This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa
File: 96d6ctMX_g4ONOX-V119IuFLbcQ.roa (raw, json)
Hash identifier: p56ITbnJXhBydcF7z+SEtTfhLoTMh1wjVprKGq7AA5g=
Subject key identifier: F7:A7:7A:72:D3:17:FE:0E:0E:34:E5:FE:57:5D:7D:22:E1:4B:6D:C4
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 019B78A3692D4D8E4BFE9B5D1144548CF82D
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa
Signing time: Thu 01 Jan 2026 08:18:53 +0000
ROA not before: Thu 01 Jan 2026 08:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205276
IP address blocks: 185.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:69:2d:4d:8e:4b:fe:9b:5d:11:44:54:8c:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Jan 1 08:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a77a72d317fe0e0e34e5fe575d7d22e14b6dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:50:18:6a:09:85:43:28:a5:46:47:27:68:
4f:be:53:83:5b:e2:f3:a6:27:10:a8:41:7d:e8:00:
42:00:1a:67:6d:5f:d7:38:56:3b:e0:5b:52:bc:d1:
5d:77:98:b1:d7:49:0f:86:0e:c6:a4:be:8a:85:16:
ff:6f:12:08:0c:23:40:00:8b:b3:ab:44:e5:8e:91:
80:ea:48:63:2b:72:ea:a2:78:a1:ec:85:ef:1f:30:
18:00:b1:d9:03:67:8b:f8:92:49:38:64:91:80:ee:
c6:96:db:13:71:3b:4a:ca:88:4c:e6:a1:db:66:40:
47:12:63:43:7d:8b:7e:f4:c8:a9:b9:f3:7e:c0:43:
d1:aa:b9:54:f8:0e:59:f2:08:0c:d9:d6:cb:9c:01:
64:e5:40:65:bc:cc:42:9f:8f:82:a5:6a:19:dd:97:
fb:74:75:71:ff:63:4a:1e:ea:ae:7c:92:b1:62:be:
2b:e2:a1:54:25:3c:40:e1:f0:33:ce:50:a2:60:fc:
9c:b0:3f:fb:ee:81:ea:03:78:8d:24:78:da:09:24:
25:f7:87:eb:8c:4a:9d:a2:69:de:a3:fd:37:f3:2f:
78:07:74:48:18:c2:2d:98:10:18:2d:6b:94:3f:78:
5e:79:83:fc:82:7e:24:6f:97:3a:65:3a:b4:38:4c:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:7A:72:D3:17:FE:0E:0E:34:E5:FE:57:5D:7D:22:E1:4B:6D:C4
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:0b:31:54:81:e7:05:45:97:0f:aa:38:44:48:37:76:de:
61:16:c8:0f:9d:2c:0a:e5:0e:0a:43:bf:85:3f:ff:fb:73:bf:
b4:41:d8:a3:1a:d0:b8:55:c9:cd:88:7d:f4:28:69:ce:fa:0d:
ca:f2:d0:1f:46:b2:0a:36:da:0b:59:57:5b:1c:d0:71:d9:9c:
ae:df:94:b0:4b:65:6a:0b:10:96:d8:be:4b:3d:cb:cb:14:97:
ae:08:a1:33:fc:dc:4e:a6:8c:60:66:ac:b3:5f:43:e5:87:5e:
07:74:1a:56:b1:17:78:b3:1b:cb:a4:41:7a:0e:f4:dc:f0:1e:
f3:07:33:1f:50:e8:da:4a:f3:f4:10:69:71:8a:97:4d:de:e3:
60:51:79:d3:34:9f:91:14:4d:38:19:64:96:4e:32:10:42:60:
39:37:ae:0e:36:7a:e2:45:4e:0d:ed:08:20:a6:c2:cf:7f:ae:
61:d3:33:42:75:5e:c1:88:dc:54:03:b2:1b:54:d2:f6:e3:9d:
c9:ce:a4:19:98:b9:2a:0a:1d:2d:f8:ac:3e:18:de:a8:a0:13:
40:d4:8e:52:ab:da:40:ff:e6:14:0c:4b:07:3c:12:fd:0e:a0:
16:c8:cd:23:a5:35:17:54:30:a5:ac:bb:86:e4:79:7e:6f:10:
3b:cf:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:22 2026 by rpki-client