This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A2MJwxvSKxFf4lwowFg17QbtcrM.roa
File: A2MJwxvSKxFf4lwowFg17QbtcrM.roa (raw, json)
Hash identifier: +OlyamX9gPbE841FBleMiD40fX/QhDuWvnJ1mUnOqXE=
Subject key identifier: 03:63:09:C3:1B:D2:2B:11:5F:E2:5C:28:C0:58:35:ED:06:ED:72:B3
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019B7FF1BFE876A34F7B184C407EBF2E147A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A2MJwxvSKxFf4lwowFg17QbtcrM.roa
Signing time: Fri 02 Jan 2026 18:21:48 +0000
ROA not before: Fri 02 Jan 2026 18:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210348
IP address blocks: 2a03:5840:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:bf:e8:76:a3:4f:7b:18:4c:40:7e:bf:2e:14:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 18:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=036309c31bd22b115fe25c28c05835ed06ed72b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:af:98:22:f7:04:da:f3:84:da:40:0b:f4:
16:ce:5c:6a:4a:f0:ec:7b:03:dc:ea:59:66:85:8a:
da:ba:ff:4f:43:f1:b5:41:8e:c6:93:21:c2:30:f2:
a3:63:f8:ea:5c:2e:2c:8f:39:22:68:90:f7:ac:5f:
93:39:22:83:36:4b:b5:2f:48:98:96:13:b6:3d:0e:
37:7b:ad:97:06:30:6e:a2:8b:dd:5a:4c:3c:8d:65:
be:08:c6:56:7f:45:10:50:89:2e:20:dd:8d:ed:31:
c0:7e:6a:90:6f:97:81:27:34:c1:c9:9c:58:c0:83:
9c:36:b0:3b:d3:32:78:c4:02:cb:f0:58:c5:26:67:
88:2c:13:a8:0b:18:12:23:2a:47:7a:30:22:e6:de:
3e:dc:9c:37:a8:2d:fe:d4:d9:77:1e:8f:1d:7d:92:
33:fc:5e:f3:c2:40:1b:ac:d8:93:82:17:a7:ed:cd:
8d:9f:30:4f:c1:4b:15:06:e9:8f:56:ac:16:4f:08:
98:03:fe:65:d6:b1:f5:5c:83:9f:30:2a:1c:16:84:
d5:87:c6:eb:b6:1c:20:08:70:84:42:3e:4c:3c:4e:
a6:76:79:67:6a:1d:16:f7:99:cf:ef:1e:5a:b4:96:
ce:0e:03:0b:c4:7c:81:4c:c7:63:62:c1:f3:63:d3:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:09:C3:1B:D2:2B:11:5F:E2:5C:28:C0:58:35:ED:06:ED:72:B3
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/A2MJwxvSKxFf4lwowFg17QbtcrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:150::/44
Signature Algorithm: sha256WithRSAEncryption
16:fb:01:a8:ca:97:eb:d9:3b:b8:7b:b1:7a:e8:17:63:f4:ca:
79:4b:62:b1:0c:57:0b:c5:06:ba:a9:07:4b:00:d8:a0:83:6a:
f4:fe:9a:32:8c:47:7c:a6:9d:7b:d6:99:30:56:2f:10:e7:fd:
27:70:4d:a9:0a:c7:af:a0:b5:4f:55:93:c9:12:75:39:c1:7e:
0e:ed:88:88:6c:c3:55:3e:56:21:5b:4f:3a:22:63:5b:0e:97:
18:fb:fb:9a:bb:80:9f:2c:03:8b:88:bf:74:65:c3:87:18:ed:
f1:45:67:35:d2:6c:a9:22:14:48:09:b9:26:34:a6:f2:bd:e7:
4a:84:2b:05:52:5f:c8:0d:01:c8:e2:93:6a:81:05:e5:bd:89:
72:3b:73:0e:56:4d:24:06:41:ea:df:7a:cd:50:2b:fb:a3:c0:
5e:fa:6d:44:8e:53:ee:fa:ef:5f:b2:13:24:9c:e0:94:fa:60:
f1:57:1b:8c:b8:ff:e5:f2:16:c3:67:b1:87:07:5e:0b:01:5c:
4d:76:73:2e:64:c1:61:e5:bd:a8:53:3d:c0:be:cf:af:ab:f2:
d7:f6:8b:cf:b1:4f:60:47:4d:4e:c1:59:29:39:41:ce:c6:bc:
d3:e4:6a:cd:f9:59:34:7f:69:62:c3:1c:c9:96:bc:da:2d:66:
a2:89:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:22:28 2026 by rpki-client