This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa
File: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (raw, json)
Hash identifier: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=
Subject key identifier: EC:5E:34:E2:77:5F:E9:69:40:6B:05:71:1F:CB:84:A9:B5:1F:36:A8
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 019B7FF2707C9AE24396E4D88F0D5311942F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa
Signing time: Fri 02 Jan 2026 18:22:33 +0000
ROA not before: Fri 02 Jan 2026 18:22:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39483
IP address blocks: 82.119.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:70:7c:9a:e2:43:96:e4:d8:8f:0d:53:11:94:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 18:22:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec5e34e2775fe969406b05711fcb84a9b51f36a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:6b:b8:ce:21:06:cd:3d:99:07:18:85:36:
63:92:6c:71:a4:d4:3c:18:2c:92:94:8d:16:cb:ab:
95:da:72:bb:5d:4b:16:7e:a2:fb:af:9b:f1:9c:ff:
b4:d6:08:d5:d3:18:41:57:8d:5e:5c:82:e2:af:be:
16:ad:08:a9:cf:ce:22:01:50:10:b1:4a:f0:54:5c:
59:f7:c6:ba:3d:f5:61:aa:c2:c4:c3:17:50:f7:6d:
9e:0c:0f:7a:7f:70:e3:fb:cb:ad:65:50:68:40:7c:
e7:f4:61:18:e4:12:6a:4f:b5:e4:14:06:84:28:0d:
cc:ad:28:17:e4:b2:b4:bd:91:47:ef:19:a2:86:f5:
a5:23:e4:4e:90:42:ed:88:23:ba:46:ec:37:cc:8b:
bd:cf:4c:a7:1b:a5:ed:fb:dd:18:f2:0e:e7:38:be:
6a:e3:18:c8:95:7a:c5:63:55:3b:d5:89:4c:e8:98:
c2:98:0a:c7:a3:84:ed:bb:2a:8d:ac:dd:0d:dc:8a:
5d:bb:a5:49:ea:5f:0d:14:95:ee:4e:de:6c:0a:18:
44:6a:78:73:44:d4:52:34:47:0c:64:9c:54:da:ac:
c8:0a:8b:ed:f3:78:37:2e:22:9c:9d:0b:45:5d:ef:
96:54:c6:e2:5b:84:8c:18:d4:4f:5d:30:cd:6a:f0:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5E:34:E2:77:5F:E9:69:40:6B:05:71:1F:CB:84:A9:B5:1F:36:A8
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:38:0d:a2:51:6c:a0:33:25:9e:72:21:4d:09:23:bc:57:97:
15:29:65:35:08:81:92:02:e5:a7:bd:5c:76:06:98:da:02:bc:
be:ed:bb:6b:c2:83:c2:d5:89:44:e0:3e:b2:db:f2:0d:1f:55:
03:f9:84:f6:b7:b0:c5:fd:da:b8:36:5c:34:4b:19:50:00:57:
42:30:04:48:99:29:5c:d6:83:d0:15:5b:05:d7:54:9b:bb:e2:
66:b2:8e:80:3e:ea:4c:03:3e:bb:1d:e2:bc:e6:db:1c:ae:2e:
61:0e:43:f8:56:9a:d2:0f:1a:c4:6a:fa:fd:f6:79:4e:94:b1:
d0:57:3c:1c:2f:b4:d9:ed:dc:0b:6c:63:1d:81:ab:94:f1:f5:
2d:04:44:a5:7a:6a:6f:84:fd:54:71:64:03:76:12:62:6a:a3:
d5:2e:e0:d8:01:5d:2c:9a:02:2f:d2:c1:07:54:59:4c:d6:58:
d5:11:06:eb:32:e1:1b:08:3d:5b:18:07:f2:25:31:8a:cd:ad:
cd:ce:6d:82:1b:a8:7b:fa:f1:47:02:1e:55:da:50:ed:b7:b6:
84:2f:16:28:e1:41:46:0e:ad:51:b6:84:ec:d5:40:b0:e8:d6:
5e:db:f6:ff:77:50:5f:1b:33:0e:19:99:97:5f:e1:d0:00:5c:
6c:d6:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:30 2026 by rpki-client