This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ryS6_W2GS4FA82PenYE2cX6244.roa
File: 7ryS6_W2GS4FA82PenYE2cX6244.roa (raw, json)
Hash identifier: nnWYVIN+85OtJLWQz/CgbbPEGS7xywJQUk2icG+vQgY=
Subject key identifier: EE:BC:92:EB:F5:B6:19:2E:05:03:CD:8F:7A:76:04:D9:C5:FA:DB:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5D65D64DE3E32FBB0C9B0D7AC59229
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ryS6_W2GS4FA82PenYE2cX6244.roa
Signing time: Fri 02 Jan 2026 06:20:31 +0000
ROA not before: Fri 02 Jan 2026 06:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213639
IP address blocks: 2a0e:97c0:6e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:65:d6:4d:e3:e3:2f:bb:0c:9b:0d:7a:c5:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eebc92ebf5b6192e0503cd8f7a7604d9c5fadb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:41:98:32:f1:b2:dc:98:52:ec:5a:c6:b3:
0e:5d:68:7d:6a:fe:96:78:7c:27:04:f3:00:71:7f:
d6:b0:f4:b5:e4:1f:6c:3d:01:f6:54:05:f1:e3:ed:
6b:e4:ed:55:16:e7:a5:4b:92:ee:e6:3e:66:9b:a3:
e9:e2:eb:4c:bb:e9:a5:a1:4e:98:5e:70:71:3a:7d:
4c:5f:d6:56:9d:82:fb:20:1a:0e:4e:e0:a9:55:f6:
a4:89:68:b6:13:33:2e:fb:dc:2c:b5:50:31:df:29:
62:3d:5d:58:84:7d:ec:bc:39:9f:27:49:bd:53:7f:
a0:37:56:25:1f:a7:2c:9b:d8:94:63:ae:a2:cd:f9:
22:0d:59:f2:aa:29:23:cb:ac:a4:2d:45:4b:67:6a:
3d:53:af:f9:c3:a9:0c:d9:f6:4c:4d:ed:e2:00:91:
27:ae:29:3d:bf:56:98:f2:30:af:d4:35:65:fe:bc:
46:77:49:a6:bf:c2:f3:e5:00:5d:33:7d:7e:c3:09:
cb:e6:e6:9d:4a:a9:30:d6:f1:8f:f0:09:e5:ba:02:
b5:b4:10:ea:41:5a:56:e8:d1:7d:9d:34:85:15:d3:
f8:69:f0:b5:8e:b0:85:68:37:13:f7:82:05:f0:15:
52:cf:33:46:8b:27:14:a7:65:b4:f2:9f:25:e3:0f:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BC:92:EB:F5:B6:19:2E:05:03:CD:8F:7A:76:04:D9:C5:FA:DB:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ryS6_W2GS4FA82PenYE2cX6244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6e0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:d2:0d:bf:34:30:3d:7f:8a:46:32:23:1d:ef:a9:c6:98:6d:
f4:ee:5b:ec:4f:d2:84:5c:31:21:f4:f7:c8:c4:9e:fb:9f:67:
c3:76:9d:20:02:bf:44:7b:c1:b7:d4:24:6e:d5:c3:6f:9a:62:
3b:18:fe:50:92:2e:d0:7b:50:2c:20:8c:5f:b1:a0:b8:0d:2e:
02:c9:fd:f6:06:2e:84:5e:bd:1c:14:d3:4f:14:c8:48:f5:81:
d7:e2:f9:1f:25:4b:48:03:1f:6e:81:4f:dd:50:db:d1:b0:0a:
15:6f:11:68:7f:a5:68:6c:36:b5:23:4f:e7:7e:0d:a9:14:3b:
a9:ed:04:57:76:ef:a8:e3:6d:74:29:36:f1:eb:12:de:1e:a1:
4b:13:d3:32:fe:8f:62:b8:79:9d:5b:97:23:b0:79:0c:8a:29:
e5:60:ff:b2:24:f7:b4:c3:3e:e5:ee:31:52:89:87:9c:65:75:
60:5c:85:c6:f4:e0:e6:32:01:e8:12:2a:f3:5a:a6:62:a3:fd:
01:7b:87:f4:4e:cd:16:d3:b4:40:b3:13:bd:a8:f7:ad:0e:3a:
bc:e4:ca:6a:21:67:9f:ae:ce:33:9d:f1:57:6d:a5:5d:f7:e6:
39:67:6e:70:79:ac:e6:a5:e5:d7:78:12:c3:35:7d:32:12:b8:
4b:81:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:27 2026 by rpki-client