This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa
File: SEcs47zxHnaub6zbYmRibja7-0k.roa (raw, json)
Hash identifier: BgJ+K19PECi1+Y95OlHSkHUKKE4El4/40Gb09u3R0LE=
Subject key identifier: 48:47:2C:E3:BC:F1:1E:76:AE:6F:AC:DB:62:64:62:6E:36:BB:FB:49
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019B7C133AF7CA1C337836DDFD4A72D2A2DF
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa
Signing time: Fri 02 Jan 2026 00:19:53 +0000
ROA not before: Fri 02 Jan 2026 00:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200081
IP address blocks: 185.75.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 13:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:3a:f7:ca:1c:33:78:36:dd:fd:4a:72:d2:a2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 00:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48472ce3bcf11e76ae6facdb6264626e36bbfb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:a5:ba:22:16:83:50:97:e8:84:dc:52:c6:
d8:2c:e5:e6:74:aa:00:50:5d:ee:d6:f5:9a:6d:f5:
f4:ff:e9:eb:06:ea:2b:87:cd:86:02:72:ca:46:c6:
eb:1c:09:b8:69:8c:67:d7:1c:e7:89:7e:1e:4d:ac:
35:04:3c:f3:a8:88:08:b9:9f:48:56:05:0a:c2:af:
72:64:7a:b8:db:1b:0a:a0:91:e8:64:49:40:8d:fe:
8b:fe:93:1a:79:c9:fd:33:49:57:91:2d:49:fb:33:
b0:01:08:30:6b:0c:0a:17:57:a0:f3:17:8a:d6:e8:
b2:ee:38:18:c2:be:14:ef:c2:b1:a5:0b:ec:de:40:
f8:12:75:a2:86:dc:1c:bb:dc:25:3f:28:7f:9b:0c:
08:cc:04:41:ae:b3:62:cd:f8:45:1e:5c:a8:b1:e9:
db:7b:cd:4c:73:52:73:9b:91:68:73:07:79:6e:52:
e0:2c:29:04:ab:9d:54:6d:d7:af:c9:8f:61:04:2c:
24:0b:4c:17:a9:50:e2:18:10:9d:cd:41:0c:dd:96:
e3:17:d9:0b:36:2b:fc:f2:ae:10:05:4a:c2:b8:61:
9a:88:dd:a8:a7:6d:87:51:50:9a:34:26:e6:d5:b1:
bb:6b:a4:ef:18:ee:b9:15:6d:4f:d7:c7:8f:87:cc:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:2C:E3:BC:F1:1E:76:AE:6F:AC:DB:62:64:62:6E:36:BB:FB:49
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b9:88:ba:05:a0:94:2f:19:d7:8d:9c:2f:57:6b:1b:2e:20:
7f:ac:3c:9b:4a:33:19:ea:d5:81:10:32:0c:eb:40:2c:e7:e0:
b2:e3:e7:17:c9:3e:c6:c6:a7:a9:cb:41:97:48:44:dd:5d:0f:
f8:5d:53:e3:e1:55:9d:58:bc:52:ac:91:93:d6:73:99:f4:25:
5d:f6:16:3f:3a:91:96:81:e8:2a:5b:b2:b9:ce:be:7c:05:d5:
72:38:44:9a:5c:9f:d7:41:1e:f4:ef:05:1c:ca:e8:d7:8d:2d:
59:0a:75:02:41:71:21:82:e4:c8:74:d1:49:34:68:d7:c4:4f:
00:14:a5:3c:46:c7:1d:7e:3a:b2:4d:13:06:38:ba:91:b8:e8:
3a:11:ac:19:c5:c6:ef:86:89:10:c9:d1:86:6f:1e:c2:35:99:
25:79:54:28:f2:9b:64:47:4e:2f:ea:5d:1e:5c:30:d6:a5:3c:
3a:31:c8:5e:0b:e0:41:26:bf:94:b8:87:37:a5:4d:75:73:3f:
0e:af:67:89:e1:0f:61:1e:35:be:63:c5:13:3d:25:62:b1:0d:
f2:fe:64:1e:49:9b:b2:a8:98:89:bf:da:5c:a6:25:0c:5d:8a:
f3:fe:27:3c:fe:d9:6d:fc:b8:08:9a:a3:0b:ce:a6:55:82:ce:
8c:06:4f:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ezr3yhwzeDbd/Upy0qLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ3MmNlM2JjZjExZTc2YWU2ZmFjZGI2MjY0NjI2ZTM2YmJmYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4KluiIWg1CX6ITcUsbYLOXmdKoA
UF3u1vWabfX0/+nrBuorh82GAnLKRsbrHAm4aYxn1xzniX4eTaw1BDzzqIgIuZ9I
VgUKwq9yZHq42xsKoJHoZElAjf6L/pMaecn9M0lXkS1J+zOwAQgwawwKF1eg8xeK
1uiy7jgYwr4U78KxpQvs3kD4EnWihtwcu9wlPyh/mwwIzARBrrNizfhFHlyosenb
e81Mc1Jzm5Focwd5blLgLCkEq51UbdevyY9hBCwkC0wXqVDiGBCdzUEM3ZbjF9kL
Niv88q4QBUrCuGGaiN2op22HUVCaNCbm1bG7a6TvGO65FW1P18ePh8ys9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhHLOO88R52rm+s22JkYm42u/tJMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvU0VjczQ3enhIbmF1YjZ6YlltUmliamE3LTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUuGMA0G
CSqGSIb3DQEBCwUAA4IBAQB9uYi6BaCULxnXjZwvV2sbLiB/rDybSjMZ6tWBEDIM
60As5+Cy4+cXyT7Gxqepy0GXSETdXQ/4XVPj4VWdWLxSrJGT1nOZ9CVd9hY/OpGW
gegqW7K5zr58BdVyOESaXJ/XQR707wUcyujXjS1ZCnUCQXEhguTIdNFJNGjXxE8A
FKU8RscdfjqyTRMGOLqRuOg6EawZxcbvhokQydGGbx7CNZkleVQo8ptkR04v6l0e
XDDWpTw6McheC+BBJr+UuIc3pU11cz8Or2eJ4Q9hHjW+Y8UTPSVisQ3y/mQeSZuy
qJiJv9pcpiUMXYrz/ic8/tlt/LgImqMLzqZVgs6MBk/i
-----END CERTIFICATE-----
Generated at Tue Jan 20 19:51:17 2026 by rpki-client