This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/0y82NnZOUS5QhtbUGUPm-XaKV8A.roa
File: 0y82NnZOUS5QhtbUGUPm-XaKV8A.roa (raw, json)
Hash identifier: g76Du+LlOjlKMO34J2hj9ezARBg/rEQncuJVGlyHo34=
Subject key identifier: D3:2F:36:36:76:4E:51:2E:50:86:D6:D4:19:43:E6:F9:76:8A:57:C0
Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial: 019B797E14C1715F03D1FE64F9BD48130DE1
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/0y82NnZOUS5QhtbUGUPm-XaKV8A.roa
Signing time: Thu 01 Jan 2026 12:17:44 +0000
ROA not before: Thu 01 Jan 2026 12:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39357
IP address blocks: 193.84.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:14:c1:71:5f:03:d1:fe:64:f9:bd:48:13:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Validity
Not Before: Jan 1 12:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d32f3636764e512e5086d6d41943e6f9768a57c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:94:d5:fa:4a:83:a6:fd:f7:fe:d7:35:bb:
a4:4f:b9:00:69:4d:09:2e:db:a5:cf:ac:d4:b5:32:
c1:86:19:51:71:b3:20:b6:23:b7:8c:ce:a8:33:f7:
19:a5:8b:ba:09:f0:f6:9a:07:12:dd:e2:e5:0b:74:
fa:f0:a9:c7:1f:05:37:20:47:33:c7:ab:96:f1:6e:
79:1a:de:41:c2:fc:8d:e1:73:4b:7b:76:cc:4c:23:
16:54:44:eb:fe:da:05:42:9f:5f:f3:ae:23:6d:34:
ed:f7:94:b8:56:93:10:b0:b7:34:de:85:96:2f:54:
d9:c9:ef:ba:cd:a9:f8:25:e5:12:ea:19:05:6c:1d:
2b:c4:67:96:e3:be:0a:a9:c6:c5:5e:17:22:18:55:
59:3c:93:43:c9:95:05:62:c1:59:de:8b:d2:57:a2:
6e:b0:51:b7:ff:f9:2f:b0:db:c8:7b:4c:4c:13:fc:
29:6e:64:97:3f:ae:0c:2c:bb:12:53:ef:64:eb:cc:
71:7d:9d:71:dc:8a:92:8f:14:87:b8:cc:4d:1f:70:
58:7d:18:8b:95:fd:68:73:1a:4b:ff:76:96:d3:4b:
91:27:98:f8:b4:40:7c:e9:bd:d7:f3:50:63:37:96:
7e:ad:25:1d:c9:5f:09:6e:88:07:b7:38:61:c5:bf:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:36:36:76:4E:51:2E:50:86:D6:D4:19:43:E6:F9:76:8A:57:C0
X509v3 Authority Key Identifier:
keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/0y82NnZOUS5QhtbUGUPm-XaKV8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.86.0/24
Signature Algorithm: sha256WithRSAEncryption
61:26:61:57:ed:23:c6:76:81:52:df:37:77:31:23:88:46:7e:
86:82:46:23:83:1b:0b:be:bb:ff:16:5d:48:24:bf:af:8f:68:
6c:71:b3:db:32:3c:4e:a2:cd:eb:de:b3:76:e5:02:88:ee:ea:
3a:c7:51:af:0f:8a:e0:4e:c5:75:60:16:ba:56:83:e4:f6:9b:
14:56:0b:c0:2b:01:da:9b:ad:0c:55:b3:89:95:53:e5:2c:2d:
ef:2e:46:1d:8b:12:ed:ed:3d:ad:3b:7b:a2:75:87:16:1d:8c:
af:df:49:fe:93:10:b4:7c:c8:f9:43:1d:99:f1:29:30:f4:d6:
b4:59:e8:35:1f:5f:6e:cf:df:ef:42:7a:34:18:57:6e:bb:d0:
5c:58:ae:55:c9:ed:ba:fd:88:27:1b:67:83:25:f6:41:af:25:
45:28:e0:9e:fc:73:73:dc:35:e8:af:3c:54:a7:db:45:bb:c3:
aa:12:88:d6:cb:ca:51:69:d2:9b:e6:12:14:b9:fb:ea:cf:79:
81:d7:54:ed:c1:bf:09:c5:f8:d2:aa:91:ae:9f:90:69:5c:1d:
66:82:07:4f:c3:1f:79:1d:fb:53:58:3e:b1:7a:33:b7:42:fe:
16:a1:93:9b:e6:b1:33:9a:2b:29:58:ac:e6:64:7a:3b:fa:16:
9d:b0:ba:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fhTBcV8D0f5k+b1IEw3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZWU1YzFjODA0YzMzZmRlMzNkOWIwOGI5MTlmNzNkMzFk
MGI2ZDkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzJmMzYzNjc2NGU1MTJlNTA4NmQ2ZDQxOTQzZTZmOTc2OGE1N2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuaU1fpKg6b99/7XNbukT7kAaU0J
Ltulz6zUtTLBhhlRcbMgtiO3jM6oM/cZpYu6CfD2mgcS3eLlC3T68KnHHwU3IEcz
x6uW8W55Gt5BwvyN4XNLe3bMTCMWVETr/toFQp9f864jbTTt95S4VpMQsLc03oWW
L1TZye+6zan4JeUS6hkFbB0rxGeW474KqcbFXhciGFVZPJNDyZUFYsFZ3ovSV6Ju
sFG3//kvsNvIe0xME/wpbmSXP64MLLsSU+9k68xxfZ1x3IqSjxSHuMxNH3BYfRiL
lf1ocxpL/3aW00uRJ5j4tEB86b3X81BjN5Z+rSUdyV8JbogHtzhhxb//KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMvNjZ2TlEuUIbW1BlD5vl2ilfAMB8GA1UdIwQY
MBaAFPfuXByATDP94z2bCLkZ9z0x0LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMt
ZTA4ZDUzZjA5NjEyLzEvMHk4Mk5uWk9VUzVRaHRiVUdVUG0tWGFLVjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMtZTA4ZDUzZjA5NjEy
LzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRWMA0G
CSqGSIb3DQEBCwUAA4IBAQBhJmFX7SPGdoFS3zd3MSOIRn6GgkYjgxsLvrv/Fl1I
JL+vj2hscbPbMjxOos3r3rN25QKI7uo6x1GvD4rgTsV1YBa6VoPk9psUVgvAKwHa
m60MVbOJlVPlLC3vLkYdixLt7T2tO3uidYcWHYyv30n+kxC0fMj5Qx2Z8Skw9Na0
Weg1H19uz9/vQno0GFduu9BcWK5Vye26/YgnG2eDJfZBryVFKOCe/HNz3DXorzxU
p9tFu8OqEojWy8pRadKb5hIUufvqz3mB11Ttwb8JxfjSqpGun5BpXB1mggdPwx95
HftTWD6xejO3Qv4WoZOb5rEzmispWKzmZHo7+hadsLpV
-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:24 2026 by rpki-client