This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa
File: t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (raw, json)
Hash identifier: UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=
Subject key identifier: B7:B9:51:B3:EF:46:34:41:14:57:23:DD:88:37:E3:E9:22:63:E4:79
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 019A9D58DC29C94430515E5BDA1A91E4F62E
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa
Signing time: Wed 19 Nov 2025 18:20:37 +0000
ROA not before: Wed 19 Nov 2025 18:20:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41171
IP address blocks: 146.19.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:9d:58:dc:29:c9:44:30:51:5e:5b:da:1a:91:e4:f6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Nov 19 18:20:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b951b3ef463441145723dd8837e3e92263e479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:8b:19:c1:52:54:95:8f:b7:40:48:9e:32:
40:c1:cb:b4:0f:fd:02:6e:a3:e2:64:9c:08:7a:b6:
90:71:94:ff:91:3d:56:c2:d6:12:ed:6e:4c:22:03:
7d:7c:5d:11:60:3a:93:36:1f:f8:53:f6:78:24:bc:
9e:cc:48:f4:b1:bf:36:6e:00:b1:5d:5e:7d:a9:2f:
65:5e:6b:69:3a:53:ad:00:31:86:3a:6a:5b:fa:a3:
46:73:67:6d:20:03:6a:32:df:ed:fb:81:a9:ee:2c:
5b:0c:02:74:09:ca:e3:40:fb:41:0f:a9:e2:e5:5b:
4b:88:80:c0:63:0c:e0:2b:fe:10:05:fd:aa:7d:72:
db:23:7c:9c:61:51:ce:e3:08:59:68:40:01:37:08:
95:b6:28:d4:71:cf:67:37:93:cb:7a:4f:ac:25:4e:
44:d0:fc:b0:40:9b:27:c5:ff:8b:92:1e:7b:c6:ce:
1f:7a:ec:3a:19:34:e3:d5:f6:58:fd:15:3d:9e:79:
4f:78:1a:e6:57:9a:a4:28:79:ce:80:69:14:a0:e1:
8a:af:41:81:03:c1:d4:f0:c1:ab:15:69:9b:7a:01:
6e:f3:14:6f:b2:7d:36:f3:9f:46:be:d5:fb:87:f4:
dd:d3:68:d8:29:f0:32:eb:c2:52:00:77:9b:b5:3f:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:51:B3:EF:46:34:41:14:57:23:DD:88:37:E3:E9:22:63:E4:79
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7a:83:2a:b6:11:5a:55:b9:85:f8:da:0f:ab:9c:2d:9d:bc:
5c:9d:30:ca:71:e4:66:48:1e:ae:3a:55:e5:c5:25:2d:71:cc:
e3:4b:c8:72:76:95:1b:bd:f2:2f:9e:66:2b:9e:ef:c3:30:d7:
ba:dd:fb:98:da:95:c7:26:81:fc:22:6d:fa:ef:fc:6a:30:68:
c4:a4:cd:c0:52:f4:65:3e:74:ee:15:0e:68:89:e1:79:5d:b9:
ea:dd:94:69:da:34:63:c0:88:20:12:99:ee:17:99:35:bc:c8:
20:e9:43:60:44:2d:5b:44:7f:9c:0a:93:ab:c9:6f:11:20:05:
e5:5e:69:51:76:79:d7:55:a4:d5:1d:77:7e:b7:d4:13:6e:93:
65:9b:e4:c0:97:10:69:5d:4f:2d:39:99:87:36:8e:a8:58:01:
b3:a6:00:8c:84:61:d3:52:f6:fd:a9:ff:da:83:b5:5f:f8:56:
1a:9e:9a:a9:23:42:61:06:03:75:de:bf:bb:5f:08:96:1a:35:
20:d5:5e:2d:d7:d9:7a:03:ea:ae:d9:e4:18:91:29:de:2b:df:
fc:4d:a1:0b:be:89:d8:e1:56:cb:21:19:e8:c6:ee:5a:60:90:
f9:38:1d:ff:ef:d7:a6:3e:95:aa:11:52:1e:5b:5d:28:88:d6:
a1:d2:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:34:20 2025 by rpki-client