This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa
File: k7WMCllWar9Vb7fMD-FNqAGjq8g.roa (raw, json)
Hash identifier: +rvK4SmRtwZUO3WvDMk+eBGnMNZJ7s4dXyPjupF/zCo=
Subject key identifier: 93:B5:8C:0A:59:56:6A:BF:55:6F:B7:CC:0F:E1:4D:A8:01:A3:AB:C8
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019B7A5A8C1AC26CCF2A6B7EE9A3BD35776F
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa
Signing time: Thu 01 Jan 2026 16:18:33 +0000
ROA not before: Thu 01 Jan 2026 16:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 193.222.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:8c:1a:c2:6c:cf:2a:6b:7e:e9:a3:bd:35:77:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Jan 1 16:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93b58c0a59566abf556fb7cc0fe14da801a3abc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:25:2a:7c:a0:4e:77:40:aa:4c:90:7b:4f:
02:88:88:3f:23:d0:5d:77:f0:12:38:ab:f4:e9:63:
b1:3b:c6:22:72:55:0f:5e:88:de:2a:27:42:9e:2d:
85:35:00:8e:0b:e2:69:79:7c:6f:fd:a6:a6:b7:82:
c8:83:ac:16:41:e7:9c:41:4f:6c:0b:6b:13:1c:46:
b8:01:52:80:f7:7c:52:e4:59:f7:4c:4b:20:62:0f:
d3:95:21:e6:eb:5c:ac:bf:5d:c8:7b:78:d8:80:e4:
5a:f8:b9:74:26:9e:fe:70:5f:69:0b:b1:9f:41:1d:
40:70:51:d6:6e:fc:d4:97:8f:85:f4:ae:86:89:98:
5f:93:10:b9:3d:79:4d:58:58:d4:72:82:2c:0d:63:
f2:e0:04:61:df:5e:15:7b:59:93:db:7b:50:eb:9d:
ac:32:a7:54:ad:b9:db:dd:ff:51:ea:c3:3d:f7:4e:
3e:ea:a3:52:e9:b7:c4:22:b8:19:31:bb:56:70:3d:
6a:49:02:c8:5c:f9:5e:23:8c:b8:23:ea:d0:7f:7d:
60:12:0a:96:86:d1:d0:5f:0d:1d:b0:7f:6a:c5:67:
88:90:eb:99:bd:8d:ae:24:9c:e8:21:58:2e:b3:8d:
5a:64:27:96:b3:85:93:cf:df:90:0c:94:64:c4:e9:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:8C:0A:59:56:6A:BF:55:6F:B7:CC:0F:E1:4D:A8:01:A3:AB:C8
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ed:95:5d:80:9f:1e:c3:95:72:28:aa:f8:73:0e:99:c3:51:
e2:88:66:51:e0:f6:78:61:e1:59:b5:b9:d1:c1:a0:c8:fb:64:
7d:42:88:1d:38:e1:75:3b:7d:dc:ef:57:af:04:dc:f9:a9:fe:
9c:bd:5e:0d:d4:d1:67:76:ce:23:90:1e:fc:6f:da:4e:5e:96:
5d:4a:79:1b:87:a2:bc:e3:5a:51:87:72:f8:16:9f:73:bf:af:
18:dd:0c:70:56:46:c4:4f:43:28:4d:ae:6d:58:5a:32:1a:86:
c1:4e:55:ef:dc:08:4a:0b:9b:8d:04:5f:14:d2:b2:08:02:5f:
8b:86:29:00:08:9e:59:6f:d7:50:91:05:18:ae:89:c8:68:37:
41:f4:71:af:a5:5d:38:c9:2a:d4:3d:98:2d:39:59:33:a0:48:
28:3a:94:8c:75:78:b6:02:37:db:88:d5:48:86:f1:c6:bf:e6:
96:08:1c:8a:e3:9e:3a:e5:ca:9e:99:81:8e:8f:2e:fb:27:dd:
1d:04:1b:ca:44:b0:a5:32:ed:5c:ab:5f:2d:11:b8:48:1b:c1:
12:7e:ea:ab:d6:fd:12:d2:9d:f2:bd:a1:53:3f:97:17:74:93:
6f:29:b9:7d:b5:59:80:e4:37:16:c1:6f:d7:f3:a1:55:36:e5:
b9:58:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:04:02 2026 by rpki-client