This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa
File: 72EEXwF4rxw07TqjluMbznwtYLo.roa (raw, json)
Hash identifier: vJ+c33uikVjE0CsfjQX2JHy6uxMfNvh7N1kHRDulrjw=
Subject key identifier: EF:61:04:5F:01:78:AF:1C:34:ED:3A:A3:96:E3:1B:CE:7C:2D:60:BA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B357F48DCA0577FDD8462E09C65D66D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa
Signing time: Thu 01 Jan 2026 20:17:42 +0000
ROA not before: Thu 01 Jan 2026 20:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56771
IP address blocks: 194.102.56.0/24 maxlen: 24
217.156.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:7f:48:dc:a0:57:7f:dd:84:62:e0:9c:65:d6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef61045f0178af1c34ed3aa396e31bce7c2d60ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:11:a3:29:a4:27:07:2a:f5:09:a0:95:23:
d4:aa:8f:54:2d:c5:d5:49:a1:6e:63:c2:66:03:db:
4d:60:94:a1:1a:3e:20:a4:81:dc:2d:c2:31:1b:86:
af:b2:30:5a:a6:0d:55:5b:89:b9:ab:fd:4e:ef:19:
c2:12:05:ab:cc:80:25:26:e8:1a:47:22:9b:0a:a3:
18:c5:d9:f4:03:19:cc:12:d9:58:dd:ae:78:18:cf:
ac:d3:0f:0e:86:d4:c9:8a:19:dd:c4:ae:d5:2a:6d:
13:17:8d:d5:e5:a3:3b:4d:dc:8d:83:40:9a:16:83:
98:ce:f4:45:b3:ed:e7:20:b0:45:14:f9:b8:16:37:
83:c8:43:41:a9:a3:e0:6a:51:e3:4a:4f:91:f2:81:
9b:63:21:d4:8d:c4:99:61:97:fd:6c:69:f4:d0:16:
d1:bd:06:ae:89:cc:7f:21:f5:f9:2c:d9:3b:35:4a:
f5:67:b0:6d:58:3b:82:15:30:3a:0b:f6:a5:51:84:
54:2e:e2:80:74:63:8f:af:b4:30:af:61:6a:eb:fc:
96:19:84:bb:42:41:eb:1f:02:00:ec:92:c9:67:4b:
f7:2f:85:75:17:13:66:e3:41:67:e9:65:3a:e9:0e:
a7:96:9c:c5:dd:7a:ea:1b:a9:e0:8a:01:98:0c:43:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:04:5F:01:78:AF:1C:34:ED:3A:A3:96:E3:1B:CE:7C:2D:60:BA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/72EEXwF4rxw07TqjluMbznwtYLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.56.0/24
217.156.33.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5f:a3:9d:7b:9f:5d:66:a7:b7:87:88:9f:32:fd:d8:18:a1:
24:31:ea:09:4d:7f:08:c0:bc:49:33:c8:39:36:ef:54:ee:9b:
e6:c1:85:8f:1d:21:24:c4:c3:cf:77:b5:4a:20:17:e8:25:1a:
6c:c0:7f:a0:9f:7a:a4:93:e8:99:05:cf:8f:f1:19:6b:15:48:
2b:79:b5:0c:a8:f6:50:83:02:f8:15:82:1a:b7:37:65:6c:72:
fb:2d:a1:71:7c:c9:e6:f3:3d:e9:5c:5f:1d:e1:0e:53:55:62:
b2:c2:3f:27:b5:18:85:b5:fa:ef:83:a7:e0:9a:16:90:7a:dc:
1b:ec:01:42:54:94:01:32:a9:6a:3c:5a:ec:cc:6f:93:e1:09:
35:19:71:48:17:ff:dc:0c:44:97:38:42:d9:91:35:42:f1:ce:
39:6f:98:4f:1a:9b:39:08:71:fe:2c:c6:ae:8e:2c:59:b5:2c:
7f:3c:0b:29:56:c9:ea:b2:0d:02:89:7c:8f:69:ce:e9:91:1a:
e4:95:5d:f2:09:46:b2:65:e7:7b:02:35:75:31:61:99:c8:52:
65:16:8e:9d:eb:2f:e2:d3:da:15:fe:58:07:61:27:57:32:1e:
3b:80:91:60:5e:63:fb:5b:75:d1:e7:f3:c1:db:87:c1:90:8c:
95:36:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:23 2026 by rpki-client