This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa
File: 3rus813YuNoFCPm5gVNfCetKB0o.roa (raw, json)
Hash identifier: 2Psn64fFe1lFh4gbe2ww6CEoWYkZWI81wssdO4TcKTk=
Subject key identifier: DE:BB:AC:F3:5D:D8:B8:DA:05:08:F9:B9:81:53:5F:09:EB:4A:07:4A
Certificate issuer: /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial: 019B77C6F99EB003F48CE7206A43771B1F7F
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa
Signing time: Thu 01 Jan 2026 04:18:07 +0000
ROA not before: Thu 01 Jan 2026 04:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207073
IP address blocks: 185.150.248.0/22 maxlen: 22
193.193.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:f9:9e:b0:03:f4:8c:e7:20:6a:43:77:1b:1f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Validity
Not Before: Jan 1 04:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=debbacf35dd8b8da0508f9b981535f09eb4a074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:ef:b3:a3:74:a6:0f:5c:38:6c:83:46:b8:
86:42:e5:05:62:ca:d8:4d:f6:66:6d:e4:34:a0:80:
35:e7:7a:7a:d6:ad:81:ee:14:21:0d:89:85:54:fd:
b6:d1:1a:77:ca:d3:f1:01:a3:1d:2d:e7:7c:01:22:
95:d5:26:77:e1:0d:38:56:9f:53:cd:56:ab:12:fa:
67:50:e0:65:81:35:df:01:d1:07:ed:8c:84:05:40:
45:87:70:82:1f:cc:06:e1:db:13:a7:1a:b5:cb:b6:
38:4f:59:77:8c:88:4a:61:0d:9b:cb:95:62:41:6f:
ba:63:cc:9f:b2:3b:ef:e5:64:8c:6d:31:da:b9:49:
48:6a:9d:44:ca:42:17:13:ba:0c:83:48:75:9a:73:
c2:cb:2e:47:59:6a:95:1e:6b:17:2d:28:ef:2f:af:
6a:b8:90:19:6e:b3:e6:20:86:58:4e:c1:45:75:70:
92:cf:2c:73:9c:85:b7:c6:62:81:8f:09:b8:1b:27:
c6:ed:b1:ee:27:81:08:d2:a6:3e:21:eb:b6:5e:3a:
3a:0a:5a:c0:2b:ee:49:44:de:c6:80:19:c6:7c:69:
bc:68:a1:a7:fb:8d:cc:c7:71:bc:1b:bb:f1:6e:a0:
fc:95:42:51:63:ea:24:fb:c5:ce:20:78:34:13:0c:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:AC:F3:5D:D8:B8:DA:05:08:F9:B9:81:53:5F:09:EB:4A:07:4A
X509v3 Authority Key Identifier:
keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.248.0/22
193.193.168.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0a:ef:d7:fa:6b:e4:d8:62:9a:09:3d:00:40:5b:0f:4e:60:
61:29:8f:23:8c:c2:68:e1:6b:88:9b:ae:22:52:3e:42:cc:99:
fc:6f:7c:f0:30:46:f4:e0:43:9f:73:85:04:c7:2a:97:3c:15:
eb:d1:01:99:14:0a:bf:f5:4f:ea:79:02:48:80:34:f5:9f:13:
36:60:6f:9b:f4:57:49:9a:9d:14:66:82:34:41:8d:09:c8:ac:
c2:e9:25:b7:e5:fe:e0:f0:12:9b:10:e1:4d:6a:b8:1a:54:07:
60:60:af:35:12:8e:c7:94:8f:a9:01:7a:89:04:96:4f:2b:14:
ba:05:49:5e:7b:68:84:05:6e:d2:c2:c5:8b:6e:9f:ed:db:00:
3c:e5:e9:8e:97:24:b0:41:fd:ef:ce:85:72:0d:3f:e1:1a:3c:
bc:f8:91:7a:6b:54:e8:46:7d:01:96:24:a0:8f:44:b2:11:1a:
c7:dd:cf:90:38:7c:55:f8:66:f4:9b:1e:41:49:81:f1:0b:9c:
08:65:45:63:ee:40:40:cc:01:3f:fb:1d:0b:ed:df:12:79:ab:
b8:f0:28:bc:73:5e:3f:e9:65:ad:56:a2:72:23:f7:d9:6b:26:
25:4f:f5:63:fc:87:50:ed:53:10:53:ae:bc:95:d3:ed:4b:c0:
1a:01:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:17 2026 by rpki-client