This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa
File: 73_5iYSlORzbOfiNfRDM2uh_ESw.roa (raw, json)
Hash identifier: gN0crtYE8dtVNz0uFqXz4FUyiQSrGkSquVtc62m7sx8=
Subject key identifier: EF:7F:F9:89:84:A5:39:1C:DB:39:F8:8D:7D:10:CC:DA:E8:7F:11:2C
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019B77C746C50803DEE7BBA41B96801D2507
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa
Signing time: Thu 01 Jan 2026 04:18:27 +0000
ROA not before: Thu 01 Jan 2026 04:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199009
IP address blocks: 62.76.130.0/24 maxlen: 24
62.76.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:46:c5:08:03:de:e7:bb:a4:1b:96:80:1d:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef7ff98984a5391cdb39f88d7d10ccdae87f112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:50:e3:91:10:9e:67:bb:b9:4a:82:da:10:
53:e0:77:54:84:ef:a2:f2:e5:3e:f2:73:d1:01:b4:
30:ea:df:bd:ab:7e:0c:36:40:bc:0d:8f:3c:a2:33:
27:9a:6c:de:30:e4:5d:2f:74:9c:30:43:ca:8a:de:
91:93:53:60:36:9e:80:33:3d:8d:45:d1:f6:5a:14:
17:f3:4f:63:1b:c7:72:c7:8e:3f:60:46:99:ed:fd:
14:6a:55:45:93:3b:fb:14:9b:4f:04:d0:5b:24:28:
f2:37:7d:b6:5a:10:d7:b5:27:68:8d:d1:68:5b:a3:
84:df:cb:a4:9e:49:6f:2e:a1:29:94:73:ee:1d:69:
b7:de:b1:9a:3f:64:3d:28:30:97:4a:f0:ca:48:48:
82:63:1a:4f:7f:14:1e:0a:08:7c:7d:25:25:98:3e:
51:1f:7d:d3:8d:f0:8d:6a:58:26:dd:99:f2:d5:4e:
d7:ab:61:97:25:ca:f8:b2:66:db:aa:97:a2:0a:8e:
80:0b:2c:50:d9:4d:95:f2:20:99:6d:0c:7b:63:f9:
cb:79:c1:f7:db:b6:47:24:c5:5c:63:59:8c:71:64:
bf:2a:4f:75:f9:6e:b5:3e:18:20:0d:06:8e:2b:75:
c3:dc:55:fd:85:fb:df:f0:4a:c5:a0:1a:06:f0:a5:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:F9:89:84:A5:39:1C:DB:39:F8:8D:7D:10:CC:DA:E8:7F:11:2C
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/73_5iYSlORzbOfiNfRDM2uh_ESw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.130.0/23
Signature Algorithm: sha256WithRSAEncryption
28:2f:53:f2:eb:cd:9d:83:82:5e:08:95:2a:41:10:68:8a:b5:
43:01:d3:14:fd:79:bb:79:fc:b1:5b:c1:af:9d:61:68:d6:b2:
f1:67:62:42:12:9f:65:bc:96:ba:21:ac:a1:5e:92:26:45:d0:
fb:b5:58:ff:fe:16:11:91:74:d2:f5:fe:0e:56:a7:8c:57:7e:
3b:1e:3e:7f:0a:0c:71:03:9f:00:c6:1c:23:33:e2:e3:bd:ca:
96:89:b9:94:d7:66:61:8c:5b:be:de:6b:dd:65:67:5a:ff:9b:
25:1c:4d:2d:f5:82:a0:d1:8c:08:23:f8:10:a6:0d:19:b6:58:
70:1a:b9:19:73:b6:6b:3e:9e:ce:af:c5:8d:74:fd:38:33:bc:
8e:f3:87:20:82:81:61:57:28:ab:93:5b:29:18:58:26:1d:53:
7a:ed:39:14:4c:00:14:c8:c1:44:f6:88:67:eb:27:4b:58:96:
57:53:cb:7e:0b:a8:41:33:a2:6e:54:44:c0:f2:1b:46:c2:24:
ec:63:cf:8c:2f:69:ec:37:ad:e2:cf:e4:c1:10:9a:0e:63:f8:
ad:8a:ed:a5:57:ab:0f:d8:d1:21:67:57:86:f1:37:0a:89:b4:
f7:ab:b9:a3:b0:5b:43:6b:e6:f0:18:f0:60:9d:9b:e2:05:7c:
25:53:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:39:21 2026 by rpki-client