This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/7LMaVQHIURLIHhJQQlzIccTVpOE.roa
File: 7LMaVQHIURLIHhJQQlzIccTVpOE.roa (raw, json)
Hash identifier: 5km+tw1h03H4l3wkZKI+O7HJSeNoMxRPhDOUY2h8vd4=
Subject key identifier: EC:B3:1A:55:01:C8:51:12:C8:1E:12:50:42:5C:C8:71:C4:D5:A4:E1
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 019B7F838846E5ABC1EEA3633D41E20EDF5A
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/7LMaVQHIURLIHhJQQlzIccTVpOE.roa
Signing time: Fri 02 Jan 2026 16:21:25 +0000
ROA not before: Fri 02 Jan 2026 16:21:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 91.199.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:88:46:e5:ab:c1:ee:a3:63:3d:41:e2:0e:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Jan 2 16:21:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecb31a5501c85112c81e1250425cc871c4d5a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:cd:c7:05:9e:08:44:47:33:6e:3c:f1:8a:
c3:5b:87:15:d7:7a:ca:c0:44:ea:16:ed:23:54:c4:
b6:5f:e0:ab:ef:f2:3b:44:a2:f5:c2:d9:ea:30:45:
93:78:92:1b:18:78:a4:fd:ac:68:55:82:a2:43:a1:
9f:f9:54:7d:e2:8c:75:12:24:32:36:2e:fc:4c:1d:
55:f0:6f:41:64:44:d3:c1:86:ee:34:82:d3:ec:ff:
7d:22:52:e8:b1:6d:1f:52:cd:af:fa:1c:28:6b:3b:
bd:fc:f4:bd:50:d8:d3:8e:d7:4b:bd:7f:15:20:e7:
fd:15:3e:1e:91:b1:cd:b6:8f:cc:34:40:6a:8b:b8:
f9:8f:7c:46:dc:48:60:34:d4:f5:0f:8a:ac:a0:40:
95:f9:90:a3:ed:a2:18:2f:22:29:3d:83:a2:2e:f7:
b3:e0:7a:10:4a:dc:c4:2a:c6:eb:7b:87:c9:a8:47:
67:f6:e6:d0:fc:af:4a:1b:e7:c5:5f:a8:d7:ca:95:
80:ad:92:b4:1c:16:a4:5d:8e:e8:ad:67:7e:81:6a:
c9:27:3d:78:02:e4:5e:eb:bf:9b:15:79:be:20:68:
8a:00:92:cf:4e:37:6e:67:3f:32:20:56:fc:62:91:
c7:35:59:c6:a6:f8:bf:63:14:b1:21:72:9a:8d:f7:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:1A:55:01:C8:51:12:C8:1E:12:50:42:5C:C8:71:C4:D5:A4:E1
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/7LMaVQHIURLIHhJQQlzIccTVpOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c8:a7:74:ea:c5:e3:26:89:5f:c9:de:d2:a6:a3:da:26:ac:
73:92:51:b8:1b:80:07:8d:bf:a1:b0:79:56:9a:8b:58:52:5a:
a6:cf:73:c5:52:48:99:37:4c:d7:de:4f:5a:af:c9:2a:df:a4:
fa:f6:76:fc:21:1f:5a:f0:0f:05:5a:ce:83:05:65:dd:ea:d0:
e2:78:fc:24:2f:5e:fd:6d:80:8a:a5:4d:6e:b3:6d:b4:d2:f2:
84:02:fc:d5:d1:e1:cb:10:38:2b:f4:1e:0e:70:ce:3f:f9:7e:
d9:2b:7b:7c:ab:61:a7:30:04:7a:10:b7:0e:30:2b:a8:98:51:
46:c9:b6:46:62:73:55:38:2c:e5:d2:5d:5f:01:bc:a9:54:da:
42:6e:73:75:6e:e4:f7:3b:4c:2a:30:88:f1:67:e9:80:08:7f:
76:e4:3d:e9:b1:f4:19:24:ee:59:51:3f:c3:0b:ae:25:33:93:
c6:a2:5f:c0:01:87:1b:0c:2b:c9:d1:e4:c6:24:0a:08:27:d0:
e0:5a:52:ee:f7:e4:cd:d2:28:6c:e9:a1:44:d9:e3:7d:16:2f:
f3:98:0a:06:a9:81:75:b3:cf:ad:87:b9:a8:b2:9a:4e:ff:f7:
a2:34:7a:41:fc:9b:12:bd:0e:f7:44:83:2c:92:5e:64:ec:db:
a9:f5:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:58:20 2026 by rpki-client