This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa
File: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (raw, json)
Hash identifier: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=
Subject key identifier: ED:19:5A:F5:05:67:7E:CC:65:CF:A6:3A:36:6F:CD:99:6D:F1:5F:AE
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019B7910851CBB15B09D0C848C366D7532DF
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa
Signing time: Thu 01 Jan 2026 10:18:04 +0000
ROA not before: Thu 01 Jan 2026 10:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49607
IP address blocks: 81.19.111.0/24 maxlen: 24
83.217.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:85:1c:bb:15:b0:9d:0c:84:8c:36:6d:75:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 1 10:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed195af505677ecc65cfa63a366fcd996df15fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3f:8d:68:69:c2:52:e0:d7:96:9d:24:3d:40:
06:84:97:7c:8a:5f:6f:76:69:eb:66:87:0f:09:ec:
3e:80:d1:81:b6:38:5d:8a:e7:d9:10:b2:59:cd:c5:
4a:b3:c5:ab:69:9e:60:a8:f0:07:d8:d6:5a:8d:49:
4f:ab:3e:d5:58:6b:c9:5f:14:42:e9:bd:de:5a:2f:
3c:fb:69:c9:1e:8f:1a:b1:48:86:a5:54:8d:7a:71:
76:ce:6e:af:bd:ba:47:6e:71:1e:68:e1:23:89:81:
42:f3:02:e3:16:ae:c3:67:a1:4d:d8:e9:e0:15:9a:
5f:f3:a7:68:7f:fe:d4:a4:09:cf:b1:be:37:b7:e1:
b1:01:d2:b8:a8:04:0f:b1:ef:75:91:8f:a0:b3:50:
72:7c:e6:3b:f7:7c:63:9f:72:0e:e2:e5:17:06:1f:
b5:95:f9:0d:9f:48:ef:f4:9e:fb:c7:9a:9b:ed:82:
de:28:cd:7b:7d:c2:9b:22:7d:d0:3a:bf:9c:55:0c:
75:eb:be:a6:83:8d:9e:d8:5d:5e:63:b4:30:35:15:
68:d2:8e:b8:70:fa:12:d6:70:75:96:47:2d:ee:59:
76:c8:c3:e9:29:d7:01:b7:d5:1c:e9:d9:36:33:60:
a2:99:2c:98:c2:5d:8d:be:dc:4d:e7:d3:4f:78:b5:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:19:5A:F5:05:67:7E:CC:65:CF:A6:3A:36:6F:CD:99:6D:F1:5F:AE
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.111.0/24
83.217.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:27:62:16:e9:62:24:95:73:13:22:65:19:5d:f4:8d:ce:a3:
3f:2f:18:f6:ff:65:26:38:db:7c:1f:85:1d:11:a4:3a:42:3f:
bf:0c:bd:da:0f:9a:0f:82:bd:93:b9:33:f1:91:4f:bb:21:c6:
bd:13:85:37:a4:d0:a6:6e:24:47:a0:0b:ad:ca:41:46:dd:72:
20:44:f2:67:cc:63:1e:55:0b:9d:7d:75:03:87:1d:cd:13:8e:
dd:4f:95:f7:ef:82:8e:a2:c4:2c:da:60:91:d9:3f:6d:c3:aa:
25:89:ad:87:36:e4:fb:4b:c2:28:fd:e4:b3:c6:52:7d:c4:73:
22:c2:8d:1f:32:ec:cf:dc:0f:99:b3:40:54:c9:04:71:e3:f9:
50:98:c0:e9:24:43:0d:ee:cd:3e:51:c3:30:04:f3:98:67:75:
fa:72:af:b2:dd:44:7e:7b:ac:fa:ab:fb:69:68:f0:31:b2:b5:
b8:00:bd:90:04:c4:2a:23:c6:ee:27:80:9e:b4:c4:06:39:2b:
8d:5f:80:05:25:10:5b:70:8f:e2:e0:b9:b8:33:4d:40:c0:d5:
56:66:cd:f7:ad:89:a1:c8:6d:3e:79:22:d7:16:cb:9c:44:a3:
e6:58:80:ff:96:59:cd:23:1d:5a:0e:e0:b8:a1:5f:c5:c8:18:
f6:da:f1:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt5EIUcuxWwnQyEjDZtdTLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDE5NWFmNTA1Njc3ZWNjNjVjZmE2M2EzNjZmY2Q5OTZkZjE1ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T+NaGnCUuDXlp0kPUAGhJd8il9v
dmnrZocPCew+gNGBtjhdiufZELJZzcVKs8WraZ5gqPAH2NZajUlPqz7VWGvJXxRC
6b3eWi88+2nJHo8asUiGpVSNenF2zm6vvbpHbnEeaOEjiYFC8wLjFq7DZ6FN2Ong
FZpf86dof/7UpAnPsb43t+GxAdK4qAQPse91kY+gs1ByfOY793xjn3IO4uUXBh+1
lfkNn0jv9J77x5qb7YLeKM17fcKbIn3QOr+cVQx1676mg42e2F1eY7QwNRVo0o64
cPoS1nB1lkct7ll2yMPpKdcBt9Uc6dk2M2CimSyYwl2NvtxN59NPeLUpHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO0ZWvUFZ37MZc+mOjZvzZlt8V+uMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvN1JsYTlRVm5mc3hsejZZNk5tX05tVzN4WDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURNvAwQA
U9noMA0GCSqGSIb3DQEBCwUAA4IBAQCiJ2IW6WIklXMTImUZXfSNzqM/Lxj2/2Um
ONt8H4UdEaQ6Qj+/DL3aD5oPgr2TuTPxkU+7Ica9E4U3pNCmbiRHoAutykFG3XIg
RPJnzGMeVQudfXUDhx3NE47dT5X374KOosQs2mCR2T9tw6olia2HNuT7S8Io/eSz
xlJ9xHMiwo0fMuzP3A+Zs0BUyQRx4/lQmMDpJEMN7s0+UcMwBPOYZ3X6cq+y3UR+
e6z6q/tpaPAxsrW4AL2QBMQqI8buJ4CetMQGOSuNX4AFJRBbcI/i4Lm4M01AwNVW
Zs33rYmhyG0+eSLXFsucRKPmWID/llnNIx1aDuC4oV/FyBj22vGV
-----END CERTIFICATE-----
Generated at Mon Jan 12 12:27:28 2026 by rpki-client