This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ct7G4Mom5Boc802bEbFFnAVpv-0.roa
File: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (raw, json)
Hash identifier: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=
Subject key identifier: 72:DE:C6:E0:CA:26:E4:1A:1C:F3:4D:9B:11:B1:45:9C:05:69:BF:ED
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 019B7F83A9C22708F60618928C17D00C6958
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ct7G4Mom5Boc802bEbFFnAVpv-0.roa
Signing time: Fri 02 Jan 2026 16:21:33 +0000
ROA not before: Fri 02 Jan 2026 16:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60117
IP address blocks: 45.95.42.0/24 maxlen: 24
45.95.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:a9:c2:27:08:f6:06:18:92:8c:17:d0:0c:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 2 16:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72dec6e0ca26e41a1cf34d9b11b1459c0569bfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:5f:e0:4e:3b:13:de:03:2c:1c:a0:9d:79:
8c:a8:c2:80:d8:a2:3f:34:bf:58:83:c7:bd:50:d7:
53:62:88:23:72:08:84:e7:5d:8e:a5:80:0b:e9:d8:
0e:d8:16:30:1e:28:be:84:33:63:12:cf:ef:55:22:
1d:68:4e:37:b3:7f:15:83:0c:c8:be:c1:19:f8:12:
05:bf:e9:83:2c:57:c0:86:14:b9:11:05:8d:cc:9d:
b5:36:16:f8:14:c6:6d:82:5d:ed:0b:b7:dc:6a:5a:
05:42:86:89:7c:49:2a:7b:54:f4:51:fa:86:2a:66:
d0:39:2e:24:88:8b:8e:d1:a2:ae:4b:71:71:81:e0:
92:8f:ef:2d:50:40:ba:06:9a:5d:51:bd:56:68:73:
3d:8e:26:0f:aa:9d:e0:a8:6e:d2:06:9c:27:90:31:
87:95:c8:43:e9:c2:03:1c:5c:bd:1a:76:97:e4:0d:
49:d7:e8:3a:48:ae:42:c8:76:9c:6d:fd:5f:57:95:
fa:9b:88:28:51:35:09:61:58:f9:0d:44:b6:bc:1c:
c1:6f:0f:6b:10:76:4a:d7:fd:35:01:ea:12:44:6c:
6b:99:c9:aa:f1:9f:e4:7a:85:d4:34:45:30:81:10:
6a:d2:7e:44:73:c3:ad:28:55:6b:70:5e:e4:6c:35:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DE:C6:E0:CA:26:E4:1A:1C:F3:4D:9B:11:B1:45:9C:05:69:BF:ED
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ct7G4Mom5Boc802bEbFFnAVpv-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.42.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e6:6f:3e:e1:6d:45:06:a6:61:bc:b0:92:69:fe:6f:bb:c8:
b1:9b:09:34:3d:33:5f:d1:90:07:9e:cf:00:fe:4b:16:a0:d8:
02:75:3a:13:30:96:05:b3:86:ca:2a:60:c9:2c:07:7b:df:dd:
66:f4:03:18:82:ea:72:33:5a:a4:b6:b0:03:99:21:23:84:96:
85:b9:c6:4c:20:ec:1e:64:86:2d:9a:ab:1b:e6:f3:d0:6b:83:
03:7c:28:b9:d8:89:25:03:ee:ec:04:45:fb:65:ac:17:de:27:
e3:b8:e4:c1:7b:9f:f4:22:90:22:25:a0:92:42:c2:e2:d6:da:
df:38:91:92:76:7b:a7:a4:3b:82:5f:7b:c3:79:21:89:5a:77:
98:6c:b7:f6:1b:af:3c:86:8d:c7:78:11:7d:e9:86:af:d1:e5:
76:1a:a1:61:62:0b:f4:4a:85:6e:09:bb:dc:83:df:40:23:bc:
69:70:c8:aa:61:71:33:c6:71:fa:55:47:19:e0:c5:78:b5:2b:
27:cb:6f:b2:b5:24:30:c3:b5:68:75:65:72:57:f9:38:ef:2d:
05:9c:20:d9:86:6a:89:3a:f0:21:7a:7b:7e:33:8e:00:66:04:
8a:89:60:d4:9b:71:9b:75:17:86:17:ed:4e:e1:f2:74:81:cb:
74:33:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:36:06 2026 by rpki-client