This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa
File: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (raw, json)
Hash identifier: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=
Subject key identifier: DE:03:32:96:6F:FB:91:D6:34:E4:DA:7E:1A:CD:54:8E:7D:93:A5:4C
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019B7CEDA534D6E52EF6A16ADF5AE62313B4
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa
Signing time: Fri 02 Jan 2026 04:18:27 +0000
ROA not before: Fri 02 Jan 2026 04:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199066
IP address blocks: 193.187.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:a5:34:d6:e5:2e:f6:a1:6a:df:5a:e6:23:13:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Jan 2 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de0332966ffb91d634e4da7e1acd548e7d93a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:36:47:6f:aa:5e:f2:1b:d8:b3:08:55:ec:
35:c5:12:8e:3b:0a:31:bd:4f:6b:16:e6:49:02:e1:
30:19:0f:7b:66:e5:0d:37:ed:c1:e9:8f:e7:ea:0c:
0e:c8:a3:31:90:b6:91:48:a3:91:8a:60:73:4a:5f:
aa:f1:e9:32:a4:cf:08:5b:23:ea:40:e2:07:e6:1e:
7a:1b:b6:56:18:9c:3e:24:31:b2:46:67:a0:bc:57:
6d:de:ee:99:19:94:8b:9b:4d:cc:a0:47:7c:e1:22:
0c:85:39:c5:e1:57:e5:37:23:2c:d0:f1:fe:0a:2c:
c5:f1:31:4f:bf:08:33:2d:01:f6:70:c9:31:74:91:
cf:d2:59:dc:0b:1a:29:c5:ee:6d:c7:75:94:2b:04:
d7:91:d4:84:8c:05:45:82:35:ec:33:17:53:48:f7:
cd:bf:9d:e7:05:34:7c:d2:08:35:cf:b6:bd:71:2d:
b7:ef:63:03:62:4a:28:2f:1f:0b:86:dc:06:22:de:
e4:b1:fb:e4:76:37:8a:07:ad:79:25:93:34:c3:cd:
1c:22:da:17:3a:73:0c:d5:e0:60:b0:89:c3:e0:66:
ac:2f:d7:e9:24:a9:38:3c:7c:a1:f8:5a:5c:d1:a3:
b3:d5:de:4c:be:84:2d:01:32:92:4e:8f:05:d2:f9:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:32:96:6F:FB:91:D6:34:E4:DA:7E:1A:CD:54:8E:7D:93:A5:4C
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.72.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3c:c3:08:91:7d:4b:84:5f:96:d3:af:94:bb:c5:ea:38:59:
2d:45:81:ff:95:05:7a:f4:80:f8:6a:db:63:5a:68:43:06:ad:
01:d2:5e:7b:2f:ff:9e:7a:ce:aa:74:e4:7b:45:2c:5e:fe:7d:
4d:a6:72:59:80:8b:16:72:f1:12:11:06:5f:f4:e2:cb:f8:c4:
fd:c7:4f:ad:76:97:a8:24:20:6d:f4:d5:8e:50:e9:76:0a:ce:
13:4c:ac:ca:df:54:c2:74:4e:2f:45:42:7f:d4:f5:f9:4f:eb:
cc:32:8b:51:7b:71:cc:96:88:2d:68:c6:c5:55:da:fc:8b:f4:
4b:ea:57:2f:f7:79:9d:6a:eb:94:d1:72:d0:c2:37:21:ad:49:
8a:66:6a:2f:97:96:a7:ed:43:12:41:32:05:51:91:39:08:fa:
35:7e:3c:86:7d:58:a9:b4:40:76:d9:1b:ee:f5:10:28:13:92:
52:c7:8b:f5:e6:59:b6:04:95:ae:e6:1e:6f:cc:d6:17:c4:cc:
d6:bf:da:96:fc:15:1a:6d:b8:b5:da:b9:e2:dd:1e:55:cb:12:
53:7c:72:8b:c0:ae:91:e4:40:99:a3:cb:11:f7:32:2c:55:1c:
d9:23:ea:59:ec:41:bd:62:95:c1:72:06:60:b1:9f:21:db:48:
9d:6c:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:01:16 2026 by rpki-client