This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa
File: R7QMGmuA2wDaBVvULaWvGaz5Evg.roa (raw, json)
Hash identifier: fySPMSDcnymZQ851W9mCK2einppIFGfSXw6lDW7Rxuo=
Subject key identifier: 47:B4:0C:1A:6B:80:DB:00:DA:05:5B:D4:2D:A5:AF:19:AC:F9:12:F8
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019B7A5B715B67E1C7ABD8B5F79A7B44EB77
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa
Signing time: Thu 01 Jan 2026 16:19:31 +0000
ROA not before: Thu 01 Jan 2026 16:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 45.149.96.0/22 maxlen: 24
91.212.215.0/24 maxlen: 24
91.236.192.0/24 maxlen: 24
95.36.80.0/20 maxlen: 24
212.85.56.0/21 maxlen: 24
217.18.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:71:5b:67:e1:c7:ab:d8:b5:f7:9a:7b:44:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Jan 1 16:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b40c1a6b80db00da055bd42da5af19acf912f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:b2:87:ca:d1:65:21:64:99:c5:1a:dd:77:
55:00:c4:4d:69:83:8d:c3:55:92:3d:6b:36:f2:88:
0c:f6:07:ed:71:87:4e:69:cf:7d:bc:81:af:96:93:
d6:25:cf:2c:b8:0b:cf:ca:a2:75:32:7d:b6:89:81:
0c:6b:d7:11:e0:8c:2f:7c:4d:c1:2d:fe:6c:e6:9e:
af:ba:5b:97:a9:3a:61:6d:d6:3d:a6:de:0c:ff:cc:
1b:66:d7:85:aa:2c:08:59:35:d1:ae:6e:79:51:0e:
ba:f0:8a:1b:3e:a7:2b:e5:02:46:27:b5:20:ce:b6:
06:d3:d0:5b:30:4f:d7:6b:98:72:ed:8b:14:73:9f:
48:50:c3:da:08:82:eb:2f:a8:62:4e:d7:47:44:3c:
1e:f1:94:4e:26:47:74:9a:52:88:dc:cd:12:e9:6a:
8c:ce:0d:3f:9a:01:b9:09:20:ff:d3:9e:59:b3:79:
4c:dd:22:8a:e6:9c:0c:c7:e8:f9:d7:84:a2:6f:a2:
f4:6e:e9:28:db:08:0f:d8:53:91:93:9a:ce:91:4e:
4a:ee:bb:d6:64:07:37:8f:07:22:d7:b9:e0:29:0e:
db:ae:b5:95:23:1b:3f:f8:f4:71:13:57:eb:08:45:
ce:e3:5a:01:3c:4d:15:66:52:3b:d8:68:8f:c6:df:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:0C:1A:6B:80:DB:00:DA:05:5B:D4:2D:A5:AF:19:AC:F9:12:F8
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.96.0/22
91.212.215.0/24
91.236.192.0/24
95.36.80.0/20
212.85.56.0/21
217.18.80.0/24
Signature Algorithm: sha256WithRSAEncryption
25:eb:1b:18:e3:8b:a3:3c:71:80:73:ab:7f:8d:48:0b:2c:78:
05:41:57:ed:97:91:35:34:17:92:12:3d:50:c0:2a:0d:15:6c:
f6:86:40:71:d8:7f:17:ee:f1:0f:2c:d2:9f:46:e8:0f:9a:74:
ce:05:34:fe:0d:86:50:d5:bf:f4:c5:0f:42:a2:bf:cb:fd:4a:
5f:8e:74:ef:ca:49:a4:1d:74:01:8c:19:f5:25:26:85:98:45:
72:89:97:bb:43:ec:c1:71:ee:18:f6:82:b9:7f:60:1c:64:d2:
dc:17:3c:2c:bb:1b:63:58:da:7f:4c:ee:93:fd:71:0e:cb:cf:
30:e5:3d:6b:25:d2:fc:69:3c:7a:0c:e2:bd:9b:71:7a:64:23:
9c:b6:a8:ab:53:10:a3:6a:d3:39:94:34:88:f0:8d:f2:1d:78:
22:31:00:91:35:7e:48:d4:d7:96:06:2e:f1:1f:99:e0:45:35:
39:bd:f8:12:53:ac:c4:c0:4e:52:b4:d6:95:00:89:58:31:61:
de:36:2b:3e:49:6a:85:08:82:23:f7:89:83:37:27:ac:28:53:
6e:62:4e:fe:2b:21:7f:30:80:0b:70:36:20:c9:f2:28:83:57:
fd:f7:fa:ab:e9:f2:ff:80:26:5b:ab:c6:40:87:db:27:8e:5f:
4b:55:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:11 2026 by rpki-client