This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa
File: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (raw, json)
Hash identifier: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=
Subject key identifier: EE:38:2F:C0:E7:DB:4D:2F:44:71:BA:0D:63:F9:9C:8B:EF:F3:17:34
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019B7CED6CCF8CB8578D7A601C35EDEEAFF3
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa
Signing time: Fri 02 Jan 2026 04:18:13 +0000
ROA not before: Fri 02 Jan 2026 04:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34970
IP address blocks: 91.195.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:6c:cf:8c:b8:57:8d:7a:60:1c:35:ed:ee:af:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Jan 2 04:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee382fc0e7db4d2f4471ba0d63f99c8beff31734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:c0:6d:91:8a:7f:4f:78:7f:2f:38:4b:2b:
47:a1:34:0e:6f:29:ef:5a:f5:03:b3:ad:28:07:8f:
13:94:c5:a5:60:db:85:f5:08:45:71:dd:4a:b9:a7:
26:31:ea:00:a8:ae:06:54:16:c0:89:06:12:e4:19:
df:6a:37:59:b9:df:ad:5d:6a:6f:d3:1c:07:1c:ef:
c0:50:c7:e9:e0:18:f2:55:ab:e0:c8:14:f0:67:de:
21:36:bb:35:ad:44:37:3d:74:e6:76:26:f1:fe:cf:
8f:9e:af:cd:3c:dc:a9:62:6a:45:bb:e9:0f:d9:1b:
9b:f4:d9:ab:73:3c:93:0c:6f:77:4c:f4:3c:bc:62:
d4:a8:9a:58:85:b0:b6:e6:bd:1b:f1:b5:af:fd:df:
9a:2f:b1:9d:4c:a8:36:a3:17:b3:f1:ca:be:2e:27:
8a:31:f6:47:0d:83:ea:1e:53:27:ef:46:0a:ce:73:
93:23:15:1e:d7:f0:88:53:28:2f:a2:b4:da:d8:af:
50:e8:c0:f2:62:45:6a:ea:8a:07:b5:39:91:71:e8:
5c:db:c4:38:97:01:cf:e4:d1:bf:2a:48:7e:a0:62:
b5:fb:2e:40:fb:27:07:13:99:37:c8:92:0b:a9:df:
c8:2d:eb:88:67:f0:b8:97:00:60:93:e4:8b:80:84:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:2F:C0:E7:DB:4D:2F:44:71:BA:0D:63:F9:9C:8B:EF:F3:17:34
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:ae:c4:65:5a:07:7c:b6:7c:cb:39:a8:4b:b5:b1:f3:f9:c8:
1e:97:24:8f:62:73:28:83:41:a6:e5:e0:0b:bb:51:1f:f7:58:
5a:82:61:4e:50:9b:fb:3f:f7:82:d6:4a:bf:46:cc:f8:f1:a8:
60:4a:24:f2:aa:a4:8b:e2:0a:3c:d1:ba:da:c5:c7:e1:23:87:
22:b7:2e:8c:32:a4:ad:11:91:71:f7:22:06:16:d7:6f:ac:15:
11:f3:d6:67:61:ae:d3:22:43:53:71:f0:2e:cb:4b:e8:1e:1f:
0f:d6:fd:4f:32:61:2a:82:6e:9f:86:15:00:f0:ad:e5:b3:93:
74:58:b9:ca:84:7c:03:3e:eb:42:37:ab:7b:81:6c:26:1f:77:
36:33:65:a2:c9:72:ce:df:13:5a:fb:59:f1:4d:b6:ad:8c:20:
bf:57:38:9f:17:f8:86:2f:1b:0e:42:f7:73:8f:be:0a:8a:44:
37:e7:5e:f5:2e:8c:dd:7b:d9:0d:dc:f8:cc:90:a3:1e:8e:86:
a0:5a:18:15:bf:7b:c7:be:7f:a2:45:cf:03:7c:f9:fb:6d:02:
b1:5b:da:79:ed:5b:64:bd:18:7a:20:8d:bc:ba:8f:4f:17:de:
a8:63:72:da:64:93:74:a7:14:91:40:a2:b1:98:6a:b5:10:26:
08:07:8f:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87WzPjLhXjXpgHDXt7q/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTM4MmZjMGU3ZGI0ZDJmNDQ3MWJhMGQ2M2Y5OWM4YmVmZjMxNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwczAbZGKf094fy84SytHoTQObynv
WvUDs60oB48TlMWlYNuF9QhFcd1KuacmMeoAqK4GVBbAiQYS5BnfajdZud+tXWpv
0xwHHO/AUMfp4BjyVavgyBTwZ94hNrs1rUQ3PXTmdibx/s+Pnq/NPNypYmpFu+kP
2Rub9NmrczyTDG93TPQ8vGLUqJpYhbC25r0b8bWv/d+aL7GdTKg2oxez8cq+LieK
MfZHDYPqHlMn70YKznOTIxUe1/CIUygvorTa2K9Q6MDyYkVq6ooHtTmRcehc28Q4
lwHP5NG/Kkh+oGK1+y5A+ycHE5k3yJILqd/ILeuIZ/C4lwBgk+SLgITH6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO44L8Dn200vRHG6DWP5nIvv8xc0MB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvN2pndndPZmJUUzlFY2JvTllfbWNpLV96RnpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8POMA0G
CSqGSIb3DQEBCwUAA4IBAQCcrsRlWgd8tnzLOahLtbHz+cgelySPYnMog0Gm5eAL
u1Ef91hagmFOUJv7P/eC1kq/Rsz48ahgSiTyqqSL4go80braxcfhI4city6MMqSt
EZFx9yIGFtdvrBUR89ZnYa7TIkNTcfAuy0voHh8P1v1PMmEqgm6fhhUA8K3ls5N0
WLnKhHwDPutCN6t7gWwmH3c2M2WiyXLO3xNa+1nxTbatjCC/VzifF/iGLxsOQvdz
j74KikQ35171Lozde9kN3PjMkKMejoagWhgVv3vHvn+iRc8DfPn7bQKxW9p57Vtk
vRh6II28uo9PF96oY3LaZJN0pxSRQKKxmGq1ECYIB4+P
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:52 2026 by rpki-client