This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa
File: 7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa (raw, json)
Hash identifier: yvqmetRmMdc11k8HTqn+SyjBeT1pS2HhIqus6eV035I=
Subject key identifier: EC:AF:50:9A:22:AC:67:C4:86:0F:1D:AA:37:7B:28:C4:B8:57:A4:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019AE2F4DB8C3673FA301F0B82EED6A22FCD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa
Signing time: Wed 03 Dec 2025 06:44:49 +0000
ROA not before: Wed 03 Dec 2025 06:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 94.183.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e2:f4:db:8c:36:73:fa:30:1f:0b:82:ee:d6:a2:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 3 06:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecaf509a22ac67c4860f1daa377b28c4b857a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:ca:74:56:d3:44:bf:60:5d:2e:c3:fd:13:
d8:bd:4a:f3:6d:14:47:1a:2d:d0:ff:54:05:f6:9b:
de:ac:d4:ac:c6:1a:ec:92:b6:0d:a1:9a:ff:5e:b3:
0d:af:9f:3b:bd:78:fe:ab:ae:f9:86:40:bd:55:e6:
1c:74:2c:7e:3f:71:69:b1:0a:f7:6e:a0:e2:21:a3:
a1:ba:ac:98:e9:8b:66:b1:5e:40:73:43:05:c3:76:
ce:1f:bf:07:76:a2:6d:3c:d1:9a:92:66:4a:c3:03:
71:e6:4e:4f:d4:b9:7e:d1:d2:51:ec:3d:8f:b4:27:
5d:8a:a8:0a:99:23:50:62:2a:86:77:18:d5:43:f4:
57:8f:1c:71:97:11:68:d7:4f:cb:a0:b0:20:29:aa:
d0:66:bd:5d:fa:0e:9e:ae:74:b7:85:fe:fe:0f:c0:
08:a9:69:c7:94:51:e0:f4:dd:29:67:0d:54:59:f3:
a1:a4:07:bd:de:4c:05:41:42:ad:da:40:dc:01:b8:
f2:62:02:d4:11:17:08:aa:ad:25:cc:12:62:c1:d2:
c1:4d:08:a3:79:4a:7b:1e:fe:3d:da:ce:76:9b:ad:
96:ca:f7:b2:ad:dc:c2:71:85:14:16:9a:de:d3:0e:
d7:69:0a:2d:f6:e3:da:1a:45:c0:20:b7:a4:1e:99:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:50:9A:22:AC:67:C4:86:0F:1D:AA:37:7B:28:C4:B8:57:A4:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.167.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8b:2e:25:d1:22:6c:f1:2b:7e:74:48:13:3a:63:c7:48:ba:
a7:bc:13:d7:33:d5:bd:7a:26:b8:bd:cd:24:cc:33:96:72:37:
a2:96:d3:f9:82:a5:90:bc:cd:0c:fe:73:e1:1d:ca:df:d3:b8:
fe:88:e3:89:88:e5:26:fa:67:cc:ac:56:4d:58:a9:7c:ca:3e:
35:9d:18:1f:f3:ed:5a:7a:ea:fd:7a:80:e2:07:d6:b6:22:58:
6e:7d:39:53:33:2a:78:79:c5:d9:ec:6e:7b:9a:37:70:c1:9f:
93:cb:ea:ee:d5:c8:de:48:66:17:53:ba:cb:67:d1:09:f6:a7:
98:4d:29:3b:72:e2:ac:c9:bf:7a:36:d9:d9:62:e4:74:50:5e:
55:26:54:f0:c1:4a:e8:29:05:d6:5d:4c:2e:c9:9c:98:62:d0:
02:70:82:05:eb:a2:32:1f:7c:44:7f:ce:db:6c:08:45:fd:b4:
fe:e8:ad:84:2a:53:9d:dd:c3:82:b9:88:03:35:64:88:33:ba:
ee:f9:b9:85:eb:2c:be:c9:87:b3:50:d2:fa:b1:68:e6:02:6c:
fc:08:dd:5b:81:50:41:e7:68:8f:0a:9d:67:f4:f9:bc:bc:24:
d1:6d:2b:2c:1c:02:87:d9:75:52:7c:d0:a9:f7:86:fd:20:44:
04:3e:33:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZri9NuMNnP6MB8Lgu7Woi/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMjAzMDY0NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2FmNTA5YTIyYWM2N2M0ODYwZjFkYWEzNzdiMjhjNGI4NTdhNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqrKdFbTRL9gXS7D/RPYvUrzbRRH
Gi3Q/1QF9pverNSsxhrskrYNoZr/XrMNr587vXj+q675hkC9VeYcdCx+P3FpsQr3
bqDiIaOhuqyY6YtmsV5Ac0MFw3bOH78HdqJtPNGakmZKwwNx5k5P1Ll+0dJR7D2P
tCddiqgKmSNQYiqGdxjVQ/RXjxxxlxFo10/LoLAgKarQZr1d+g6ernS3hf7+D8AI
qWnHlFHg9N0pZw1UWfOhpAe93kwFQUKt2kDcAbjyYgLUERcIqq0lzBJiwdLBTQij
eUp7Hv492s52m62WyveyrdzCcYUUFpre0w7XaQot9uPaGkXAILekHpkblQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyvUJoirGfEhg8dqjd7KMS4V6SsMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvN0s5UW1pS3NaOFNHRHgycU4zc294TGhYcEt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrenMA0G
CSqGSIb3DQEBCwUAA4IBAQARiy4l0SJs8St+dEgTOmPHSLqnvBPXM9W9eia4vc0k
zDOWcjeiltP5gqWQvM0M/nPhHcrf07j+iOOJiOUm+mfMrFZNWKl8yj41nRgf8+1a
eur9eoDiB9a2IlhufTlTMyp4ecXZ7G57mjdwwZ+Ty+ru1cjeSGYXU7rLZ9EJ9qeY
TSk7cuKsyb96NtnZYuR0UF5VJlTwwUroKQXWXUwuyZyYYtACcIIF66IyH3xEf87b
bAhF/bT+6K2EKlOd3cOCuYgDNWSIM7ru+bmF6yy+yYezUNL6sWjmAmz8CN1bgVBB
52iPCp1n9Pm8vCTRbSssHAKH2XVSfNCp94b9IEQEPjM+
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:34 2025 by rpki-client