This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa
File: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (raw, json)
Hash identifier: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=
Subject key identifier: F1:AC:D4:20:D0:1D:0E:B2:A3:48:E3:20:CB:E2:4F:39:3E:F7:5D:13
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019B79EBF8051D143C4BCFC63B9155D6D5CC
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa
Signing time: Thu 01 Jan 2026 14:17:46 +0000
ROA not before: Thu 01 Jan 2026 14:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60337
IP address blocks: 87.252.240.0/24 maxlen: 24
93.125.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:f8:05:1d:14:3c:4b:cf:c6:3b:91:55:d6:d5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1acd420d01d0eb2a348e320cbe24f393ef75d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:a9:2f:c9:f9:15:2e:15:07:58:39:38:94:
9b:25:66:2e:60:1c:73:1b:02:c9:36:cc:9f:65:85:
45:c2:a8:1f:cd:ef:45:09:b4:17:b1:a1:2f:90:74:
21:b8:e0:0d:c7:fd:09:ce:67:33:da:9e:80:3e:0a:
8e:9c:ac:79:e1:b6:6d:25:f9:f2:f2:15:2b:e8:3a:
7d:16:ec:4d:3e:25:db:9e:26:31:36:f2:61:57:e5:
7a:9a:9e:66:ea:ae:08:f6:23:02:2a:f0:a0:af:17:
d1:14:99:54:5b:e1:8f:c7:e2:f6:0a:4c:3d:86:08:
d9:f9:4b:09:19:9c:e3:a7:ef:72:98:33:89:3a:82:
1d:70:cb:80:37:18:db:33:12:fa:8a:8c:27:d9:f8:
40:6d:22:fb:f2:18:d8:aa:7c:16:97:f4:72:da:0e:
31:8e:93:a9:5b:b0:26:53:1f:2a:06:68:d9:3c:4e:
95:03:9c:80:52:6d:d4:db:b6:41:ab:80:79:d6:38:
e6:0d:4e:08:af:5a:ef:c3:5a:0d:b6:a6:ab:70:a1:
0e:12:d4:e1:86:f4:d5:fe:f2:4b:e6:17:82:e1:26:
ce:f8:c2:1f:05:88:73:a9:04:59:da:ea:d6:37:29:
7d:64:95:88:2f:7c:81:2c:c1:1e:3d:96:64:d1:00:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:D4:20:D0:1D:0E:B2:A3:48:E3:20:CB:E2:4F:39:3E:F7:5D:13
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.240.0/24
93.125.19.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:37:2b:67:b6:06:1c:5f:05:52:53:2b:82:aa:5b:dc:c2:
6f:f3:12:04:d7:2f:75:6b:01:c9:a8:c0:69:75:6d:f5:a9:07:
23:0b:03:35:a2:76:03:fc:07:16:49:a7:c3:ef:96:bd:75:d0:
b6:7e:84:0d:69:78:b8:8d:cc:11:88:c0:2f:d4:5f:8f:fe:95:
bc:0f:35:29:32:e7:69:ef:e8:f1:05:f3:d2:53:f6:e7:ec:a8:
a6:34:26:cc:32:93:2d:64:5c:fb:37:c8:7b:43:fc:be:49:e1:
73:a7:89:d9:0c:3d:29:5c:34:0a:19:03:3c:b7:d7:5e:68:67:
91:35:79:46:28:5b:2c:d6:4f:15:94:e4:df:48:84:eb:d2:e9:
77:a3:93:ed:59:f1:bd:12:6a:46:53:5f:92:ad:33:22:0d:9e:
2d:c5:ac:ec:41:0c:f6:f2:8d:ac:d4:5c:5f:bc:bf:f8:bb:8b:
51:57:9c:6c:fc:17:66:d9:20:8a:a9:9c:05:bc:fc:0f:cb:1a:
db:e5:56:28:9d:b6:94:35:ee:f6:f1:b9:67:5d:44:2f:8f:e9:
6c:0c:e3:74:b5:3d:8a:75:a9:6f:9f:b8:b6:4c:1a:95:80:07:
ef:6d:ef:ca:2a:e9:39:99:90:70:a3:7a:26:d1:12:7a:aa:11:
f6:61:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:27 2026 by rpki-client