This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/H7jMshEc_QzisAZTqQ39Lo0a0Sw.roa
File: H7jMshEc_QzisAZTqQ39Lo0a0Sw.roa (raw, json)
Hash identifier: VHSm4xQSXUeYvPyMKI8xHq/rhiI+mt+3OeZLgSQDqX4=
Subject key identifier: 1F:B8:CC:B2:11:1C:FD:0C:E2:B0:06:53:A9:0D:FD:2E:8D:1A:D1:2C
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 019B77C6D60CE1B0F22425C9A2E1FF727EEB
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/H7jMshEc_QzisAZTqQ39Lo0a0Sw.roa
Signing time: Thu 01 Jan 2026 04:17:58 +0000
ROA not before: Thu 01 Jan 2026 04:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206163
IP address blocks: 185.194.172.0/24 maxlen: 24
185.194.173.0/24 maxlen: 24
185.194.174.0/24 maxlen: 24
185.194.175.0/24 maxlen: 24
194.156.236.0/24 maxlen: 24
194.156.237.0/24 maxlen: 24
194.156.238.0/24 maxlen: 24
194.156.239.0/24 maxlen: 24
2a0a:86c0::/48 maxlen: 48
2a0a:86c0:1::/48 maxlen: 48
2a0a:86c0:2::/48 maxlen: 48
2a0a:86c0:3::/48 maxlen: 48
2a0a:86c0:4::/48 maxlen: 48
2a0a:86c0:5::/48 maxlen: 48
2a0a:86c0:6::/48 maxlen: 48
2a0a:86c0:7::/48 maxlen: 48
2a0a:86c0:8::/48 maxlen: 48
2a0a:86c0:9::/48 maxlen: 48
2a0a:86c0:10::/48 maxlen: 48
2a0a:86c0:1000::/48 maxlen: 48
2a0a:86c0:1001::/48 maxlen: 48
2a0a:86c0:1002::/48 maxlen: 48
2a0a:86c0:1003::/48 maxlen: 48
2a0a:86c0:1004::/48 maxlen: 48
2a0a:86c0:1005::/48 maxlen: 48
2a0a:86c0:1006::/48 maxlen: 48
2a0a:86c0:1007::/48 maxlen: 48
2a0a:86c0:1008::/48 maxlen: 48
2a0a:86c0:1009::/48 maxlen: 48
2a0a:86c0:1010::/48 maxlen: 48
2a0a:86c0:1011::/48 maxlen: 48
2a0a:86c0:1012::/48 maxlen: 48
2a0a:86c0:1013::/48 maxlen: 48
2a0a:86c0:1014::/48 maxlen: 48
2a0a:86c0:1015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:d6:0c:e1:b0:f2:24:25:c9:a2:e1:ff:72:7e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Jan 1 04:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fb8ccb2111cfd0ce2b00653a90dfd2e8d1ad12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:03:8f:cc:05:0a:c6:ae:62:79:f2:03:1c:
cd:c2:8e:b2:58:b1:9a:2a:3a:98:ec:8b:d5:c3:5a:
66:bb:59:70:9e:2d:c9:e1:14:15:e0:06:db:f5:e5:
15:c0:3a:40:d6:eb:5c:26:76:c2:f0:71:ca:71:f1:
98:9b:6c:28:52:b5:2b:e5:64:64:f8:24:f0:1a:5d:
8e:e2:de:ac:a8:dc:53:a7:7b:84:62:76:97:d5:eb:
a4:14:ba:98:c1:d5:e9:75:30:5a:9b:22:35:b8:f8:
2e:4d:84:0d:e8:05:b5:db:9f:38:a6:c2:43:56:b7:
5c:ec:06:14:ff:23:04:ba:5f:0b:d4:86:f6:f1:6d:
82:da:f7:2c:c4:d5:c3:60:93:0e:4d:31:68:38:04:
26:ff:e5:80:4c:ab:95:fe:00:9a:bc:f5:f5:d2:ab:
12:a6:a1:f7:ed:e7:f6:87:ce:de:95:7c:93:2e:30:
22:dc:d7:81:8d:92:a1:b0:56:6a:cc:4d:87:aa:15:
91:61:11:72:35:f3:1d:f3:00:a1:1e:ce:6d:93:42:
36:4c:58:f6:e9:9e:38:c5:3a:54:da:20:a9:11:54:
65:23:d0:80:89:d9:39:a3:f5:97:dc:70:17:ea:72:
47:69:ea:51:30:cd:d8:5e:80:d3:ca:f7:29:24:c7:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:CC:B2:11:1C:FD:0C:E2:B0:06:53:A9:0D:FD:2E:8D:1A:D1:2C
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/H7jMshEc_QzisAZTqQ39Lo0a0Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.172.0/22
194.156.236.0/22
IPv6:
2a0a:86c0::-2a0a:86c0:9:ffff:ffff:ffff:ffff:ffff
2a0a:86c0:10::/48
2a0a:86c0:1000::-2a0a:86c0:1009:ffff:ffff:ffff:ffff:ffff
2a0a:86c0:1010::-2a0a:86c0:1015:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:8d:78:0a:a6:3b:0c:d9:8e:2f:5a:41:43:6a:d6:da:31:77:
7e:93:ef:25:98:3f:9c:35:a2:c2:8c:f5:87:ac:d5:1f:ab:df:
f1:8a:8d:ba:49:08:da:79:a7:a1:22:76:c4:d7:02:64:b2:33:
ab:82:72:b1:80:6d:09:56:66:7f:7c:fa:b0:53:29:ca:16:98:
b5:6d:fd:56:a3:97:b9:66:63:40:4c:f1:84:b6:d1:6c:c3:3f:
70:8d:1c:b0:78:8b:1c:a3:2a:de:11:7e:8d:97:38:42:95:d7:
33:4d:b5:e8:c9:b3:ce:ab:e8:11:5e:2d:db:c5:87:f5:41:9a:
d5:29:0d:52:8c:0f:23:5e:c5:e1:30:84:32:00:aa:47:a7:3d:
1f:fe:ec:df:49:11:99:49:3d:93:37:2b:d5:6a:3a:bb:02:bd:
e3:74:0d:c7:a0:3f:b0:9c:d4:c5:f8:38:39:7f:f4:7b:b7:88:
e4:9e:cf:cf:28:8d:30:6c:f5:d2:96:12:ab:de:d4:eb:a7:66:
2c:65:a1:3f:9a:ac:42:14:b5:fe:49:1b:d3:26:13:5a:cc:ea:
30:d8:b6:65:c5:06:68:56:4c:f0:cf:d9:64:9b:80:63:6e:b5:
34:ee:e3:6b:91:28:32:7c:4e:4e:ee:1a:c4:e1:12:a0:50:19:
ed:cd:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:35 2026 by rpki-client