This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/d3XCpcyn0uAgmWptpHQjYP7UPLA.roa
File: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (raw, json)
Hash identifier: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=
Subject key identifier: 77:75:C2:A5:CC:A7:D2:E0:20:99:6A:6D:A4:74:23:60:FE:D4:3C:B0
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 019B7BA4DDF555ADB93DCC2E60E398B65973
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/d3XCpcyn0uAgmWptpHQjYP7UPLA.roa
Signing time: Thu 01 Jan 2026 22:19:20 +0000
ROA not before: Thu 01 Jan 2026 22:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47264
IP address blocks: 185.203.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:dd:f5:55:ad:b9:3d:cc:2e:60:e3:98:b6:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Jan 1 22:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7775c2a5cca7d2e020996a6da4742360fed43cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:40:b7:84:7e:bb:5e:6d:e9:f9:ca:13:77:
c4:f1:d1:e9:9a:31:97:a5:1d:c5:04:16:fe:81:75:
b0:2a:55:86:33:df:3c:05:90:14:72:e6:ea:70:a5:
34:0b:6e:fd:73:56:3b:17:df:61:bb:52:d4:d4:cc:
b2:aa:71:93:82:08:17:fb:19:d8:d4:6c:9b:ea:ca:
87:82:00:07:0c:0d:9d:7e:45:e1:d0:0a:97:31:ed:
df:07:93:17:0c:2c:87:31:83:1f:a3:b0:2c:d3:99:
99:56:d5:0d:4e:33:39:3c:b7:ac:d2:6a:29:12:ce:
35:f9:23:97:07:b9:08:72:28:e5:48:67:30:2a:a9:
05:86:38:5b:0b:00:0f:27:38:87:4f:fb:74:13:b5:
a4:06:b6:68:e4:97:ee:c8:73:4c:4a:55:cb:26:ef:
1b:df:ef:64:78:af:29:2b:0f:e7:b2:41:20:dd:df:
45:a7:d9:7c:e8:7b:b4:06:27:e1:6d:a9:0b:27:a1:
f4:fb:65:d4:bb:8c:63:17:23:22:1a:d5:4f:6e:db:
9a:d5:4d:80:b1:f4:8a:1a:ed:19:38:97:ac:e3:3f:
06:11:98:a8:57:ef:7f:3d:04:36:7b:5a:e4:45:bd:
0c:a6:f9:e3:a3:7b:2b:70:04:8d:11:c4:07:d4:7f:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:C2:A5:CC:A7:D2:E0:20:99:6A:6D:A4:74:23:60:FE:D4:3C:B0
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/d3XCpcyn0uAgmWptpHQjYP7UPLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:76:aa:9c:3d:81:9d:4a:9d:e9:7b:04:9b:23:c0:68:f7:22:
41:68:a0:4c:d6:10:df:98:38:35:4e:85:bc:19:a6:fc:3e:48:
06:af:f4:2d:d6:e6:c0:a6:49:d0:58:15:ff:87:e7:c5:7c:0b:
b3:c3:ca:96:1b:e4:7a:a4:88:35:e1:c2:04:35:cb:cc:fb:79:
f3:74:d8:66:a0:b8:85:78:c3:cc:87:6a:72:c2:09:da:75:59:
e2:18:05:99:70:21:b7:65:93:de:9d:3e:cf:2d:ac:66:e8:69:
21:27:4a:b7:12:e4:ec:40:52:ea:aa:59:28:93:89:db:0b:66:
a0:25:97:2c:d4:60:9f:32:a7:19:de:4a:f7:d8:86:32:cb:4e:
93:99:7e:d2:35:68:4d:51:fb:6a:20:53:19:14:f9:ed:c8:af:
e4:c0:84:2b:68:e5:67:56:b5:f3:ee:64:6f:29:ea:65:cb:2b:
b3:af:47:f0:35:19:04:77:66:4a:9a:9d:d9:10:3b:ae:0f:f4:
73:67:f6:a3:01:78:47:d5:db:d8:53:2a:19:2e:51:b4:a1:4b:
8e:99:ce:c7:c8:3d:40:79:9e:be:a9:cd:dc:6b:43:89:3b:e6:
4e:e0:32:bc:28:6f:eb:64:27:c3:fb:23:81:a0:55:49:b3:ca:
36:34:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:44 2026 by rpki-client