This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa
File: 987Zwgum7y9tKPJjuXS38mHP0Lw.roa (raw, json)
Hash identifier: ut78Qv7pqvcSD1j02UWSdM1alir0uFxN9Cz1xvUBXlM=
Subject key identifier: F7:CE:D9:C2:0B:A6:EF:2F:6D:28:F2:63:B9:74:B7:F2:61:CF:D0:BC
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019B775946B04D6302DE54B0532BF25F88BE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa
Signing time: Thu 01 Jan 2026 02:18:18 +0000
ROA not before: Thu 01 Jan 2026 02:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35664
IP address blocks: 46.102.108.0/24 maxlen: 24
94.176.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:46:b0:4d:63:02:de:54:b0:53:2b:f2:5f:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 02:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7ced9c20ba6ef2f6d28f263b974b7f261cfd0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:8b:22:30:f1:32:b7:b3:24:3e:44:4c:03:
30:30:10:3c:8a:5f:12:ca:77:f6:7d:47:fc:06:9a:
e4:cd:c3:36:e3:0c:bc:19:b9:ad:3b:0d:9c:4e:86:
bd:ef:d2:78:c1:47:e8:49:6c:25:87:ec:f4:fc:c1:
af:4d:8d:25:d8:d6:67:69:16:dc:0c:62:97:5c:61:
e7:e1:4f:02:6e:bd:32:da:b9:72:b5:87:8a:b7:98:
83:8a:89:0a:ce:9a:10:14:07:a4:2c:ab:4f:80:f3:
03:c1:1c:59:ff:6a:7f:be:cd:a1:7f:5e:f5:e0:71:
d1:0e:d6:d2:d9:0d:53:78:3b:2f:26:95:a6:ec:57:
b2:75:84:bd:eb:30:21:d6:b4:bd:b9:00:6b:60:5c:
b2:25:ec:a1:93:f2:d2:26:4a:95:2f:b5:60:36:4c:
7d:3c:3a:f8:75:ba:b5:75:5c:3a:fa:18:c2:3d:f5:
8a:e5:f1:bf:0c:1f:b1:43:ff:1a:52:9e:83:e7:a4:
3b:45:e1:4e:ee:a7:b6:59:38:27:12:ea:ff:8a:90:
33:71:2a:21:ff:d0:b0:99:c7:a2:e3:82:b1:1f:b5:
03:0c:eb:90:c2:c1:d3:34:78:d1:c3:eb:4e:9c:55:
5d:b8:d1:88:2c:ca:4c:e3:59:e3:18:28:8f:47:68:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:D9:C2:0B:A6:EF:2F:6D:28:F2:63:B9:74:B7:F2:61:CF:D0:BC
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.108.0/24
94.176.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ac:88:e5:53:15:92:f4:b0:64:fd:96:64:44:b8:cb:08:f9:
42:75:dc:41:32:25:1c:8e:0b:dd:4e:e3:40:9a:b0:b5:a8:55:
68:c0:66:7f:ca:7f:b0:60:bf:f9:db:30:42:5f:50:e8:ec:c0:
6f:3d:0a:6b:0c:7d:33:33:a9:c5:47:b6:1e:2c:c4:ac:f5:aa:
b5:3e:74:1b:73:38:34:91:65:91:d9:53:35:35:33:2a:8d:d1:
6f:b2:d6:e8:17:6c:e2:5c:75:52:3e:27:41:ab:58:bd:4e:64:
b7:c7:55:7f:f7:28:d9:86:25:cd:5e:1b:51:48:65:49:73:16:
24:3f:c1:52:ee:74:ed:54:23:8f:eb:d2:07:7e:2e:ec:0c:86:
1d:2c:6d:6e:b5:81:b0:a7:9a:5a:54:a6:48:b0:c6:ef:97:99:
b6:41:4a:64:c4:2a:24:c9:3d:d0:1d:6d:62:1a:16:c6:9a:e1:
ec:50:67:2b:96:25:1d:67:69:d7:d6:1d:ee:d5:0c:ea:1d:ba:
02:f1:e1:8f:fb:1d:4b:ab:23:10:f3:24:72:09:b0:7d:72:a4:
de:21:cc:90:b3:be:d8:ae:e7:53:04:40:22:0f:08:ba:ef:c8:
28:58:a7:17:4d:01:4c:84:7a:f9:eb:6f:d6:cf:1e:b9:d0:8a:
9c:c5:a0:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZt3WUawTWMC3lSwUyvyX4i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2NlZDljMjBiYTZlZjJmNmQyOGYyNjNiOTc0YjdmMjYxY2ZkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPeLIjDxMrezJD5ETAMwMBA8il8S
ynf2fUf8BprkzcM24wy8GbmtOw2cToa979J4wUfoSWwlh+z0/MGvTY0l2NZnaRbc
DGKXXGHn4U8Cbr0y2rlytYeKt5iDiokKzpoQFAekLKtPgPMDwRxZ/2p/vs2hf171
4HHRDtbS2Q1TeDsvJpWm7FeydYS96zAh1rS9uQBrYFyyJeyhk/LSJkqVL7VgNkx9
PDr4dbq1dVw6+hjCPfWK5fG/DB+xQ/8aUp6D56Q7ReFO7qe2WTgnEur/ipAzcSoh
/9Cwmcei44KxH7UDDOuQwsHTNHjRw+tOnFVduNGILMpM41njGCiPR2iCuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPfO2cILpu8vbSjyY7l0t/Jhz9C8MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzk4N1p3Z3VtN3k5dEtQSmp1WFMzOG1IUDBMdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuZmwD
BABesAUwDQYJKoZIhvcNAQELBQADggEBAFysiOVTFZL0sGT9lmREuMsI+UJ13EEy
JRyOC91O40CasLWoVWjAZn/Kf7Bgv/nbMEJfUOjswG89CmsMfTMzqcVHth4sxKz1
qrU+dBtzODSRZZHZUzU1MyqN0W+y1ugXbOJcdVI+J0GrWL1OZLfHVX/3KNmGJc1e
G1FIZUlzFiQ/wVLudO1UI4/r0gd+LuwMhh0sbW61gbCnmlpUpkiwxu+XmbZBSmTE
KiTJPdAdbWIaFsaa4exQZyuWJR1nadfWHe7VDOodugLx4Y/7HUurIxDzJHIJsH1y
pN4hzJCzvtiu51MEQCIPCLrvyChYpxdNAUyEevnrb9bPHrnQipzFoM4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:47 2026 by rpki-client