This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa
File: c7MPDF7AuIz_xunWDuFI6Zip6nY.roa (raw, json)
Hash identifier: 7iUKf2Xowp5SQqf2eZSh0VXwG8m3+M8eOQtKtEsx4Q4=
Subject key identifier: 73:B3:0F:0C:5E:C0:B8:8C:FF:C6:E9:D6:0E:E1:48:E9:98:A9:EA:76
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 019B775893FB8BD8F5664E084C033A5DC252
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa
Signing time: Thu 01 Jan 2026 02:17:32 +0000
ROA not before: Thu 01 Jan 2026 02:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210169
IP address blocks: 195.95.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:93:fb:8b:d8:f5:66:4e:08:4c:03:3a:5d:c2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Jan 1 02:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73b30f0c5ec0b88cffc6e9d60ee148e998a9ea76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:21:ab:64:ea:fc:88:e0:db:03:c2:47:2e:
18:e8:70:db:86:c9:ef:bf:20:f7:f5:a9:aa:1d:50:
fc:6c:d5:47:16:23:de:0e:57:78:a8:c9:3d:65:ff:
b1:c4:6f:b4:b8:62:13:b7:1b:27:06:5e:ed:78:67:
80:88:aa:fe:0b:71:39:4f:c3:36:8c:7b:d2:d2:5f:
89:c3:ff:67:d2:f6:f9:6f:47:30:87:06:60:24:3e:
d9:4f:5b:69:bd:83:6a:8e:2b:43:14:4a:99:66:91:
d8:63:32:8d:e4:49:89:ab:19:90:a0:0b:66:28:d5:
67:5b:2f:84:c0:3c:e9:46:98:8d:96:67:bd:70:2c:
8c:79:17:d1:4e:74:b0:a1:f9:e0:15:41:81:bc:c7:
ba:92:6a:0c:db:f8:69:51:be:0e:59:18:83:95:89:
03:c2:a4:9f:af:57:f7:bd:8a:b0:68:ef:c9:92:ab:
48:6a:35:bf:df:e2:1c:b4:a0:84:3a:3d:ef:24:4e:
aa:87:40:5b:0a:a8:cb:fe:80:fb:2d:7a:45:17:d4:
af:c3:4a:af:49:c7:1f:02:39:63:5f:01:af:64:7f:
53:a8:26:27:10:3e:0f:c2:74:c0:ff:ca:c9:34:1b:
73:48:49:00:2d:f2:39:5b:0f:30:e1:3f:20:b5:4a:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:0F:0C:5E:C0:B8:8C:FF:C6:E9:D6:0E:E1:48:E9:98:A9:EA:76
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
88:56:17:10:dc:f7:6e:95:3a:70:e2:5d:5f:08:d5:9d:87:e3:
e0:d9:79:70:2f:69:6f:67:56:51:f3:ab:7e:5d:c9:fb:83:9d:
33:22:57:e8:fc:8a:13:9e:d8:fa:34:e5:9f:0f:c2:c8:68:59:
b4:57:e0:2b:2a:ed:81:41:84:31:e8:34:9e:fb:45:42:5d:d7:
94:ec:2a:db:12:0e:00:08:d4:c2:7b:12:8e:cf:c3:2b:37:54:
0e:d9:d3:c8:9b:63:ed:79:9b:b5:fa:75:87:f4:31:2d:19:3d:
2c:1b:11:69:d7:91:bb:55:58:a3:94:f1:5e:79:c3:07:a7:59:
b2:e8:44:6c:4d:56:d5:0e:4b:71:d1:5f:dc:97:89:ce:ef:5a:
d8:56:59:09:3c:29:36:2f:d4:f5:98:52:d5:dc:3d:80:82:3e:
28:66:62:41:23:0d:39:0b:09:04:c8:0e:77:25:9c:12:b2:91:
c3:32:61:57:07:6c:22:94:98:64:20:52:af:a3:99:2f:6b:07:
7d:45:df:27:29:40:bc:2e:b1:11:8d:f7:f6:29:86:bc:34:8e:
88:00:1f:6a:71:ee:50:88:06:56:f3:1a:cb:b8:ce:fa:5c:7d:
2b:8c:d1:3a:a1:fc:a3:56:b5:6c:b2:f3:78:a7:49:53:f3:da:
ed:18:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:38 2026 by rpki-client