This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa
File: 7xOGvUid5wgR_viXaJCs-_E41Dc.roa (raw, json)
Hash identifier: scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=
Subject key identifier: EF:13:86:BD:48:9D:E7:08:11:FE:F8:97:68:90:AC:FB:F1:38:D4:37
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019B7CEE6E59F514E737830ED859C9D67891
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa
Signing time: Fri 02 Jan 2026 04:19:18 +0000
ROA not before: Fri 02 Jan 2026 04:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208063
IP address blocks: 2a14:ae00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:6e:59:f5:14:e7:37:83:0e:d8:59:c9:d6:78:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jan 2 04:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef1386bd489de70811fef8976890acfbf138d437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:98:2e:8d:99:ab:ef:ed:48:66:55:b1:df:
f6:c7:78:65:6f:c9:e1:6e:52:48:f4:97:1a:a5:3d:
6a:46:79:90:fb:f9:6a:cb:3e:bb:a9:58:86:ea:5e:
9a:7e:0d:04:b5:e3:05:32:4b:36:2f:f6:21:1f:10:
68:88:53:d6:e5:e5:36:92:92:84:b5:c6:6f:74:26:
d4:ad:7f:3c:72:19:e6:dd:37:4d:55:88:e7:6f:1c:
7f:41:37:66:11:69:52:47:f3:fd:8b:0e:98:3a:28:
2c:62:49:55:5e:29:d5:95:37:b2:b7:0f:37:88:f4:
e9:7b:f4:b5:ab:72:6a:9d:5b:3d:7d:6b:cd:dd:ca:
63:fd:c7:a3:18:7f:18:b5:31:c6:51:73:33:c4:82:
bb:45:94:02:5d:67:35:ee:15:44:14:a5:d9:d2:15:
39:1c:29:59:28:9d:71:1c:cb:89:68:63:2d:7e:1f:
6c:b1:fe:a1:43:9f:aa:29:de:71:6d:93:94:66:f2:
64:af:d9:17:b5:8d:31:47:d6:18:25:f8:fb:f6:c9:
9d:25:19:d2:b0:7b:05:a2:00:3c:47:4c:b1:4b:6a:
7d:e9:58:93:82:c8:cb:d1:14:64:87:f5:ba:bb:a9:
89:5e:cb:ca:fe:81:90:68:de:9e:fb:01:67:5e:7c:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:86:BD:48:9D:E7:08:11:FE:F8:97:68:90:AC:FB:F1:38:D4:37
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:2::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e2:14:e0:94:d0:de:b8:84:db:c1:09:0a:bf:f4:97:d8:40:
83:57:eb:09:54:9d:84:e5:62:a5:31:39:7a:f6:bb:8e:01:93:
3f:51:74:99:de:39:c9:c3:f9:92:52:78:0a:d7:a6:e0:6f:ca:
f8:94:9d:6c:fc:9a:4f:43:eb:d5:23:3c:83:ed:ad:10:8b:4a:
d0:17:0b:fa:e2:25:a4:89:2f:3f:48:64:cc:74:cc:ec:03:32:
64:3b:bd:79:2b:22:d3:2d:b5:29:87:be:6b:35:8e:80:59:db:
8a:7e:78:6f:d2:d7:dc:c1:30:88:f6:f8:e9:70:cf:cf:ab:61:
b8:5a:79:0d:e0:39:31:77:85:fb:45:6e:1e:28:93:33:42:fe:
bc:85:18:7b:6e:ca:a1:de:49:b2:3f:15:5b:3e:10:16:c8:b3:
e8:5f:16:85:18:84:62:40:ca:73:d5:a6:e5:c6:3c:4d:23:54:
02:f6:7c:21:4a:8c:3d:75:fe:24:99:d5:10:dc:e0:8d:1d:11:
97:cf:de:0f:a7:70:2e:57:7a:0c:70:a4:76:58:f8:67:da:b0:
72:cd:9c:81:d1:15:7b:ef:35:09:6b:4b:cf:f6:c3:45:cb:0c:
e0:85:de:6c:df:ed:61:9a:11:7e:1c:d4:f6:f4:68:59:44:77:
61:4e:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:28 2026 by rpki-client