This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa
File: 7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa (raw, json)
Hash identifier: ELHzePk+eTFwUV0lzyfOvVlVrH0Oe68AnbgtcOo/mUI=
Subject key identifier: EF:FE:8F:A8:C3:86:58:3B:C6:FF:46:B4:08:1A:59:0A:3A:0F:1F:73
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019B7EA55DEEADC44849CFF0FA0CFF53EEDA
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa
Signing time: Fri 02 Jan 2026 12:18:45 +0000
ROA not before: Fri 02 Jan 2026 12:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199669
IP address blocks: 194.38.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:5d:ee:ad:c4:48:49:cf:f0:fa:0c:ff:53:ee:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 2 12:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=effe8fa8c386583bc6ff46b4081a590a3a0f1f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:7a:c0:db:eb:d1:38:f9:a9:81:5f:61:74:
d3:a7:0e:de:47:a4:f4:d9:15:f4:32:bb:16:0b:69:
b5:1b:e8:26:5d:c2:0f:a0:ce:b0:93:d0:a7:c8:c4:
75:7b:03:1f:68:ee:25:3e:cf:f5:65:4e:ed:36:7c:
e1:32:69:66:0f:db:e7:df:7c:07:26:27:2f:99:f4:
d0:32:e3:59:35:56:bf:99:af:f5:ce:2d:23:ee:63:
e1:f2:76:60:45:f0:ba:b9:4e:60:86:d9:59:81:41:
7a:88:2c:8a:dd:0a:96:cd:20:17:86:7c:3e:9b:14:
22:11:e8:46:26:c8:a7:77:8f:76:37:db:e4:15:64:
9b:8f:e4:06:75:06:02:e7:6f:d8:7f:77:0e:8c:a3:
46:6b:b7:31:03:4c:8d:18:24:ec:ac:2f:4c:fe:4a:
25:2c:81:1c:88:3c:05:16:3a:80:6f:b7:4e:e6:a0:
2a:bc:ac:6d:cc:20:fa:61:e7:36:63:36:a9:e0:01:
75:c9:55:6b:58:53:9f:82:ee:75:cb:94:ca:8a:53:
45:3d:f5:ba:7a:c3:c1:c3:f1:51:4e:4e:0f:16:26:
31:87:d1:9b:b6:c4:51:4d:40:2f:01:e5:32:34:c2:
89:b6:b4:91:ff:48:ca:f4:b9:b5:c9:66:a6:91:90:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:8F:A8:C3:86:58:3B:C6:FF:46:B4:08:1A:59:0A:3A:0F:1F:73
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.11.0/24
Signature Algorithm: sha256WithRSAEncryption
12:31:8d:21:4f:38:6b:24:dd:ef:51:9d:04:df:48:cd:88:4c:
04:ef:65:c6:e7:14:db:b7:23:49:94:41:80:36:33:63:ed:5d:
b0:e7:b9:b6:27:36:7d:da:79:de:4c:c0:15:42:2c:34:95:88:
a6:60:8e:4f:56:c0:58:22:5d:e9:3e:dc:09:ef:22:7f:73:3f:
91:63:78:27:bf:58:3b:50:3e:08:b2:54:1f:67:b5:82:0b:67:
e9:4d:36:c3:28:34:e8:c6:2a:b4:02:75:d1:1f:2f:d1:e6:5a:
a2:a5:bf:27:50:dc:58:22:f2:c4:fa:6f:9d:18:83:cd:77:5b:
37:c0:77:7a:5f:38:89:e9:b6:5e:36:cf:bb:d3:d8:d5:5d:f6:
d9:fe:6f:54:b6:08:1c:04:da:e5:5b:a5:e9:eb:5d:e9:fc:57:
4c:73:bc:43:c6:bd:78:c9:c8:66:e4:52:10:1d:8a:b6:01:8e:
8b:29:68:91:53:43:5c:28:4a:fc:bd:58:6b:88:8a:6f:37:55:
ff:40:3e:4b:18:0b:01:a2:71:15:90:4d:1f:ae:89:70:13:ac:
92:af:b1:12:91:07:a3:4e:03:37:30:46:78:8c:95:85:1a:67:
36:fe:1c:01:38:e5:e4:73:58:04:3b:35:e2:cf:32:58:63:28:
08:52:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:04 2026 by rpki-client