This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa
File: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (raw, json)
Hash identifier: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=
Subject key identifier: 64:CE:C8:5E:AD:5A:56:81:74:1F:2A:C4:8C:31:23:17:50:02:81:35
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019B7EA65FFE91F574BBA26C804816118B9E
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa
Signing time: Fri 02 Jan 2026 12:19:51 +0000
ROA not before: Fri 02 Jan 2026 12:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 185.122.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:5f:fe:91:f5:74:bb:a2:6c:80:48:16:11:8b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 12:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64cec85ead5a5681741f2ac48c31231750028135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:62:c9:66:e1:03:b1:6f:84:7d:67:6d:f7:
a9:3e:c3:b2:e5:27:9d:04:e7:0b:ca:8f:cf:a9:b8:
19:ce:e9:15:14:f0:fd:7b:40:1d:85:e9:0c:55:92:
18:9e:2f:c3:e6:73:5a:1f:6c:23:85:99:5d:c0:20:
26:2f:ee:59:db:00:af:4b:e9:c8:42:b4:92:57:a2:
6f:7d:d2:9a:1b:35:d0:29:36:6a:f8:01:b9:56:a1:
24:34:4a:64:13:a9:67:9a:72:72:bf:c5:22:6e:55:
9b:bf:40:b7:50:e1:b6:9e:0d:dd:f9:37:a7:5d:2b:
0a:56:a8:15:41:39:f5:db:90:86:88:3a:af:73:bf:
dd:75:33:47:bc:11:38:16:d9:85:ec:3b:77:0f:1a:
b5:ff:aa:c3:ee:5f:53:52:c9:ea:06:52:79:d3:dc:
ba:3c:88:71:78:46:e4:5f:8e:79:be:9a:0e:93:0b:
58:7d:9f:40:65:a5:e0:9a:48:0d:87:41:80:9c:b2:
61:bd:6d:c4:56:5e:f9:4d:7f:4f:dd:15:0c:c4:a0:
ac:54:8c:fa:1a:ae:77:b4:8e:19:a4:f5:09:5d:1c:
3e:5f:77:c4:5e:c8:ca:63:b4:67:e4:f9:35:23:30:
e9:60:10:67:ac:22:00:c5:6a:e2:c4:fb:f7:d7:cf:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:C8:5E:AD:5A:56:81:74:1F:2A:C4:8C:31:23:17:50:02:81:35
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.142.0/24
Signature Algorithm: sha256WithRSAEncryption
63:60:fd:e7:4a:9b:a6:3a:8f:d0:f4:d9:3a:82:20:55:52:e5:
84:60:f3:f0:f1:fa:bb:06:13:ec:93:b3:12:b0:f2:12:3f:89:
b8:16:b6:f0:3c:9c:2c:cc:4d:01:91:a1:52:6e:a8:be:68:ab:
ce:df:37:5d:e7:6a:9b:03:c9:0c:6e:68:99:48:71:56:4a:f5:
2a:ad:c1:d5:53:00:fc:c8:c1:1a:3b:30:27:e7:69:ab:f0:e8:
02:0b:5a:36:6b:58:88:46:36:82:23:17:24:10:eb:45:ee:ba:
9f:9b:e5:20:9c:da:f6:93:6b:22:4c:13:b9:13:67:cd:8b:5b:
ac:52:fd:2b:0a:d8:8b:79:37:2c:b2:4b:dc:b8:6f:1b:a4:32:
52:ad:fd:45:ad:2a:23:3f:0e:a3:e6:b1:7a:23:2c:2a:67:ba:
37:82:a6:b7:60:90:19:ad:84:d7:4c:8d:99:d1:47:60:85:21:
aa:99:df:1d:a6:d9:38:f2:86:c4:cf:e2:80:5c:c0:cb:1a:b3:
3a:06:c6:21:7c:1c:5f:d0:fc:f9:a9:f0:8f:a2:a0:54:58:22:
98:51:64:ff:15:9d:b9:64:8c:54:44:ea:e1:6d:bc:cf:df:83:
ce:e0:75:78:63:97:bf:ab:0c:2f:b3:a4:8a:40:4e:e8:7e:f3:
9e:16:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:46:25 2026 by rpki-client