This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa
File: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (raw, json)
Hash identifier: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=
Subject key identifier: 04:9E:C7:6B:31:DA:19:C7:1F:BF:14:D0:73:FC:3A:48:A5:A1:64:40
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019B7E390D97BC7A2C9798F18BA503BFBBBF
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa
Signing time: Fri 02 Jan 2026 10:20:26 +0000
ROA not before: Fri 02 Jan 2026 10:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 185.112.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:39:0d:97:bc:7a:2c:97:98:f1:8b:a5:03:bf:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jan 2 10:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049ec76b31da19c71fbf14d073fc3a48a5a16440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:ac:61:5b:4d:5c:5e:20:2d:37:5a:69:10:
a1:7f:0f:27:8d:6b:ad:aa:f9:a3:67:84:49:25:df:
e4:ab:db:12:e8:62:a0:36:62:62:75:52:69:d5:f0:
82:be:d4:e2:80:8e:84:ce:6b:37:9b:88:a2:12:92:
08:8d:47:32:cc:3a:ab:8a:45:72:bc:75:78:f4:c8:
e8:da:50:5a:f5:78:49:02:7b:4c:dd:80:3a:22:a5:
78:63:d8:08:25:9c:b7:8d:e6:e0:bf:97:af:52:2d:
c6:c1:69:83:2a:1b:f9:95:a1:a1:1f:71:72:52:3e:
05:79:0d:63:3b:c2:c9:62:96:49:0a:d4:c8:17:3e:
c8:1d:c1:d7:0d:f2:8a:2d:4a:11:8e:ab:53:61:df:
64:eb:7b:9f:1f:4c:46:fd:4d:d7:d8:11:65:58:bb:
e8:65:b9:29:0b:bd:a1:64:b2:d4:75:57:bd:ac:9b:
2e:dc:77:b6:73:7b:ee:bd:b6:e7:95:2c:de:a9:c7:
83:20:3e:73:54:58:f7:ad:19:28:3f:3a:f7:b3:13:
91:1c:11:c1:75:1f:ee:e0:ba:21:7a:ed:72:bb:f5:
96:2c:d7:23:3b:6d:77:52:3c:c9:7f:96:18:6a:21:
19:33:0f:52:85:27:4f:c5:87:6d:6f:26:e0:33:a9:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:C7:6B:31:DA:19:C7:1F:BF:14:D0:73:FC:3A:48:A5:A1:64:40
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/BJ7HazHaGccfvxTQc_w6SKWhZEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.180.0/24
Signature Algorithm: sha256WithRSAEncryption
09:28:e7:14:24:99:cf:25:0e:3c:6b:c3:1d:21:63:f4:0f:ca:
00:d9:5d:27:8d:89:ba:29:78:4d:17:5c:75:fe:72:e7:33:9a:
ca:40:59:50:05:df:77:ff:89:0a:4a:68:e4:85:6d:55:3f:60:
9f:52:8b:09:1c:d1:af:4b:53:14:d1:74:b8:d3:df:77:e2:d0:
18:e7:17:a8:92:97:22:5d:0d:05:9b:ad:f1:b0:01:b7:ee:9e:
a8:d6:29:42:13:38:71:2f:5e:3a:51:2f:c3:15:d5:2e:dd:13:
45:67:83:bb:2e:80:32:c9:af:fa:79:67:a4:ee:fa:9a:da:b5:
65:c5:fd:1c:c9:ee:74:e1:49:1b:a5:5b:fc:b9:18:8a:5b:98:
64:9f:17:ce:77:e8:00:8b:11:17:5e:39:a0:35:7f:76:91:6c:
bb:1a:91:df:89:f2:a6:84:de:88:dd:90:06:69:44:2e:5b:c2:
ae:f7:cf:7b:4b:ad:2d:3b:86:1a:c6:3a:4d:0d:60:55:b4:2e:
4c:73:96:ef:ad:d7:9a:29:08:b5:87:e7:3f:e9:a7:2f:b1:17:
54:92:4c:34:11:b0:80:94:b3:d6:7b:9c:07:e4:4f:5d:dd:69:
3e:c7:61:31:b0:4a:4a:91:ea:43:83:df:bf:1f:ad:ed:8e:41:
6e:fe:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:27:24 2026 by rpki-client