This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-scv0V31SnyFgGn-wA-NZ2ErMk.roa
File: 1-scv0V31SnyFgGn-wA-NZ2ErMk.roa (raw, json)
Hash identifier: qB/wJi7cebz0+v034kzQtt9ISdpqan4rTTn6plcln8Y=
Subject key identifier: D7:EB:1C:BF:45:77:D5:29:F2:16:01:A7:FB:00:3E:35:9D:84:AC:C9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019B797EC88E86BC2C644DE43E822788A113
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-scv0V31SnyFgGn-wA-NZ2ErMk.roa
Signing time: Thu 01 Jan 2026 12:18:30 +0000
ROA not before: Thu 01 Jan 2026 12:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50385
IP address blocks: 178.253.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:c8:8e:86:bc:2c:64:4d:e4:3e:82:27:88:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 12:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7eb1cbf4577d529f21601a7fb003e359d84acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:4d:2f:c7:23:6b:95:65:75:2a:83:30:ee:
9f:ce:5f:51:bf:8b:03:20:02:a2:8d:9f:33:19:fb:
f6:71:26:d9:71:74:b9:aa:66:ba:0a:14:5f:11:54:
5b:ea:9b:60:6e:c0:91:3d:de:7c:57:86:79:56:25:
51:e3:c5:c0:6f:9c:e4:99:17:ff:8e:42:3d:13:64:
02:82:52:7b:f9:45:fc:98:80:36:95:bc:05:2e:c8:
96:ee:58:06:2a:ca:5e:af:5b:dd:54:93:3e:2c:18:
e8:17:9f:15:f4:04:a7:0d:b2:bc:c2:a5:61:05:ac:
c7:4d:d5:c8:28:bd:1b:79:e0:81:6b:ed:2a:41:0e:
d5:54:a2:be:60:6f:1a:c8:17:2e:6a:45:88:5c:16:
65:82:37:5b:54:7b:43:d0:a0:4d:12:3b:99:ac:0d:
dc:14:36:00:8d:57:76:c2:07:c9:19:7e:77:2e:22:
76:d6:31:57:8f:fb:b3:a2:c0:ac:d8:a8:68:d8:73:
91:be:79:bf:e3:0b:c9:8f:89:31:37:dc:60:5b:54:
c9:94:70:b1:b4:75:53:f1:38:2e:fe:15:50:20:4a:
25:5f:46:54:99:52:7d:e7:4f:85:0e:2e:b5:0c:10:
32:e2:3a:78:df:9b:ae:a3:59:48:47:91:b8:b0:a1:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:1C:BF:45:77:D5:29:F2:16:01:A7:FB:00:3E:35:9D:84:AC:C9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1-scv0V31SnyFgGn-wA-NZ2ErMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d9:0d:2a:56:a9:16:e4:eb:ea:37:0e:27:1b:ce:c6:46:bc:
2c:bc:ea:f1:21:d4:2d:9c:7b:7a:8d:08:e2:21:7a:06:8b:4e:
10:e6:57:90:a6:86:fc:56:ac:c9:28:38:d8:9f:a9:1d:57:e9:
47:28:88:da:f0:7e:fc:a4:28:c2:9c:98:c2:39:10:54:93:c1:
1d:8a:2c:bb:ff:6e:17:01:51:6b:49:8b:02:10:4d:c3:39:3a:
1f:27:0e:bf:48:7c:68:50:83:54:f9:9b:2e:de:36:f5:c0:24:
dd:8e:ba:53:8f:96:20:8d:80:aa:4c:d3:2a:77:ff:09:b2:f3:
94:ba:3c:09:b9:ce:55:63:16:a6:93:e6:63:ea:6a:19:b7:b9:
07:96:13:67:bf:87:35:c4:c4:d2:04:2f:1e:00:43:bd:db:a7:
b6:73:41:fb:11:11:d9:cd:1a:da:ae:fa:aa:6f:86:30:e4:98:
46:cc:1f:40:7f:3d:06:1e:20:a3:ec:fb:cf:4c:8a:29:d6:a2:
98:72:b2:a6:d9:bb:ed:16:6f:a5:12:68:bd:dd:ca:cd:5b:55:
f2:51:7a:ba:43:f8:65:b9:b4:f6:50:ba:b5:0b:d7:50:48:d1:
d7:42:f1:f5:54:bb:87:3c:ce:27:28:19:fc:44:b8:c6:8d:a3:
9c:9d:25:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:54:14 2026 by rpki-client