This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/j8jqNDQZMqmi7QKl4s3v-vmRycc.roa
File: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (raw, json)
Hash identifier: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=
Subject key identifier: 8F:C8:EA:34:34:19:32:A9:A2:ED:02:A5:E2:CD:EF:FA:F9:91:C9:C7
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019B79EBF17DFC7C515AEA1F5925465B3343
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/j8jqNDQZMqmi7QKl4s3v-vmRycc.roa
Signing time: Thu 01 Jan 2026 14:17:44 +0000
ROA not before: Thu 01 Jan 2026 14:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12406
IP address blocks: 178.172.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:f1:7d:fc:7c:51:5a:ea:1f:59:25:46:5b:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fc8ea34341932a9a2ed02a5e2cdeffaf991c9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:24:15:46:ed:3f:23:87:7b:53:89:87:17:67:
00:79:6c:39:22:6d:c1:e4:e6:2a:c2:e6:a4:68:5f:
fe:96:57:8a:0b:f3:57:77:25:8f:d4:b4:92:11:b2:
4a:3f:a7:8b:fa:24:d8:3b:eb:ab:46:31:09:9b:ca:
a7:a4:a3:14:d0:7c:43:bb:e6:27:2d:ac:d5:1c:ed:
ec:9a:9c:84:8f:a3:88:49:ff:3e:6e:3f:7b:bc:01:
76:d6:5b:5c:87:74:8d:96:96:c6:bc:d7:dd:bc:a8:
b4:23:94:f2:73:c3:05:05:45:3c:18:e2:3f:15:54:
cc:0f:1a:f2:6d:29:a5:81:f1:de:09:01:3d:44:1c:
aa:99:1c:31:69:a9:49:9b:a9:ef:0e:54:e7:84:ef:
3c:27:f0:19:31:61:76:fc:46:58:3b:fc:45:54:dd:
1c:8a:bc:98:ca:88:5c:00:62:d9:28:f8:77:68:2a:
c5:3c:66:c1:09:36:fc:c9:cc:47:a7:a5:ee:ca:db:
fc:3d:57:4c:7e:1f:b4:4a:c6:75:61:2e:c8:33:bf:
87:b7:14:26:aa:ca:96:b9:09:9d:66:5d:7a:06:de:
e1:5b:b4:5c:02:cc:5c:da:ea:06:1a:23:4f:df:5b:
e2:20:5b:e3:b8:bd:c7:e3:5e:52:39:cf:b4:95:c5:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:EA:34:34:19:32:A9:A2:ED:02:A5:E2:CD:EF:FA:F9:91:C9:C7
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/j8jqNDQZMqmi7QKl4s3v-vmRycc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.172.136.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ff:5b:bb:b9:55:fb:0c:41:a4:7b:1c:76:e7:ab:89:80:ac:
50:be:98:9f:ca:79:80:b3:c1:97:32:d7:9e:64:1a:04:3c:ca:
39:c0:97:12:d8:e0:a2:0c:2f:33:e7:e0:a3:be:06:ac:c2:26:
54:0a:56:47:e3:eb:5b:79:04:8f:35:70:ef:45:d0:4c:01:2a:
37:d1:b8:ae:6e:35:83:0f:b1:06:30:d2:95:a3:04:0e:a2:2d:
8d:88:cc:e8:e6:75:f6:27:e1:76:a1:ff:74:4b:12:ac:d4:f4:
0f:0e:85:ad:cf:cb:39:3b:fd:ea:81:88:3a:6d:0b:f7:b1:54:
b2:96:5e:ed:1a:36:26:59:c1:2b:42:8f:0c:fb:ff:df:6c:ee:
f8:51:b5:ca:40:ee:78:04:1b:e4:c6:af:25:63:82:cf:f0:f0:
74:38:6f:8b:0c:e3:1e:ca:88:88:ff:cb:9b:4d:62:9d:03:2f:
6a:97:d4:28:31:88:09:3f:c2:63:f5:f3:b2:01:a1:b5:37:e5:
02:8c:03:64:3f:32:21:e6:f5:7e:88:58:00:cd:ba:09:17:03:
5c:4f:85:57:05:38:81:f5:d7:61:5b:fa:d3:19:ff:04:4b:4e:
e3:d6:57:df:10:96:96:d1:cf:a4:7b:8a:27:46:99:e2:c1:f8:
e7:dd:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:31 2026 by rpki-client