This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa
File: f37o7GWNr_sV4ePor15LlLHpeGw.roa (raw, json)
Hash identifier: YKLZAfeBxUgsMJleIvcnI+Fj3hSFa8GaTE9wCG/+M04=
Subject key identifier: 7F:7E:E8:EC:65:8D:AF:FB:15:E1:E3:E8:AF:5E:4B:94:B1:E9:78:6C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019B7F14B9FC9110218BA1664A0D65AC1CFC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa
Signing time: Fri 02 Jan 2026 14:20:23 +0000
ROA not before: Fri 02 Jan 2026 14:20:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 194.231.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:b9:fc:91:10:21:8b:a1:66:4a:0d:65:ac:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 14:20:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f7ee8ec658daffb15e1e3e8af5e4b94b1e9786c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:92:4d:52:12:76:d3:eb:d4:3f:53:71:61:
60:17:20:d8:5f:eb:8a:32:bc:b9:e1:17:14:5d:a2:
d0:8d:1c:8a:ff:e3:21:20:cd:90:22:ca:1b:4c:7f:
af:57:69:66:c4:82:c1:c2:64:07:d8:90:09:37:2d:
08:98:6b:34:5f:70:1d:03:2d:83:5b:cb:ce:d7:5e:
9c:40:6f:98:7f:dc:17:41:f2:5b:fb:23:97:b1:73:
c8:59:ea:6c:eb:4b:c4:ad:5d:6a:bc:da:3a:4a:b9:
92:03:ec:72:ab:c8:5f:f8:5e:90:5b:94:1f:d9:99:
48:a1:1a:89:d7:86:da:81:8a:1a:25:1d:8c:58:af:
df:bd:95:3d:7e:5b:f2:72:d8:dc:94:9a:51:07:c5:
0c:ad:85:d8:70:8f:db:a3:96:12:6f:71:fe:e9:0a:
0e:a8:ab:47:3a:20:97:dd:32:d4:68:81:a4:96:2c:
46:cb:a5:d4:4b:c6:5b:e1:43:5d:0e:2f:8c:84:e8:
f1:b8:74:d6:db:c1:fb:4b:a3:29:07:7b:c5:0d:84:
a5:01:d7:fa:a4:8a:ea:67:e7:7f:47:bd:12:b7:27:
1e:45:d8:6a:ee:91:5e:c2:2c:5a:17:b5:de:d2:b2:
7f:d0:83:04:f4:3b:0e:04:71:6b:4d:53:43:95:09:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:E8:EC:65:8D:AF:FB:15:E1:E3:E8:AF:5E:4B:94:B1:E9:78:6C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.134.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:28:6a:45:01:00:68:0b:80:97:27:08:70:cf:63:6d:3e:d1:
c6:14:d1:ca:df:84:c3:7c:22:14:70:03:8f:9d:fd:42:e3:09:
2e:be:50:a0:d8:3f:52:28:d9:10:5c:ce:6f:cb:4d:5e:d0:33:
5f:4c:fb:45:54:e5:b1:ac:cd:6b:ad:34:d2:af:f7:72:07:06:
86:42:c0:27:6a:11:72:f5:9a:00:6f:e0:a9:eb:2d:da:ea:e9:
c8:78:32:7b:e3:b3:e8:78:8d:06:8f:c2:86:e4:6c:4b:a2:45:
99:82:fd:01:8e:4e:ae:bc:54:8b:df:57:a9:5f:43:c2:40:de:
dd:1d:d5:27:17:9d:9e:04:84:a8:d7:64:23:1f:2d:88:80:43:
b1:80:aa:fb:d8:bf:4e:e6:5f:73:ee:55:37:1f:9d:49:f1:fe:
6f:69:00:93:f9:92:fc:8f:42:27:28:0d:d2:17:db:72:8f:26:
f2:8f:95:db:1d:2c:db:79:8d:85:c3:f9:ac:22:53:b9:11:3a:
74:81:c5:5c:c8:05:ed:1c:54:61:0d:97:f8:5f:e2:8c:a1:a2:
85:78:ef:89:54:c9:67:07:f7:b5:5f:31:f0:f3:a5:9d:be:78:
35:28:d5:77:94:48:fb:7c:e7:4c:26:eb:49:a7:a0:fc:98:8e:
ec:73:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:13:35 2026 by rpki-client