This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa
File: LfVnxAgXtVEvJgCus51DV85uql0.roa (raw, json)
Hash identifier: ClR1z6z7TPastgWI2d+GsWfoZzv7l12W4bHdbjqvyKk=
Subject key identifier: 2D:F5:67:C4:08:17:B5:51:2F:26:00:AE:B3:9D:43:57:CE:6E:AA:5D
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019B79EBB35C1C4BB1FEF4FB1A8B7EAC0992
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa
Signing time: Thu 01 Jan 2026 14:17:28 +0000
ROA not before: Thu 01 Jan 2026 14:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206509
IP address blocks: 194.207.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:b3:5c:1c:4b:b1:fe:f4:fb:1a:8b:7e:ac:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 14:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2df567c40817b5512f2600aeb39d4357ce6eaa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:06:b1:e1:72:fb:e3:9c:f4:e0:66:6a:64:
a2:a7:b3:43:ee:83:59:46:bd:de:e0:57:4e:af:6f:
b3:83:e8:8f:4f:91:8f:a2:e2:d2:dc:1a:de:b4:38:
e1:a8:da:0e:cb:5e:1e:6d:e2:20:71:ca:5c:e2:ef:
ff:fb:98:cd:42:f0:d9:4c:a0:56:a5:89:7f:4a:34:
3a:60:87:22:7d:00:2f:cd:b7:8d:49:17:40:b0:6f:
2c:e7:83:98:81:4b:2a:4d:02:08:11:01:60:c1:75:
8c:be:34:73:67:16:c8:85:0a:72:9d:7c:a8:97:80:
2e:79:e0:eb:78:5d:e0:09:3d:fa:02:55:d3:65:42:
70:fb:e0:59:6d:37:73:da:4d:98:9f:2c:6d:ef:d7:
12:8e:f2:54:9e:5e:37:54:b5:57:16:2c:5b:64:9d:
a6:e6:bf:ee:eb:48:65:d5:e5:41:fb:e8:fe:f4:fb:
89:a6:3c:5c:52:0e:b2:7e:f7:de:b2:db:7b:8e:85:
1f:a0:d8:8b:39:e1:f5:60:e0:d0:99:51:65:2b:7b:
a8:2e:ca:6a:73:89:72:2a:d6:91:de:7e:fa:31:a8:
d7:3f:59:d7:36:2f:c4:ae:e7:6c:c1:66:9c:84:18:
a0:0a:ad:5e:cf:83:13:01:d1:c1:33:eb:d2:f0:15:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:67:C4:08:17:B5:51:2F:26:00:AE:B3:9D:43:57:CE:6E:AA:5D
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/LfVnxAgXtVEvJgCus51DV85uql0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
19:44:38:bd:d3:04:47:1d:42:92:57:d1:af:c0:86:97:f2:39:
8b:eb:21:3a:39:1e:5a:da:51:3c:74:9b:1a:e8:8b:81:32:b5:
c5:66:97:3e:8b:2e:f5:35:05:51:26:a9:48:21:42:39:30:b6:
81:58:92:e0:a2:36:91:dd:93:de:12:2a:dc:0c:a1:4a:ab:6e:
a1:28:40:4c:dc:1c:65:2e:ca:c6:46:71:fa:c6:a5:56:f0:93:
f4:11:7a:c7:bc:d7:ed:25:a2:88:2a:ae:9a:e1:49:df:1b:16:
54:4a:62:e9:74:f2:46:b2:c9:99:28:5c:12:b5:de:c8:4f:25:
f0:5c:93:4b:e3:d5:a6:a7:da:bc:50:9b:f9:a4:5a:e6:73:76:
2d:0c:08:9b:78:ff:d2:cf:cf:86:87:ba:64:b8:65:cc:0d:79:
2f:1c:8e:4b:a1:19:1b:60:ea:f4:e7:71:00:1f:2b:f7:b3:99:
19:1a:5a:d7:24:4e:7a:3b:5e:81:9a:28:da:b6:e5:da:dd:af:
df:57:d2:12:ff:67:6a:7b:ff:de:05:75:b9:33:a7:ed:fe:80:
22:12:22:7a:9f:59:94:ad:3f:7c:8c:90:47:99:e6:b9:4d:09:
3d:ef:ed:e4:53:bc:eb:c0:15:98:b5:8b:bf:d7:0b:e0:ab:fb:
48:90:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:43 2026 by rpki-client