This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0nNLvBXQ7zMSQJhIdD6pqf_iSk.roa
File: f0nNLvBXQ7zMSQJhIdD6pqf_iSk.roa (raw, json)
Hash identifier: EeQ5kkbIMQH4yQsmSC4F9Bx32dANIuWLjuXkAI/bJJo=
Subject key identifier: 7F:49:CD:2E:F0:57:43:BC:CC:49:02:61:21:D0:FA:A6:A7:FF:89:29
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B3556D627CE88DBF1E5EB6AA25C1958
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0nNLvBXQ7zMSQJhIdD6pqf_iSk.roa
Signing time: Thu 01 Jan 2026 20:17:31 +0000
ROA not before: Thu 01 Jan 2026 20:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8614
IP address blocks: 193.231.172.0/24 maxlen: 24
217.156.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:56:d6:27:ce:88:db:f1:e5:eb:6a:a2:5c:19:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f49cd2ef05743bccc49026121d0faa6a7ff8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:8d:5b:ab:ae:75:65:e9:56:43:bb:e9:82:
45:3f:b5:bb:29:34:12:bf:cf:0b:65:0d:6b:32:e0:
48:72:ef:c3:24:6c:98:b0:16:6c:3d:94:5c:7b:f2:
18:77:89:56:12:65:6d:56:03:1c:c3:84:1a:7b:20:
70:36:32:f9:79:98:e9:94:48:bd:bf:78:31:db:56:
4d:69:c6:2e:d1:88:55:b7:ac:57:b8:dd:8f:16:5d:
45:66:3d:2a:2b:56:de:ec:4d:28:1f:3d:d7:8a:bf:
b3:fe:2c:23:01:bc:15:2c:1b:13:de:bf:bf:9a:0f:
ea:b5:b0:04:7a:46:be:45:f4:2c:89:fa:92:ed:37:
b1:09:10:5d:0d:c1:68:a5:dd:30:93:18:18:83:7e:
6b:43:c6:08:eb:0a:ae:b0:8e:1d:74:34:19:86:6f:
c4:0c:18:61:62:a1:a5:35:17:65:2d:73:81:2e:75:
86:29:2c:5b:6f:4b:e5:c9:9c:78:8c:fc:d9:d4:ac:
5e:06:af:37:12:69:c2:60:19:06:dd:df:36:14:6f:
06:54:9e:ed:95:7c:27:96:4a:81:24:2f:10:0f:3d:
6f:f6:1e:eb:e5:43:50:86:da:92:5e:29:bf:50:b5:
a1:87:88:91:15:83:18:c0:3c:e6:d4:39:aa:93:dc:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:CD:2E:F0:57:43:BC:CC:49:02:61:21:D0:FA:A6:A7:FF:89:29
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/f0nNLvBXQ7zMSQJhIdD6pqf_iSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.172.0/24
217.156.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4d:66:53:f7:ef:b4:37:f6:33:30:d1:49:f7:26:0b:74:58:
7c:6b:31:69:5b:0e:0f:a0:ad:0c:0e:aa:f0:2e:ff:49:79:29:
4f:9e:53:f6:de:ff:19:a9:3d:03:3d:ef:99:33:a5:e6:46:80:
1e:ca:f5:69:01:0e:64:61:1c:c6:2c:d9:3d:6b:53:51:05:bd:
26:4d:c3:e6:fb:5b:02:09:75:29:08:c5:fc:d8:d4:2f:cf:96:
33:db:f1:ee:7a:1a:d1:9b:72:46:d9:24:03:16:b4:f7:0e:fe:
9b:e2:8a:90:21:fb:08:a3:87:72:56:b2:9b:7b:a9:63:f3:22:
cc:78:67:4b:55:f7:5b:30:0d:9c:4e:b0:d2:03:65:d0:2f:7e:
46:72:49:49:e0:a6:2e:92:22:17:da:07:fe:59:f0:95:72:c7:
04:9a:52:3e:78:95:50:57:93:c7:a1:02:ce:b8:3b:5b:30:5d:
d0:28:3b:80:81:8a:65:e2:f9:1e:72:bf:52:49:9a:80:f4:e2:
db:da:74:8a:ff:3e:c0:71:27:41:4d:81:3a:22:93:bd:71:19:
a0:e7:60:c0:a9:0f:c9:df:ea:c0:7d:b9:91:f6:0b:32:de:91:
81:d9:d6:6c:fd:b4:a2:fd:82:9f:1b:08:57:96:73:e2:af:8c:
51:fa:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:54 2026 by rpki-client