f:d6:72:96:cc:50:
cb:a8:fc:7d:64:fb:53:2e:b3:84:a8:89:89:09:d4:3b:86:cb:
1c:cb:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:42 2026 by rpki-client