This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa
File: aZkA2iniPI362xsycukaud-4CB4.roa (raw, json)
Hash identifier: HarwIL8b+NTV12U+LGjjz5UWE6eIvYd6cGMm35jQOBk=
Subject key identifier: 69:99:00:DA:29:E2:3C:8D:FA:DB:1B:32:72:E9:1A:B9:DF:B8:08:1E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C766F9BF9D685E04554C77749BC849
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa
Signing time: Thu 01 Jan 2026 04:18:35 +0000
ROA not before: Thu 01 Jan 2026 04:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33908
IP address blocks: 82.140.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:66:f9:bf:9d:68:5e:04:55:4c:77:74:9b:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=699900da29e23c8dfadb1b3272e91ab9dfb8081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:39:f1:c6:6f:f7:e5:e9:51:a6:8c:11:1b:
33:31:9d:7d:be:1c:4b:4a:64:3e:f8:5c:15:50:22:
19:5c:3b:7d:c9:fc:53:61:da:c2:57:94:b4:0a:0f:
22:97:3b:43:7e:aa:53:40:55:af:cf:4f:bd:23:81:
df:9c:dd:2d:a3:e3:63:e8:fc:dc:5b:46:b0:e9:a1:
ab:5d:6c:9b:02:09:b4:85:73:08:7a:95:f7:4d:cd:
e9:24:74:c0:21:50:9d:24:bd:5c:26:55:c4:95:93:
e9:19:32:f1:1d:fa:9d:cc:8a:2c:02:29:eb:ab:6d:
92:85:93:e8:4f:d5:5d:b7:ef:bb:18:ec:5d:e5:15:
ad:79:2c:df:96:fc:c6:a6:7b:cb:57:df:78:58:55:
21:d6:1e:a6:e0:af:08:17:f4:75:b3:f8:ea:d1:26:
29:09:cd:7e:10:e5:d5:e7:72:95:9f:59:92:17:05:
7a:3a:97:d3:2c:19:d4:62:1c:95:c4:cd:87:ee:f9:
56:69:94:79:e8:25:61:62:f0:6e:c4:90:74:73:fd:
b3:5a:54:e6:ca:03:23:7b:19:e9:35:45:18:d4:3a:
2e:d3:f3:ba:b4:eb:83:2e:fd:23:4b:e8:d5:dc:82:
f7:e5:e3:c2:29:e0:a3:45:4d:b1:9f:68:13:97:9c:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:00:DA:29:E2:3C:8D:FA:DB:1B:32:72:E9:1A:B9:DF:B8:08:1E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/aZkA2iniPI362xsycukaud-4CB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.78.0/24
Signature Algorithm: sha256WithRSAEncryption
22:54:16:48:e7:34:4b:81:24:44:38:48:93:71:b3:62:1b:fc:
f4:6f:be:53:25:db:62:55:e5:a2:d8:1e:93:0e:bd:4b:9b:7c:
11:ee:1c:c2:7d:2c:74:c7:25:86:92:f5:fd:c6:ee:db:85:58:
20:c9:8f:4b:23:37:9f:a8:20:d2:5d:bf:91:0e:81:4f:1f:73:
7c:9f:8f:80:37:eb:73:c2:a3:15:37:e9:d3:9e:8f:16:a6:ab:
0b:31:24:f8:cf:76:a6:68:67:c4:e7:21:53:cb:ec:b4:c5:21:
d2:9f:03:b2:6b:0e:f4:d9:71:68:02:a2:93:1a:6c:9f:ce:fb:
a8:9b:16:54:b7:25:0d:98:f4:4d:a2:5f:be:f1:07:a4:32:aa:
a5:28:58:f1:f4:66:34:c3:c5:9d:cb:10:fe:26:5e:0b:3f:9b:
5d:ae:4c:0c:7e:c7:62:f6:f2:a0:28:64:03:36:bb:73:93:3f:
26:67:f5:64:21:00:c9:ba:4d:6f:30:d7:e1:46:69:dd:c4:c5:
7b:32:bf:14:48:5c:e7:57:5d:1a:3b:13:02:a1:c9:68:f1:5a:
98:de:d1:56:11:36:07:5d:50:25:ae:eb:88:c7:d4:20:7b:d7:
12:e7:ee:bf:92:2f:73:71:2d:d5:07:48:56:ce:f8:ab:8d:d8:
01:3f:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:06 2026 by rpki-client