This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/1oQnHtziYZUN1dZc7QkQQyuqMPE.roa
File: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (raw, json)
Hash identifier: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=
Subject key identifier: D6:84:27:1E:DC:E2:61:95:0D:D5:D6:5C:ED:09:10:43:2B:AA:30:F1
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 019B797E50B922A5A7B311900B068A074FD5
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/1oQnHtziYZUN1dZc7QkQQyuqMPE.roa
Signing time: Thu 01 Jan 2026 12:17:59 +0000
ROA not before: Thu 01 Jan 2026 12:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 82.147.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:50:b9:22:a5:a7:b3:11:90:0b:06:8a:07:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Jan 1 12:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d684271edce261950dd5d65ced0910432baa30f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b0:56:5b:30:86:81:57:7c:84:58:47:53:ec:
c1:07:05:13:dc:e2:63:1f:28:89:3d:b0:cb:b8:84:
b8:6d:ed:05:c6:30:19:12:d8:94:66:96:37:f7:84:
01:e9:cd:76:6f:72:d4:0f:17:54:d4:62:e3:89:92:
94:22:62:1d:7d:19:72:0d:fd:d3:62:c3:c3:f7:6c:
7d:cc:97:a7:23:03:48:1f:30:14:fb:6e:32:a1:18:
69:78:c1:01:a8:5d:57:48:4f:b5:5b:9c:68:7a:a2:
67:68:58:a1:42:55:02:85:03:e0:8b:db:d0:87:28:
a4:25:99:f4:dc:30:0e:ed:fa:ee:a8:6a:45:b4:6d:
2b:00:d0:e3:30:68:94:5f:fc:91:22:71:9d:ad:7e:
37:ab:ce:59:f1:d7:ae:23:4a:40:c4:3a:75:6b:38:
e4:a8:25:ba:43:d6:29:0b:45:a1:7a:94:ed:6f:27:
18:dd:2a:36:7f:44:37:09:8e:a6:3f:8b:d4:67:e3:
d9:02:e4:e3:68:e9:cc:bf:1b:fc:14:9b:02:5f:82:
0d:63:0f:b6:4b:ba:f4:12:fa:52:f1:c2:fd:54:fc:
e1:eb:26:1d:4c:ce:64:a8:e1:88:d5:0b:77:fc:bc:
7a:7c:cb:62:5c:0b:7e:f8:08:ca:ba:ae:23:77:09:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:27:1E:DC:E2:61:95:0D:D5:D6:5C:ED:09:10:43:2B:AA:30:F1
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/1oQnHtziYZUN1dZc7QkQQyuqMPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7c:98:c5:6e:97:d5:22:4b:be:a1:5e:9c:fa:ad:12:6c:6b:
cf:2b:fb:bb:c7:d9:06:66:03:6e:66:14:a3:aa:06:d3:1e:1e:
27:c0:66:de:32:6f:52:ed:df:5f:5c:64:39:7c:86:0f:ae:a9:
d8:2d:da:79:2a:6a:1f:a3:5e:ad:d3:7a:70:13:25:c8:1d:2e:
15:40:ad:96:0f:3f:6d:10:c8:e6:54:d8:f2:03:d2:d6:a7:9a:
f3:92:9c:eb:20:0f:7b:7f:b5:dd:ab:1c:02:ed:e1:d1:12:c6:
0a:2a:20:3d:91:a0:c1:b0:54:a5:a3:14:5c:b6:ca:ab:a5:c2:
7a:db:1c:8c:71:3c:c4:73:eb:3f:64:87:f6:24:5c:22:69:1c:
ae:83:c7:0b:9e:d6:b6:80:9a:82:a9:05:7f:5d:03:5d:0d:a0:
e0:29:81:61:9b:17:da:3e:89:1a:33:f0:10:bf:e2:78:a6:09:
a7:b1:80:69:cf:9a:eb:95:6a:28:a9:2f:4a:e7:32:6d:6d:cc:
44:ff:53:a5:c3:95:0a:cb:0d:39:6e:ce:64:d3:39:e7:eb:2e:
c1:5e:a9:d0:5d:0c:bf:bd:fa:fb:21:e3:83:c5:e8:20:53:8c:
ee:16:33:22:de:d6:9c:38:a8:fd:c0:8b:90:02:83:ba:b6:f5:
51:20:a3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:59:54 2026 by rpki-client