This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa
File: f7Z-yQgbhY-mbuerKun7yr_WUAA.roa (raw, json)
Hash identifier: atWuTLUfIEIsv5drDtWMJUqZuSDTqKqQ4Je+XdvicgE=
Subject key identifier: 7F:B6:7E:C9:08:1B:85:8F:A6:6E:E7:AB:2A:E9:FB:CA:BF:D6:50:00
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 019B7C131861750047242D0075C890F6BC60
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa
Signing time: Fri 02 Jan 2026 00:19:44 +0000
ROA not before: Fri 02 Jan 2026 00:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210641
IP address blocks: 2a02:dcf::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:18:61:75:00:47:24:2d:00:75:c8:90:f6:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Jan 2 00:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb67ec9081b858fa66ee7ab2ae9fbcabfd65000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:80:88:ca:28:5c:14:0e:b0:ef:86:75:64:
75:70:2f:fc:7e:68:4b:eb:7f:04:17:22:df:19:ea:
e0:ea:81:68:ff:b2:fb:c4:4c:f0:1f:a5:93:dc:5b:
89:20:2d:da:89:d0:8d:51:1e:01:f9:25:ae:2e:d4:
d4:6e:3f:d5:fe:b3:3e:4b:64:8d:65:d4:a7:1e:7f:
c2:6a:f1:b9:08:f5:36:71:2a:29:01:5e:78:b6:a1:
19:89:a7:8a:0f:1f:09:73:fa:1e:50:73:a6:7e:0d:
f1:c1:33:ea:58:92:0a:48:9e:60:57:a9:86:74:70:
98:22:fe:49:56:0a:9e:14:23:de:e6:90:ff:52:00:
19:09:b7:27:95:c1:cb:30:a2:3d:29:28:f9:bb:61:
38:0a:0b:28:16:d1:b7:f3:9c:0e:c5:8f:65:6b:a0:
c2:0f:f7:25:53:55:b5:33:c2:22:5e:b7:84:82:aa:
1b:8d:83:79:d3:92:00:fd:ba:41:32:73:86:47:95:
9a:11:5f:24:28:0f:3a:0c:2d:09:43:b6:c7:df:b9:
bd:b9:65:9e:66:e3:ee:57:a0:91:09:58:a5:81:02:
c0:c0:c3:99:60:43:4d:41:e4:5e:01:45:9e:19:9d:
5c:c8:86:f7:3c:a8:5e:7f:40:19:0c:b9:bd:9d:c0:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:7E:C9:08:1B:85:8F:A6:6E:E7:AB:2A:E9:FB:CA:BF:D6:50:00
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:dcf::/32
Signature Algorithm: sha256WithRSAEncryption
56:04:bf:81:30:1b:0b:95:02:24:50:b6:d9:79:8e:b8:a0:2d:
2e:e8:45:88:76:3d:60:2b:1c:84:f9:34:fa:07:6a:6f:14:69:
eb:ff:a7:19:2c:d3:73:62:51:72:8b:1b:a3:a0:19:da:f7:44:
b6:00:4d:47:c8:5a:3d:ff:50:ff:16:b2:ba:4a:ba:df:aa:43:
93:b9:ff:b1:5d:d3:ac:8d:07:28:9d:81:e3:fd:97:6c:66:f6:
45:ee:20:99:f4:ba:58:1b:ad:f7:f9:d4:7e:ae:9b:68:15:56:
37:f7:b7:b3:d5:ca:7e:37:08:24:2d:b1:dd:48:59:5d:95:2b:
22:11:fa:cd:c7:a3:73:cf:d4:c4:4a:23:5c:b7:44:a4:df:2e:
fe:50:7e:b1:43:8b:60:2f:06:01:ee:6b:05:51:31:c5:9d:b0:
5e:49:e6:e9:06:c1:f8:ce:85:db:2f:39:e1:5c:ff:07:1d:37:
0f:62:7f:02:d0:79:9e:40:52:a4:18:5d:4b:ab:e7:32:3e:54:
67:c0:4f:47:24:6d:22:13:f1:e0:97:ad:9c:93:90:db:bd:8b:
ae:76:94:67:4d:fb:36:2e:7a:f8:5f:ca:02:d5:d9:3f:81:50:
0c:e9:d5:1f:6a:82:f7:ae:07:d5:3d:cf:28:14:d7:ae:f0:7d:
45:20:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:44 2026 by rpki-client