This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/m-SQr7hnhmE960j3hH0IgSeLpa0.roa
File: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (raw, json)
Hash identifier: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=
Subject key identifier: 9B:E4:90:AF:B8:67:86:61:3D:EB:48:F7:84:7D:08:81:27:8B:A5:AD
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 019B79EC8B9E7EDCD5DB2DE5218C0CF9F386
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/m-SQr7hnhmE960j3hH0IgSeLpa0.roa
Signing time: Thu 01 Jan 2026 14:18:23 +0000
ROA not before: Thu 01 Jan 2026 14:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209917
IP address blocks: 77.72.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:8b:9e:7e:dc:d5:db:2d:e5:21:8c:0c:f9:f3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 14:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9be490afb86786613deb48f7847d0881278ba5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:23:91:5b:63:ec:c1:9e:9f:c7:4c:f7:13:
59:6e:83:e6:33:d9:5f:21:96:cd:aa:05:f3:3f:b9:
d8:68:2b:09:4b:6c:a4:40:6e:5b:eb:84:fe:69:0c:
e8:09:9b:8f:42:4f:c5:82:a5:20:36:b7:9a:dd:ed:
22:dd:84:5c:73:5f:f4:c0:02:5a:ca:f8:0d:f4:ed:
cd:94:30:a4:0d:5b:83:f1:50:80:5e:24:d3:e7:b5:
40:6b:48:95:6e:60:1c:17:fb:5f:85:22:38:b0:86:
1c:44:47:7d:4f:79:86:3c:76:8f:26:c8:d4:51:30:
4d:64:7a:c9:70:5d:19:c4:15:e0:1b:26:45:3f:b2:
69:a6:3e:82:be:3b:28:63:a3:75:5e:c4:f7:fd:f6:
e6:68:66:ce:24:5b:23:2a:df:9e:5e:bc:c2:db:20:
09:d3:2f:79:83:12:f8:ec:7e:78:13:44:52:ed:c0:
4a:e4:f0:ff:2e:40:f3:cf:cb:f4:e4:de:ca:e4:07:
e8:52:41:78:a9:9b:31:ba:7f:9c:c1:e1:15:ae:de:
82:46:87:81:59:d2:a1:81:0b:fe:47:17:a2:28:c6:
03:1a:73:23:4d:ee:95:82:fc:03:dc:67:63:1e:8e:
cd:ea:e6:8b:57:5d:a4:26:36:fa:93:e0:37:84:d8:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:90:AF:B8:67:86:61:3D:EB:48:F7:84:7D:08:81:27:8B:A5:AD
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/m-SQr7hnhmE960j3hH0IgSeLpa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.220.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3e:c1:68:20:29:eb:09:48:50:64:85:72:0c:6f:94:e4:8e:
ac:a1:55:58:26:c9:49:24:f1:61:6f:a1:9d:ee:7c:a5:75:9c:
0b:b1:8a:f3:71:2e:09:19:bb:dc:eb:6f:98:22:89:dc:bc:8a:
78:ee:e0:64:8f:04:51:c6:d4:97:14:cf:1b:f7:08:68:9b:74:
b3:15:b7:15:6a:17:c4:7d:78:e0:53:f3:6b:27:f8:ce:7b:74:
a2:c0:66:a4:b6:96:c7:ba:2d:3f:10:74:98:6d:b3:28:ef:b4:
86:1d:bb:9c:69:8e:91:c5:11:61:4c:cc:a7:29:aa:de:83:a3:
6c:78:7b:0b:48:7b:c5:f0:4d:65:4a:a2:c1:47:b2:b1:74:f1:
71:2c:b2:7b:fe:86:62:e4:7f:c9:f7:b2:57:02:98:09:15:22:
88:ea:f3:ce:fd:ba:ac:86:be:af:6b:f3:fa:8f:26:98:6c:ac:
8f:c4:e2:90:c4:9d:cd:48:c1:df:08:28:20:62:a4:97:e7:c0:
41:33:d5:b5:3e:a8:f6:8d:6c:61:7a:ad:39:8b:5d:3c:68:ba:
59:80:e7:79:59:f4:52:0e:75:18:b1:3a:26:a8:47:20:4f:ef:
f3:15:aa:63:21:01:f1:da:9d:15:1e:63:da:72:7c:82:d7:17:
a7:57:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:38:18 2026 by rpki-client