This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa
File: 3ZnlgSbrf049eCIYO73iNtM8JCQ.roa (raw, json)
Hash identifier: GJC/RuNNoXXcqKNwZALbvh45eCMDOfy7Dcd3Npgg0qc=
Subject key identifier: DD:99:E5:81:26:EB:7F:4E:3D:78:22:18:3B:BD:E2:36:D3:3C:24:24
Certificate issuer: /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial: 019B7911231A69795D5013BB9C7934FC6332
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa
Signing time: Thu 01 Jan 2026 10:18:44 +0000
ROA not before: Thu 01 Jan 2026 10:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216439
IP address blocks: 84.234.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:23:1a:69:79:5d:50:13:bb:9c:79:34:fc:63:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Validity
Not Before: Jan 1 10:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd99e58126eb7f4e3d7822183bbde236d33c2424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:24:5d:c6:32:7c:12:e5:69:ae:17:ca:44:
23:99:da:b8:27:f6:e7:4c:69:32:36:da:1a:4b:66:
4e:ac:0f:9b:99:27:91:37:8a:9a:21:6c:12:f7:a0:
1b:4e:60:a4:13:18:2c:e4:6e:3b:af:ac:dc:ef:eb:
5d:04:ea:a1:23:2c:84:a0:2a:12:ad:26:91:dc:9f:
c6:19:82:b5:38:cc:34:24:fe:63:c6:ac:bf:58:8c:
c8:02:30:51:08:f0:46:b0:3e:ff:f7:d7:e9:ff:79:
f3:ae:01:9f:25:cc:8e:97:68:c1:74:05:9e:90:c6:
cc:42:00:fd:00:19:28:f8:b7:13:e5:d9:16:eb:70:
fa:14:f9:65:73:7e:97:a3:c5:33:a7:2a:8a:65:5d:
a3:d3:68:19:aa:54:51:46:16:c2:24:85:ff:31:61:
95:f2:ad:64:be:44:9e:4a:32:58:11:e2:c6:63:f2:
b0:7a:8f:8d:39:b1:ea:b1:92:9a:c2:08:da:0c:93:
af:5a:38:0c:62:a8:44:ff:92:8c:9a:df:c0:48:1b:
dd:4d:5c:84:34:cc:1c:1e:f8:74:f1:18:2b:75:b2:
8f:6e:c2:b0:9b:b9:19:ac:44:d2:d4:e0:7d:12:82:
0b:b4:04:aa:36:9f:4d:e3:03:7e:e4:43:dd:b3:69:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:E5:81:26:EB:7F:4E:3D:78:22:18:3B:BD:E2:36:D3:3C:24:24
X509v3 Authority Key Identifier:
keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/3ZnlgSbrf049eCIYO73iNtM8JCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.127.0/24
Signature Algorithm: sha256WithRSAEncryption
72:30:f7:0d:70:71:ae:80:0d:ed:fc:1e:9f:33:43:09:83:5a:
63:13:20:fa:ca:79:af:28:e9:e7:58:64:81:11:ca:d1:ce:c1:
5b:6c:f1:2a:b6:07:d7:71:dd:2f:6b:c7:d9:11:d5:84:b1:8f:
63:a7:bc:b6:1a:1a:1b:ab:f5:be:48:ba:53:64:77:99:ab:29:
56:38:31:4b:7f:5b:84:e3:b1:7b:5c:c7:e4:a0:b5:df:4e:cc:
06:5d:b8:be:a0:59:a7:d0:1e:86:55:f1:a9:49:09:03:80:c9:
f0:50:77:49:ea:72:8a:40:95:91:39:73:5d:f1:d0:f7:3a:44:
30:fc:27:f9:72:73:97:65:da:1a:9c:df:87:2e:a2:d8:92:02:
85:76:b5:b2:b3:c3:b2:9b:a8:69:b5:b7:8c:3b:40:0f:96:76:
19:a7:d1:15:46:ca:72:2c:76:9f:4e:57:bc:31:6f:ee:9e:f0:
c7:9d:06:3c:5a:d1:b7:ba:ed:be:97:53:a1:a7:4a:96:73:7c:
60:a2:8c:7e:40:04:4c:33:dc:d2:8b:f6:dc:7c:cd:15:83:68:
14:2e:09:c4:00:ac:7d:36:b5:c8:00:3a:e9:e9:f7:ac:b7:d9:
a1:0b:71:ab:b7:96:f9:8b:4f:73:57:8e:25:d2:11:23:a0:47:
aa:d8:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:39:16 2026 by rpki-client