This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa
File: HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa (raw, json)
Hash identifier: z8ecTHraKJuJfx2Nzr6QIZs1OJQlHdMTivk8yRc4Ssw=
Subject key identifier: 1D:26:60:0D:61:B3:A1:85:04:F9:E3:A4:A0:51:4E:E9:35:AA:46:F3
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019B797DE471BF73B6B9F307E70A53D2DBD4
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa
Signing time: Thu 01 Jan 2026 12:17:32 +0000
ROA not before: Thu 01 Jan 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200551
IP address blocks: 77.73.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e4:71:bf:73:b6:b9:f3:07:e7:0a:53:d2:db:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 1 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d26600d61b3a18504f9e3a4a0514ee935aa46f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:22:e3:54:02:e7:d0:ff:e2:bf:b5:b1:bb:
c7:8d:17:0c:9c:94:4e:d6:8c:ad:ce:01:79:41:41:
6c:81:24:a6:f1:8b:93:14:a8:08:62:33:69:29:87:
c6:77:69:ff:d0:fd:b7:7d:72:32:95:87:e3:b8:44:
db:43:f2:fb:1e:d5:78:5d:28:1f:01:13:ee:4d:df:
13:30:4f:b0:3a:36:51:48:e3:fd:a8:bf:7a:76:2e:
4f:47:5d:cd:55:4d:ab:16:35:b7:ec:cc:2a:ed:fe:
52:b6:06:95:bf:a8:2e:59:0e:ee:f0:68:df:57:75:
fa:74:55:9b:a3:27:93:53:23:46:61:a8:7b:bd:71:
43:15:aa:24:20:d5:aa:6c:7f:9d:11:bc:f6:f9:04:
23:fd:4d:0c:80:e8:37:f6:b9:43:16:8f:64:c0:04:
bf:f8:d9:24:d8:a6:d5:f3:79:9d:97:20:19:db:4f:
50:b0:35:86:fc:98:8c:30:41:12:60:f4:83:23:3a:
cc:65:8c:2d:ac:37:a8:1c:4a:22:a2:5c:d5:52:89:
ea:dc:69:e3:80:64:cb:e7:9e:ae:76:05:17:d7:7e:
22:f3:72:95:d2:f6:cf:9b:a7:42:97:5a:dc:2b:fa:
07:a1:eb:f2:64:94:53:72:eb:31:85:a7:fa:cf:51:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:60:0D:61:B3:A1:85:04:F9:E3:A4:A0:51:4E:E9:35:AA:46:F3
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/HSZgDWGzoYUE-eOkoFFO6TWqRvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.95.0/24
Signature Algorithm: sha256WithRSAEncryption
41:70:27:10:bd:c6:7c:4e:61:01:26:bb:f9:4d:83:67:77:f5:
79:6a:f0:20:5f:8d:cb:1c:a4:c4:32:b7:14:7a:a7:44:58:ec:
79:08:91:9c:83:ee:d2:53:02:53:b3:62:5f:2c:32:47:be:86:
34:a8:3f:f7:ae:eb:b2:ce:f8:bf:38:2d:28:c9:f5:37:a0:5d:
b2:09:ae:0b:9a:1a:21:86:03:45:4c:71:c0:ce:af:2e:ed:e5:
d3:15:54:20:01:f6:cb:b9:f7:af:1a:a7:62:d1:81:2a:6f:84:
0a:fe:6e:3a:da:b7:e8:da:3a:e9:20:04:a0:13:a7:75:3b:4f:
ef:99:0f:47:f8:65:9a:3f:b6:62:71:5c:30:d3:00:ee:d9:a6:
79:63:f8:ed:a4:05:82:5c:51:d3:f1:a6:13:ab:46:43:c9:3d:
ce:ed:d4:d8:e9:17:4d:5c:5a:3c:44:21:d8:a5:f4:2a:fc:d8:
e7:08:c6:f8:48:b3:25:ff:0a:19:a5:72:5e:63:e3:ab:24:34:
8e:08:3c:03:e7:88:d1:2c:a7:68:cc:10:30:43:63:b5:3c:3c:
76:3d:2d:dd:68:14:a6:5a:8e:2e:0f:4c:69:e3:0a:48:b7:d5:
8c:e2:ae:6b:56:55:96:99:18:8b:2d:fb:8d:26:0b:5b:20:42:
2e:d8:65:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:26:48 2026 by rpki-client