This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fZu4c99M7hwwUy4zUSNsZq7lVYw.roa
File: fZu4c99M7hwwUy4zUSNsZq7lVYw.roa (raw, json)
Hash identifier: L3oSd09UoRgKxKBebb4Wi1pQk0naCHE3QG+8N2zuIpU=
Subject key identifier: 7D:9B:B8:73:DF:4C:EE:1C:30:53:2E:33:51:23:6C:66:AE:E5:55:8C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C76B38CF2A12CFF2E31F6870EEE014
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fZu4c99M7hwwUy4zUSNsZq7lVYw.roa
Signing time: Thu 01 Jan 2026 04:18:36 +0000
ROA not before: Thu 01 Jan 2026 04:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44915
IP address blocks: 188.164.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:6b:38:cf:2a:12:cf:f2:e3:1f:68:70:ee:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d9bb873df4cee1c30532e3351236c66aee5558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:51:56:31:df:9d:b2:ed:11:d5:94:1a:fe:
33:15:52:4e:0c:18:32:54:0e:cb:36:b9:8b:c5:49:
69:41:6f:68:88:6f:49:fd:33:5c:a5:a3:2b:cc:8a:
4b:ea:d3:1e:3c:ba:c4:22:36:7f:3a:cf:9c:19:39:
bc:bb:f3:03:95:ac:43:c2:5b:3c:70:8e:f2:ab:6d:
5b:ca:81:d9:15:68:c5:1d:fa:d7:c1:0e:4c:54:65:
45:37:ec:96:3d:c9:b7:50:53:b6:9d:f3:1d:a0:79:
fd:60:0f:c4:e3:bf:f3:0a:ce:ce:2d:36:a2:16:78:
a0:b5:0a:d3:48:3e:29:ff:27:3f:a7:f8:99:b0:c4:
44:49:08:f8:a3:07:9b:2b:1d:9c:63:e9:fe:c2:e6:
fd:e6:9e:09:b4:11:a0:58:f3:a5:ba:d7:ad:30:4a:
8c:83:8f:2e:b1:7f:52:5d:d6:2a:3f:6b:52:bb:97:
a6:23:fe:4e:07:c9:c5:32:20:8f:8e:bc:da:01:b6:
5e:b6:0f:a9:9d:11:cb:fc:63:a3:5d:96:5f:17:c6:
7a:0f:c0:f8:37:be:04:6b:c2:7f:ae:bc:8f:f3:11:
ae:87:6d:5e:02:7c:66:97:1f:91:48:a2:73:f7:fd:
7e:c7:09:1e:98:4a:09:9c:b8:27:2c:75:c4:20:3b:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:B8:73:DF:4C:EE:1C:30:53:2E:33:51:23:6C:66:AE:E5:55:8C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fZu4c99M7hwwUy4zUSNsZq7lVYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.213.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d7:5c:b4:ed:ce:cc:fd:51:41:d8:62:66:38:da:84:c1:9e:
ca:b4:2f:54:a2:54:c4:25:4f:cf:f1:89:5d:36:d1:f3:96:cb:
09:68:a3:6b:c3:e6:d2:45:5f:74:cc:43:6e:46:13:d8:38:85:
25:db:a1:21:35:b3:65:cd:cf:90:cd:0c:fa:c5:31:1c:6e:64:
4f:b2:a8:e1:42:b3:fb:f5:17:ce:57:bc:03:f7:53:59:9c:a3:
4b:c6:44:70:5a:b6:56:e7:39:a4:13:4b:f6:d5:b8:22:82:08:
cf:b4:3b:a1:5e:83:e4:fe:ac:f8:5a:7d:ff:35:d9:5d:fa:9b:
51:c9:06:cf:ad:36:ab:76:30:35:77:33:6c:e0:1d:f5:61:2d:
9e:4b:fc:53:2c:05:30:56:0a:f6:ac:62:64:21:09:8f:fe:83:
c9:02:7c:75:1d:58:6a:87:b8:c7:5a:48:47:af:84:60:d9:53:
4a:73:96:02:36:d9:ea:ab:ef:7e:53:09:59:8f:7c:aa:b8:35:
a1:ad:71:d1:40:19:0c:21:a8:02:5f:37:0b:90:a5:54:a3:65:
f3:6f:67:8e:4b:00:ff:4f:86:3f:0a:95:47:73:dc:5f:03:b6:
8c:66:f2:87:77:0d:14:f8:e4:59:42:9f:32:26:6b:7e:34:86:
ab:d7:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:45 2026 by rpki-client