This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2ASerleJe7QO3PMjL044j4rIkMU.roa
File: 2ASerleJe7QO3PMjL044j4rIkMU.roa (raw, json)
Hash identifier: HXiLOuFNHD8frGS8LK9ApbZ9cA9wZ5SMjtUbRIKUixI=
Subject key identifier: D8:04:9E:AE:57:89:7B:B4:0E:DC:F3:23:2F:4E:38:8F:8A:C8:90:C5
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019B7FF1BB5F8B4D95DB51B8D99731FEB314
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2ASerleJe7QO3PMjL044j4rIkMU.roa
Signing time: Fri 02 Jan 2026 18:21:47 +0000
ROA not before: Fri 02 Jan 2026 18:21:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206284
IP address blocks: 2a03:5840:13a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:bb:5f:8b:4d:95:db:51:b8:d9:97:31:fe:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 18:21:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8049eae57897bb40edcf3232f4e388f8ac890c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:95:35:de:c5:8d:ab:a9:be:e4:46:09:ce:
72:f8:57:90:38:63:10:d3:08:1e:8a:74:14:42:02:
46:6c:46:dd:58:9a:ef:52:44:31:25:0a:4f:24:c0:
cd:3b:c8:85:f7:e1:1a:69:a8:3c:c4:10:d6:60:fd:
61:06:d8:94:cb:71:43:62:a3:64:3f:45:42:11:14:
95:f3:da:4d:5c:74:78:46:c8:56:a0:2f:dc:0d:75:
e0:ed:25:7d:91:83:bf:d5:9b:18:94:5a:e2:b1:2e:
a8:ba:b3:55:81:bf:e5:9c:e8:2c:8e:89:2a:ac:84:
c7:bf:30:42:c3:16:c3:54:8b:8a:7e:77:7c:08:91:
25:f1:09:22:c8:b2:96:94:a1:ba:4d:1a:d7:e6:40:
b3:f4:0d:dd:ba:b7:b8:85:47:ef:26:ac:f3:a8:5f:
ed:b4:8a:07:43:5a:6c:a6:78:2f:4d:5c:d2:1f:53:
f2:1c:23:73:86:d7:90:4e:13:94:23:b0:cf:be:17:
ae:a0:b9:96:ed:bb:4c:2d:29:6f:10:1b:8d:6a:44:
8f:09:a2:89:6f:27:8a:05:00:2a:5b:8d:37:1c:21:
e5:d8:01:ac:40:31:2e:ac:ed:a0:dd:c9:ec:43:96:
02:89:68:cb:7a:fd:d4:ef:0e:84:d8:a6:ee:53:c1:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:9E:AE:57:89:7B:B4:0E:DC:F3:23:2F:4E:38:8F:8A:C8:90:C5
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/2ASerleJe7QO3PMjL044j4rIkMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:13a::/48
Signature Algorithm: sha256WithRSAEncryption
64:39:0a:99:b7:cb:5e:32:7f:24:89:5f:b9:e0:ba:8d:e7:f4:
6c:e6:6b:47:3e:31:85:7b:96:4a:12:6f:be:f8:a0:92:12:99:
2f:bb:8e:3d:fc:8c:e9:47:5e:6f:ba:ef:66:97:24:bb:44:01:
3e:db:18:b8:86:50:1d:e7:6d:9d:37:dd:3f:2b:3c:cb:ff:38:
f9:21:f5:d4:d1:92:c2:8e:1b:9b:c0:de:db:c5:9c:fa:ee:4a:
dd:06:ab:f6:cf:00:37:3e:ae:71:78:b7:88:bd:9b:d8:21:3a:
09:04:f3:31:c6:48:35:8a:d3:2f:d1:58:5b:67:a7:08:12:a7:
99:2a:00:b7:df:e8:65:5c:3a:09:a8:3b:2c:93:fa:5f:21:94:
a5:2a:06:5d:99:fe:90:21:36:38:eb:06:a7:62:2e:65:91:9a:
77:7b:f8:c4:0d:59:e7:21:96:99:92:5e:c6:80:aa:43:f7:be:
7e:94:ba:6d:fc:b3:33:18:83:16:73:b6:ba:3b:5d:67:2e:2c:
8e:86:a3:9f:6b:8b:d3:9e:47:9e:bd:77:31:ed:eb:4c:10:67:
5e:94:91:8e:8e:a2:46:5e:30:bc:c6:43:b9:0c:8a:fa:d7:b9:
d8:b3:7d:a6:a1:2f:92:67:1c:71:74:98:0c:46:a6:a9:c4:ae:
7e:12:3d:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt/8btfi02V21G42Zcx/rMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODA0OWVhZTU3ODk3YmI0MGVkY2YzMjMyZjRlMzg4ZjhhYzg5MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5WVNd7FjaupvuRGCc5y+FeQOGMQ
0wgeinQUQgJGbEbdWJrvUkQxJQpPJMDNO8iF9+Eaaag8xBDWYP1hBtiUy3FDYqNk
P0VCERSV89pNXHR4RshWoC/cDXXg7SV9kYO/1ZsYlFrisS6ourNVgb/lnOgsjokq
rITHvzBCwxbDVIuKfnd8CJEl8QkiyLKWlKG6TRrX5kCz9A3dure4hUfvJqzzqF/t
tIoHQ1pspngvTVzSH1PyHCNzhteQThOUI7DPvheuoLmW7btMLSlvEBuNakSPCaKJ
byeKBQAqW403HCHl2AGsQDEurO2g3cnsQ5YCiWjLev3U7w6E2KbuU8GkNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNgEnq5XiXu0DtzzIy9OOI+KyJDFMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvMkFTZXJsZUplN1FPM1BNakwwNDRqNHJJa01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAE6
MA0GCSqGSIb3DQEBCwUAA4IBAQBkOQqZt8teMn8kiV+54LqN5/Rs5mtHPjGFe5ZK
Em+++KCSEpkvu449/IzpR15vuu9mlyS7RAE+2xi4hlAd522dN90/KzzL/zj5IfXU
0ZLCjhubwN7bxZz67krdBqv2zwA3Pq5xeLeIvZvYIToJBPMxxkg1itMv0VhbZ6cI
EqeZKgC33+hlXDoJqDssk/pfIZSlKgZdmf6QITY46wanYi5lkZp3e/jEDVnnIZaZ
kl7GgKpD975+lLpt/LMzGIMWc7a6O11nLiyOhqOfa4vTnkeevXcx7etMEGdelJGO
jqJGXjC8xkO5DIr617nYs32moS+SZxxxdJgMRqapxK5+Ej1g
-----END CERTIFICATE-----
Generated at Fri Jan 23 15:20:52 2026 by rpki-client