This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/7UXK90A1-z-aQdqW4S7cqjdmAkc.roa
File: 7UXK90A1-z-aQdqW4S7cqjdmAkc.roa (raw, json)
Hash identifier: vTdXiOonCe2HRyCdr2H2WIFjp9GBJHHKczKKnQZK+uo=
Subject key identifier: ED:45:CA:F7:40:35:FB:3F:9A:41:DA:96:E1:2E:DC:AA:37:66:02:47
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 019B2FE8E07D1A670FFA85201CE0434BC253
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/7UXK90A1-z-aQdqW4S7cqjdmAkc.roa
Signing time: Thu 18 Dec 2025 05:22:29 +0000
ROA not before: Thu 18 Dec 2025 05:22:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:e8:e0:7d:1a:67:0f:fa:85:20:1c:e0:43:4b:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Dec 18 05:22:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed45caf74035fb3f9a41da96e12edcaa37660247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:c4:71:f4:a0:46:2e:9d:26:4f:53:11:91:
d9:14:38:cc:c8:c8:c2:4c:c8:40:f4:04:17:a9:f6:
0c:e3:59:5d:98:14:f0:aa:92:3d:99:e2:ad:c2:35:
13:2c:ac:c8:7a:22:7f:76:2f:da:a3:ad:1d:07:cf:
9c:09:e9:d5:1a:19:12:75:a2:ed:e9:52:7d:7d:41:
e7:e3:81:f0:72:a6:c3:42:ca:a3:34:ab:93:57:ae:
47:42:62:50:54:ed:a1:8a:8c:47:13:38:01:8f:43:
e2:47:bb:9c:29:ff:14:aa:75:0f:19:59:f9:02:ad:
0b:57:bd:9b:b2:a4:54:af:48:ef:cb:82:58:d4:66:
f0:91:05:ca:73:3f:13:12:cb:5b:f9:1b:c3:d0:85:
2d:f8:0b:22:bb:5f:73:98:42:e4:c9:a5:4e:d8:4c:
f4:5a:19:ef:4e:1b:55:e6:38:d0:6a:15:9b:76:24:
8c:54:57:60:b5:92:45:25:ee:e5:ad:0d:90:52:53:
8b:a3:3a:c1:99:91:df:f5:12:c9:fe:0b:84:e8:a3:
b0:da:60:7f:85:b9:90:24:04:50:1e:11:47:e7:35:
0c:09:45:23:e4:20:7a:12:9e:db:e6:52:cf:7d:8a:
ff:e4:f3:11:e5:5f:ea:65:8a:d9:08:2e:13:c3:36:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:CA:F7:40:35:FB:3F:9A:41:DA:96:E1:2E:DC:AA:37:66:02:47
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/7UXK90A1-z-aQdqW4S7cqjdmAkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c8:eb:69:ea:4f:90:87:c3:2d:92:28:3c:2e:14:ac:d0:92:
44:d9:f6:29:a1:bb:74:a8:c2:02:db:37:b7:3c:d4:16:c0:52:
e1:67:32:55:a0:7c:09:6d:d1:63:5b:3f:1b:aa:08:6e:fb:75:
1b:a6:e1:7a:b0:c3:42:80:3d:d9:ed:d2:e2:0c:65:e3:84:5c:
e7:08:c2:da:55:62:71:a2:76:60:bb:dd:3d:06:1e:f4:a5:a4:
ee:f8:90:48:40:10:c5:fd:a6:a3:ff:c0:f3:9f:14:ee:c5:eb:
7a:c6:11:80:e9:30:e1:67:e6:9b:d0:01:2a:06:57:28:de:f0:
db:3a:0d:99:a9:3e:e1:d5:16:30:61:7f:1d:8e:51:c8:64:d8:
fd:e3:5b:75:1d:df:d7:2e:36:f4:23:29:98:22:aa:7e:79:e2:
2f:51:70:71:c0:ad:a9:80:4e:4f:ee:9b:96:cc:bd:da:ab:14:
bd:36:28:3c:0d:67:89:22:65:c8:66:6b:ac:2d:1b:72:0c:ad:
2c:b3:aa:01:3c:af:29:8e:88:94:29:91:9f:cc:e5:81:ea:a6:
46:59:bd:1d:b0:dd:4f:19:8b:f7:05:c3:5f:e8:3d:5e:c1:09:
44:a0:fc:32:10:9e:9a:b8:56:9e:47:4e:7e:44:38:d6:6c:af:
25:e0:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 21:07:17 2025 by rpki-client