This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa
File: Z7FvUApf6QnMEHQR_5aneXFhbPg.roa (raw, json)
Hash identifier: gukoAxjRLbcm80d3Vzb9/kGayYnEMM/pkT9iNNFnd/k=
Subject key identifier: 67:B1:6F:50:0A:5F:E9:09:CC:10:74:11:FF:96:A7:79:71:61:6C:F8
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 019B7C8020801547F5EAF724B18AC726CC11
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa
Signing time: Fri 02 Jan 2026 02:18:50 +0000
ROA not before: Fri 02 Jan 2026 02:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6823
IP address blocks: 37.202.48.0/21 maxlen: 21
37.202.48.0/24 maxlen: 24
37.202.49.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.40.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.42.0/24 maxlen: 24
178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 38
2a01:6be0::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:20:80:15:47:f5:ea:f7:24:b1:8a:c7:26:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Jan 2 02:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b16f500a5fe909cc107411ff96a77971616cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:79:2b:f4:63:a2:71:21:3b:a3:c5:29:8e:
af:44:36:3e:86:fd:aa:eb:c5:cb:02:a6:fa:26:2b:
b4:84:6c:13:9f:a1:27:7a:06:10:5f:b0:b1:a2:e9:
81:ca:43:2b:8d:5b:de:e2:89:cc:f5:d2:30:ee:77:
56:2a:18:54:1e:cc:ff:f7:03:4f:93:36:dc:4a:89:
66:ab:2a:d4:31:13:d7:ea:81:c7:3d:b1:6d:b2:69:
6c:4a:3e:39:a1:d1:eb:2a:6c:c3:50:19:36:11:a9:
d9:7c:ad:59:98:09:c8:64:16:20:02:ca:c3:6b:d0:
32:98:d1:45:e2:07:36:88:7b:9a:92:45:d8:e1:74:
e2:d5:ec:bb:88:bb:b5:72:17:e0:56:34:52:4d:ab:
21:5a:af:af:c9:78:fb:82:88:8f:ef:70:4a:0d:00:
95:ef:a0:e8:ed:5a:de:11:81:ac:a6:f5:67:e0:1d:
be:1b:e1:49:e7:c5:5b:f8:7c:39:18:eb:43:b4:c1:
66:de:dd:0f:4e:b3:d1:96:db:8f:b5:86:1f:c1:08:
09:0c:28:6d:e7:73:9f:97:77:04:0e:5f:3a:26:d3:
62:bb:d8:bf:3a:0d:44:5d:bf:e9:0d:b1:af:1e:72:
0c:14:58:b5:b9:e9:65:66:ac:ad:4f:ef:98:30:f1:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:6F:50:0A:5F:E9:09:CC:10:74:11:FF:96:A7:79:71:61:6C:F8
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/Z7FvUApf6QnMEHQR_5aneXFhbPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
58:c9:ec:64:8f:d9:73:4c:af:77:55:07:2f:8a:5a:f6:92:c8:
f8:fe:c2:df:f7:da:db:5d:4a:ff:8c:52:10:7f:cf:8e:90:e6:
6a:58:c0:e5:d6:f4:a1:07:c1:fa:14:92:fa:47:10:9a:db:16:
72:19:bf:e4:92:e2:38:8c:07:00:bd:16:ca:d1:fb:dd:c2:f6:
fa:ea:b1:c4:4b:5a:35:c1:cb:82:e2:ed:42:bf:3b:96:60:28:
a0:4e:44:49:1c:76:2d:20:31:9d:0e:19:a4:4d:b2:85:8e:e1:
fa:03:fa:71:fa:42:c9:c7:0f:71:d0:69:10:00:c9:46:75:ab:
18:17:d8:f4:d1:2b:d4:97:e4:34:e2:db:53:8a:d5:f1:20:47:
fb:d6:a3:60:50:96:92:86:9b:b7:ff:98:8f:ff:4d:e2:61:50:
8e:71:7a:a4:d8:ec:12:aa:ca:27:62:fc:91:71:ce:f6:95:7d:
42:9b:7e:e4:76:45:52:b2:93:3d:c1:19:e4:18:3c:b8:c9:48:
bd:6d:6b:85:76:18:52:23:73:84:50:d4:51:0c:78:10:85:36:
4b:08:46:fe:96:b9:fe:dd:6f:fa:04:ca:a6:55:3a:de:31:69:
30:26:b5:0b:75:07:7e:e5:03:4c:7f:11:29:98:0e:93:47:8d:
e7:ae:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:29 2026 by rpki-client