This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa
File: R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (raw, json)
Hash identifier: 1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=
Subject key identifier: 47:B5:AB:90:74:F3:F1:9E:2E:17:35:6F:2F:0C:1E:C2:D2:19:46:28
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019B7FF1930AE5C252589DC5AA22858565F7
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa
Signing time: Fri 02 Jan 2026 18:21:36 +0000
ROA not before: Fri 02 Jan 2026 18:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 185.24.150.0/24 maxlen: 24
212.16.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:93:0a:e5:c2:52:58:9d:c5:aa:22:85:85:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 18:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b5ab9074f3f19e2e17356f2f0c1ec2d2194628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:26:64:4e:f3:4c:ab:a0:9d:d6:2a:f3:ec:
e9:58:eb:88:70:0c:5a:02:74:f6:2b:f8:cd:04:9a:
99:e9:2c:34:4a:20:ea:c2:1c:12:ae:66:4d:8a:4f:
00:34:4a:30:5a:5c:af:8d:34:8b:1d:36:05:60:1a:
de:22:5a:0c:33:50:9f:48:2e:62:a7:91:38:bf:cd:
ab:cf:9b:6f:87:25:c2:87:76:11:ee:85:da:d5:96:
96:51:18:30:a4:c5:8a:3e:fa:17:d9:b0:73:48:c3:
37:16:03:4a:65:f3:75:7b:36:85:96:9a:08:45:2c:
94:ca:b4:1f:c8:0a:cd:d0:ae:c6:fd:1c:1f:2c:9e:
fc:88:4e:f1:dd:08:f3:41:e3:f1:a5:68:f8:b5:8a:
ae:f4:8e:7d:d5:81:98:8a:7b:d5:4d:d6:a4:93:3b:
78:80:6b:02:65:97:05:2f:b0:7b:f4:1b:72:89:3c:
b9:de:10:a1:eb:a8:6a:59:b8:2d:76:1c:cb:83:ce:
0c:4a:ac:5d:c8:9f:0d:eb:b0:81:7b:d4:5a:d2:78:
93:b9:42:ab:b9:a4:21:16:e2:fc:3b:a9:f9:a4:66:
0b:58:d5:ec:4b:91:64:2d:73:3c:b2:66:ec:1c:7d:
f4:d2:59:b8:d0:08:30:16:f4:6d:44:fe:c0:95:16:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:AB:90:74:F3:F1:9E:2E:17:35:6F:2F:0C:1E:C2:D2:19:46:28
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.150.0/24
212.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8b:51:49:07:b1:84:e3:66:37:a9:90:aa:42:86:d9:5a:47:
b5:f7:82:a1:73:b8:9c:61:8a:33:25:55:74:fc:dc:a0:15:73:
c6:23:28:59:13:b5:58:3e:c6:7b:6d:4d:54:09:65:68:56:ce:
7c:bf:ae:e2:0a:b8:64:3c:63:39:73:f9:80:18:30:fc:ab:a0:
85:8e:ce:5f:ee:7e:32:f3:95:4f:d3:13:6a:de:a6:5a:3b:3d:
f5:aa:09:8d:6a:03:d2:ec:f1:31:2a:7b:a8:43:a2:9a:9f:28:
e9:35:95:aa:9b:0a:34:ec:2c:dd:6e:ed:f7:9d:f7:1a:82:a3:
e4:f0:4c:dd:d6:1a:08:64:73:20:98:5e:78:74:b8:05:d9:12:
9d:41:c2:a5:bc:51:a8:06:ee:07:36:ba:85:15:d9:64:b7:49:
b9:2e:97:78:38:dc:1b:85:38:f1:26:36:1a:96:41:3c:c4:78:
9d:0b:c0:8e:f0:11:b2:4a:2f:bd:0f:46:74:c7:2d:39:1a:93:
f8:ad:55:17:9b:58:f9:ae:66:b3:e8:b9:a7:95:3c:5b:21:28:
d4:ff:f4:f8:b3:a4:0c:13:bc:78:bc:a6:41:fc:df:0a:3c:8f:
2f:a0:8c:3d:b4:f1:57:c2:ae:11:9c:38:8d:96:a8:c5:f2:ef:
87:ac:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:03:56 2026 by rpki-client