This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/t-RajiZKm0I7iCnwIQb972khycw.roa
File: t-RajiZKm0I7iCnwIQb972khycw.roa (raw, json)
Hash identifier: lmVvfyej95ql6NLfgrWbpzZ9Tr5bIz/3Pg6eV1wNV+E=
Subject key identifier: B7:E4:5A:8E:26:4A:9B:42:3B:88:29:F0:21:06:FD:EF:69:21:C9:CC
Certificate issuer: /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial: 019B7EA56863C0E5E5BF58051479FCCC4149
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/t-RajiZKm0I7iCnwIQb972khycw.roa
Signing time: Fri 02 Jan 2026 12:18:47 +0000
ROA not before: Fri 02 Jan 2026 12:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8301
IP address blocks: 178.208.192.0/19 maxlen: 24
185.74.72.0/22 maxlen: 24
185.74.72.0/24 maxlen: 24
185.74.74.0/24 maxlen: 24
185.74.75.0/24 maxlen: 24
195.244.192.0/19 maxlen: 24
195.244.204.0/24 maxlen: 24
212.120.224.0/19 maxlen: 24
212.120.236.0/24 maxlen: 24
212.120.244.0/24 maxlen: 24
212.120.250.0/24 maxlen: 24
217.65.48.0/20 maxlen: 24
2a01:8c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:68:63:c0:e5:e5:bf:58:05:14:79:fc:cc:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Validity
Not Before: Jan 2 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7e45a8e264a9b423b8829f02106fdef6921c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:cd:e7:37:b9:bd:66:e9:02:48:30:e1:d6:
47:55:0b:e7:bf:10:4a:27:03:b1:d0:83:56:13:68:
12:c1:5f:3b:38:18:36:9c:45:53:fe:ae:74:f9:bd:
4c:e7:c1:c5:cc:2d:44:de:b9:e9:51:d7:59:4c:a4:
46:94:b3:fa:95:98:c4:07:1f:c4:ec:78:ad:27:81:
af:e8:02:94:3f:70:49:54:60:68:e9:9e:ae:46:1c:
52:2c:a0:f2:7d:d7:fd:69:73:7f:ef:af:38:fa:ca:
82:db:2c:ef:77:44:0d:26:87:4c:49:05:e3:e5:bd:
cd:54:10:4d:db:28:17:c2:da:7f:f8:5e:1f:85:58:
00:40:e4:cc:06:39:de:4b:e9:ef:6c:05:2e:07:9f:
a8:ed:cd:17:b3:bb:72:d6:45:69:09:47:48:e2:b5:
35:d5:87:88:4b:90:d4:fb:40:be:49:2c:7d:e0:cf:
e8:77:95:c1:5c:47:4a:fe:37:0e:17:d5:fb:b4:6b:
0e:ed:a1:ec:a7:f2:dc:cd:6d:ec:51:f0:2c:ad:e1:
1e:8c:a8:a7:28:71:38:b6:41:df:ac:e2:5b:7f:fc:
22:47:e2:48:47:69:e9:fb:99:60:84:c0:2c:05:f4:
99:14:8c:b2:8e:c8:fa:5d:76:2c:72:42:dc:cb:e4:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E4:5A:8E:26:4A:9B:42:3B:88:29:F0:21:06:FD:EF:69:21:C9:CC
X509v3 Authority Key Identifier:
keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/t-RajiZKm0I7iCnwIQb972khycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.192.0/19
185.74.72.0/22
195.244.192.0/19
212.120.224.0/19
217.65.48.0/20
IPv6:
2a01:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
0f:07:9f:cb:2f:05:93:0c:a7:56:0f:6c:f3:19:73:1f:1c:46:
a4:12:2c:df:04:99:24:f5:10:2c:97:05:48:d5:b2:b1:8b:d6:
e9:0d:32:41:10:d6:dc:4c:51:64:56:68:b8:25:2c:c8:40:57:
b4:6b:f2:61:cc:74:e9:24:06:63:4b:d4:eb:2d:b3:36:eb:7d:
39:fa:3a:fe:99:87:65:a8:ad:73:9a:30:c4:c0:cf:75:99:d1:
79:e4:da:d8:4f:13:8b:29:68:b4:76:4b:0f:72:9c:63:ed:bb:
5f:2a:ae:45:9e:ee:a9:c1:24:19:f3:00:a3:ce:1b:b9:d7:c4:
51:8b:af:59:63:d5:ea:e5:37:c2:96:c1:11:8b:90:be:69:6b:
2b:da:72:1a:ba:1a:32:01:b3:03:7d:db:5f:f1:af:ca:e1:8b:
1d:97:3b:01:94:e1:a8:aa:b7:8f:34:b5:8d:d2:2d:64:a9:30:
21:c8:86:ab:da:8c:9d:ab:3c:3c:4b:41:56:77:a7:9e:2e:78:
68:df:76:7a:2f:c9:03:e8:c3:e9:28:07:fd:8e:c7:34:55:cf:
8d:25:27:b9:81:67:e5:e9:a0:6e:65:b6:3b:99:c9:c2:d3:5b:
47:29:52:c0:7b:de:aa:cf:b1:af:ed:66:ca:c6:2e:61:00:d6:
ea:32:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:41 2026 by rpki-client