This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa
File: lQ47t4cinUX2Zd4lU-kVod80YBY.roa (raw, json)
Hash identifier: 9fN+vypDbYHdWtZGhrsCb1aCBdMbisC6WmQVwPJJbhg=
Subject key identifier: 95:0E:3B:B7:87:22:9D:45:F6:65:DE:25:53:E9:15:A1:DF:34:60:16
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 019B7C7FBA5277862CCEDF467BC4C137212F
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa
Signing time: Fri 02 Jan 2026 02:18:24 +0000
ROA not before: Fri 02 Jan 2026 02:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210158
IP address blocks: 193.36.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:ba:52:77:86:2c:ce:df:46:7b:c4:c1:37:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jan 2 02:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=950e3bb787229d45f665de2553e915a1df346016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c8:bb:00:64:f0:f8:68:df:fd:14:3b:b7:59:
65:da:6c:66:60:1c:6d:f9:e7:fc:b2:b8:9d:02:4f:
88:98:ec:53:c5:6d:36:df:c6:1b:61:6b:fd:aa:04:
09:3e:34:c2:d3:82:d2:fc:73:2d:4c:79:f6:96:9c:
35:d3:08:f0:33:81:26:46:b7:81:30:42:e0:c6:3f:
20:9c:47:1c:d2:8e:7e:31:90:16:ad:b2:87:a2:44:
68:db:bb:30:65:8d:11:73:80:f2:81:1a:cd:5e:ec:
1d:d3:ae:a7:17:1e:99:4f:f1:90:7f:87:6d:94:70:
25:62:3d:18:9b:12:f1:cb:26:4f:dc:78:7e:15:26:
54:0e:7e:e7:f5:5e:c9:23:33:8f:f4:26:01:12:79:
e7:3f:87:82:b1:7b:e1:1e:c8:2a:b4:eb:c4:bb:fa:
85:10:2b:70:bc:6f:73:3e:77:74:15:43:ab:35:b3:
a9:89:b5:0f:ce:b1:e1:33:48:2c:0a:7a:ff:7e:9d:
9a:5e:e2:cb:2b:d0:f2:b3:f2:73:60:bf:82:c2:61:
0f:cd:97:25:81:a4:d8:91:cf:55:b4:69:7a:a5:f5:
c3:01:24:46:43:d5:02:ec:df:88:fa:c0:c1:35:53:
ab:53:2a:24:1d:a1:62:1a:76:5d:06:f6:6e:0e:f8:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:3B:B7:87:22:9D:45:F6:65:DE:25:53:E9:15:A1:DF:34:60:16
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:cf:42:5e:47:26:f8:28:1a:f0:72:9c:05:33:30:04:a3:10:
1b:73:d0:70:01:9a:0d:ce:4f:90:7e:4e:ae:40:44:b2:09:86:
b3:dc:30:67:ae:f9:69:41:2d:2d:98:a6:d2:a6:f4:b4:27:03:
cd:15:42:46:f1:04:eb:6c:8e:cb:c3:7c:f8:b3:de:7a:bf:59:
c7:30:9e:dc:c6:b7:2c:66:b6:f1:f2:b3:fa:8e:a5:a6:3f:a2:
c2:24:0d:6c:61:5d:fb:da:17:76:b7:87:c0:c6:8a:42:66:dc:
b3:0b:93:92:75:68:4e:84:b9:89:cb:6d:3f:fd:d5:af:ae:98:
00:04:39:41:2b:80:d7:39:24:92:1d:21:b6:4b:f3:44:e2:5f:
94:33:93:7f:c0:05:51:5b:bc:4b:6b:86:7c:9d:4c:04:35:ed:
70:2d:c6:df:86:ac:c9:5a:ad:5d:8c:90:c9:9c:f8:f3:0f:a5:
3b:d9:d7:29:a1:b5:7f:c3:17:25:c3:59:f9:f0:1d:b1:be:b4:
3f:13:3f:07:b6:6f:0e:49:1b:42:59:2c:db:bf:a2:c6:c0:06:
4a:fd:1d:f6:a4:17:bf:79:64:13:c8:9e:37:4f:c5:24:46:08:
86:19:ac:a6:63:bb:00:85:07:dc:26:03:b0:22:46:a8:1f:a9:
4d:72:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:12 2026 by rpki-client