This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZI7F3jKTZwJk-LUKENd65TQcrdo.roa
File: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (raw, json)
Hash identifier: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=
Subject key identifier: 64:8E:C5:DE:32:93:67:02:64:F8:B5:0A:10:D7:7A:E5:34:1C:AD:DA
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019B7C12C240FAC834803D8B4BD3DA6212BF
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZI7F3jKTZwJk-LUKENd65TQcrdo.roa
Signing time: Fri 02 Jan 2026 00:19:22 +0000
ROA not before: Fri 02 Jan 2026 00:19:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204620
IP address blocks: 83.139.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:c2:40:fa:c8:34:80:3d:8b:4b:d3:da:62:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 2 00:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=648ec5de3293670264f8b50a10d77ae5341cadda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:63:e0:02:aa:3d:aa:fe:da:18:14:69:0b:
28:7a:63:88:1d:b4:eb:2a:a6:59:b5:fa:26:fe:91:
d3:80:3c:5e:d6:35:fe:7e:4d:96:17:5f:72:dc:17:
4a:b6:82:a9:59:23:cb:f2:54:d3:23:cf:19:9e:81:
49:f7:1e:68:5e:27:02:cc:bc:8c:6f:42:c2:7a:d4:
86:09:d7:02:05:e0:34:74:ac:66:29:51:c0:d1:14:
88:6c:98:9d:68:7c:70:56:82:df:4a:f0:02:10:2c:
1c:b4:54:00:53:be:bc:ba:c7:8b:95:06:c9:b7:1b:
d4:91:da:cc:ee:a2:9d:ed:47:dd:c4:67:20:2c:08:
96:30:00:4f:71:e4:d0:c5:b8:6a:70:b2:40:31:d5:
7a:8d:2e:90:f9:30:ec:dd:3d:67:fe:b0:4b:e8:69:
e7:4a:da:a0:df:fd:20:af:a2:24:8c:93:8d:3a:59:
98:41:6f:de:02:56:62:01:f3:af:3d:07:ae:52:7e:
61:c8:fc:d0:bf:58:e9:25:8a:08:e5:d3:6f:b2:cf:
d4:fe:30:69:c0:84:cf:ba:04:67:66:16:25:d5:b0:
e1:d4:e3:b4:d8:cf:ed:d7:10:e6:ac:4c:cd:74:a9:
b6:bb:88:72:2b:da:d2:5c:fc:71:d9:28:b7:c4:db:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:C5:DE:32:93:67:02:64:F8:B5:0A:10:D7:7A:E5:34:1C:AD:DA
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/ZI7F3jKTZwJk-LUKENd65TQcrdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.21.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b1:26:7a:16:9a:6b:0e:40:46:2c:d0:28:93:66:f6:35:8c:
88:50:b8:11:e2:60:ea:b0:d2:4a:19:f2:6b:1b:23:75:a3:10:
a6:d9:8c:ba:cf:1d:79:aa:20:e4:5a:03:03:28:2c:50:0b:4c:
95:00:9d:cb:0d:16:10:57:6c:05:e5:23:5b:de:50:22:7a:2e:
32:de:4d:42:c9:71:28:37:f9:41:66:d2:2d:4f:92:3e:e4:46:
f3:89:83:ae:4b:87:8f:ba:68:1a:a6:31:d5:81:d4:c0:d0:a7:
ef:53:2d:4b:04:08:2f:6c:ff:e3:c3:6c:fb:2b:bf:d4:2b:3c:
8a:6f:43:b4:4b:74:be:b6:ed:0b:c9:0a:c8:2f:63:dd:38:71:
b6:d1:22:1f:d5:2e:92:46:71:d1:93:f1:cc:28:f5:9e:2e:f2:
05:9d:a9:3f:84:6e:95:61:0b:b8:a2:04:86:51:22:dc:66:7f:
d1:4c:28:bc:12:61:f1:22:69:83:fb:e8:0d:24:b6:4f:fa:86:
17:a4:63:3c:b2:9c:12:4d:93:f9:e5:2f:75:bb:71:c0:3c:50:
3f:f4:8c:7d:b4:18:a5:f1:02:64:84:c2:c9:29:ec:43:5e:45:
07:8b:f9:bf:8a:51:db:6b:94:59:37:28:54:54:1e:40:79:ac:
13:5a:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:13 2026 by rpki-client