This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa
File: 7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (raw, json)
Hash identifier: MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=
Subject key identifier: EE:3E:C9:5C:15:CC:CA:BF:08:73:A5:E9:06:9A:61:39:40:D1:65:C2
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019B7C12BF7FABA5F53B3DCEF9CAC96DF6C3
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa
Signing time: Fri 02 Jan 2026 00:19:21 +0000
ROA not before: Fri 02 Jan 2026 00:19:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43733
IP address blocks: 46.130.0.0/16 maxlen: 16
46.130.0.0/17 maxlen: 17
46.130.128.0/17 maxlen: 17
46.130.255.0/24 maxlen: 24
83.139.24.0/21 maxlen: 21
83.139.24.0/22 maxlen: 22
83.139.28.0/22 maxlen: 22
83.139.32.0/22 maxlen: 22
185.36.36.0/22 maxlen: 22
185.36.36.0/24 maxlen: 24
217.76.0.0/20 maxlen: 20
217.76.0.0/21 maxlen: 21
217.76.8.0/21 maxlen: 21
2a00:1f28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:bf:7f:ab:a5:f5:3b:3d:ce:f9:ca:c9:6d:f6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 2 00:19:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee3ec95c15cccabf0873a5e9069a613940d165c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:2a:75:53:90:3f:30:40:5c:ce:46:94:83:
2f:11:32:fb:b7:c3:4b:bc:ed:90:bd:72:bd:6b:eb:
0b:c1:78:5d:59:fa:25:28:e8:ad:6b:10:3a:7d:e4:
50:bb:f3:6f:74:77:05:80:1c:45:c4:cd:f9:89:b6:
11:bb:ba:77:36:10:55:6a:d6:1b:a3:91:10:05:da:
72:47:97:36:0d:90:0c:67:1c:4b:44:b6:63:8c:0b:
95:66:1d:3b:97:ad:7c:ef:7d:c7:a6:12:ed:b7:27:
88:41:cf:87:c9:83:a2:7b:fa:10:c0:88:43:26:b2:
9b:af:71:2b:2b:6f:fe:e5:11:52:b7:6e:c9:85:e4:
d1:b6:a7:89:31:20:05:82:81:b0:30:4e:7d:67:2d:
3c:16:da:84:cf:ad:fe:e8:4b:c2:d2:b4:0f:47:28:
8b:22:c0:5d:0e:60:96:3d:a3:26:a8:e0:88:dc:29:
5b:a4:5a:7d:34:64:58:9e:76:0b:e4:f8:38:25:a2:
c1:7a:90:f8:22:09:92:59:78:40:f8:77:32:4b:aa:
d6:f1:44:38:da:d8:b2:06:10:ea:c1:7b:28:de:e6:
10:b6:d3:0a:ae:97:16:9c:5e:9a:7a:2d:8f:b0:75:
da:2f:e6:c7:43:92:fb:a9:61:39:fb:8f:a1:99:aa:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:C9:5C:15:CC:CA:BF:08:73:A5:E9:06:9A:61:39:40:D1:65:C2
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.130.0.0/16
83.139.24.0-83.139.35.255
185.36.36.0/22
217.76.0.0/20
IPv6:
2a00:1f28::/32
Signature Algorithm: sha256WithRSAEncryption
97:3f:74:96:39:c4:80:31:f6:4d:24:39:cb:61:50:87:b2:f9:
dd:74:f1:e5:85:fa:06:fd:26:3f:88:c9:56:b8:80:d7:c0:61:
2c:ba:c2:15:ba:4a:22:e1:45:29:8e:12:c2:b3:a7:c9:62:79:
23:02:70:62:47:ed:e8:e0:ec:30:21:9a:22:b0:e9:0c:9d:d4:
7e:63:69:b6:ca:7a:0e:2c:39:6e:d1:1c:4d:af:51:3f:1e:fa:
04:42:d8:36:bc:dd:25:fb:fd:8a:54:e7:4c:dc:8d:26:dc:c8:
11:45:77:1c:58:07:1f:ca:7c:d1:f8:84:1e:c5:b1:81:e9:82:
9c:53:88:bb:a1:39:0c:c9:88:bb:e2:b3:26:93:32:b3:2d:e1:
50:f2:62:26:d7:31:c4:a0:70:1f:35:df:cc:c9:2c:5b:48:0b:
a6:89:69:29:83:7d:95:5a:e9:e2:a0:9a:be:6b:81:b1:69:94:
fa:1f:dc:d5:6e:2d:d5:30:c4:7d:25:ad:ce:69:95:be:d4:cf:
86:7a:d2:1e:a7:d2:60:ae:c7:ff:76:80:0c:51:47:1f:de:c2:
d3:70:57:3c:6f:ea:b7:12:f7:df:0b:2a:c6:bb:02:0e:f2:14:
a9:a7:27:f9:2a:29:20:dc:62:e9:8f:b9:cd:07:f2:32:a4:e7:
c6:1b:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:40 2026 by rpki-client