This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa
File: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (raw, json)
Hash identifier: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=
Subject key identifier: EE:8E:A4:A6:DB:45:98:D7:36:43:F1:5B:EC:26:34:70:C0:B1:D0:1C
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 019B7B366D7162958DCE43599658D12F89DE
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa
Signing time: Thu 01 Jan 2026 20:18:43 +0000
ROA not before: Thu 01 Jan 2026 20:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208729
IP address blocks: 185.75.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:6d:71:62:95:8d:ce:43:59:96:58:d1:2f:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Jan 1 20:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee8ea4a6db4598d73643f15bec263470c0b1d01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:73:55:ba:1a:3b:27:bc:24:b2:98:ae:32:
fd:24:d0:5b:82:81:07:71:00:62:25:b2:70:d5:08:
ac:e8:74:b7:ac:79:14:41:92:d1:28:5e:c3:94:37:
77:e4:1b:bf:be:f3:c0:2d:21:28:4f:c6:1d:f5:3d:
fd:23:12:e7:9e:7d:0e:11:84:f6:2b:fd:98:d8:bc:
9a:63:15:31:e4:d9:f4:a3:6f:d0:f1:0f:fd:ad:2e:
d3:63:7d:f8:46:ee:35:2a:a6:06:48:f7:db:11:b8:
af:5f:05:5e:d7:f7:25:d2:05:3a:7d:ec:df:2c:14:
2b:8f:39:44:0b:54:3a:e7:7f:35:33:36:be:17:c1:
0e:a2:3f:b4:1b:e1:e5:d0:43:19:21:a3:57:e7:14:
ed:16:c2:02:31:87:57:4a:5e:3c:7d:92:2f:8c:54:
86:c4:8e:7e:1e:fd:b3:a4:5b:bf:67:ac:ec:41:2b:
b1:25:d4:1f:b5:0d:65:6a:dd:54:59:7f:d8:16:69:
1f:67:8a:a6:0e:e3:9f:7f:9d:f1:fe:c0:39:f2:ce:
4b:8b:91:9d:d8:5a:11:d4:20:ce:a5:9f:af:89:57:
f6:f4:4d:e4:01:39:dc:b5:d9:f4:36:2f:05:dd:41:
a5:a5:0f:56:5e:3d:ff:bc:15:d2:87:9a:4b:48:b2:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:A4:A6:DB:45:98:D7:36:43:F1:5B:EC:26:34:70:C0:B1:D0:1C
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.84.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a5:53:a8:ea:08:ce:25:06:e5:98:cc:15:ee:96:94:89:90:
0d:d7:18:a0:e9:46:b9:4e:c5:8b:45:e1:d9:2b:66:ff:7f:22:
6d:e0:4d:46:96:f2:38:1b:2e:c5:a8:af:4c:88:f5:c3:c1:5d:
fe:da:23:e5:95:74:fb:86:f3:4c:69:6c:41:4b:a9:8b:fb:ae:
fb:8d:aa:f3:c3:e7:99:c0:19:ab:e3:d8:e9:a7:78:e9:bc:04:
09:9c:a9:29:dc:41:f0:36:4e:00:08:f3:f0:58:c5:68:a3:91:
8a:d7:29:13:eb:17:c8:41:5c:7d:a3:a7:86:31:49:b0:08:50:
ed:83:92:33:74:f8:bf:e3:5f:db:e6:4e:90:e5:ab:89:90:2a:
25:00:d3:c7:91:d0:1f:b0:42:de:f8:44:8c:9f:24:17:44:b5:
81:75:64:ee:0b:ea:ff:78:b5:24:46:ac:60:ee:a3:ed:cb:dd:
9e:d0:e6:1f:5c:91:8d:62:9a:45:85:44:32:f1:71:ac:0e:e4:
49:0c:f1:78:d1:30:cc:ac:45:07:aa:4b:57:a3:b5:bd:88:32:
17:01:19:5b:8e:32:24:29:ef:9d:1a:5d:8b:21:8b:fa:7b:cf:
96:9d:f0:17:5b:9c:d4:9f:94:28:3c:44:f9:fb:87:09:29:33:
ab:a1:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:37 2026 by rpki-client