This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa
File: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (raw, json)
Hash identifier: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=
Subject key identifier: ED:81:5A:9D:AC:E9:FC:79:3F:8F:0C:05:8A:09:C9:28:ED:C3:28:02
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 019B7BA3A5426C55A860366DA2FD0F92EAC7
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa
Signing time: Thu 01 Jan 2026 22:18:00 +0000
ROA not before: Thu 01 Jan 2026 22:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 46.28.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:a5:42:6c:55:a8:60:36:6d:a2:fd:0f:92:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jan 1 22:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed815a9dace9fc793f8f0c058a09c928edc32802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:b8:05:0c:c3:55:a9:35:58:dc:e7:a6:ca:
53:31:27:d1:24:df:25:33:53:d7:d5:8e:91:75:3a:
f7:d1:20:03:ea:a5:36:43:6f:4c:03:36:35:ec:ef:
a1:d0:8d:8d:10:be:eb:39:04:41:f3:01:b3:3a:4f:
d3:0f:3e:2c:eb:29:5c:40:e0:9f:7c:c0:dd:dc:2a:
25:d3:3f:36:12:cf:2e:9a:a2:a1:fc:3f:40:38:04:
3b:c0:66:6a:00:01:40:ce:0c:d0:a3:4c:7d:a4:e1:
63:0b:90:3e:21:bb:ef:b3:b5:b1:a4:5c:17:ea:2f:
f7:4d:d6:e6:4a:80:4b:f9:46:bb:3e:8a:8c:86:98:
91:96:25:25:b0:c3:10:2d:33:55:5d:87:8b:8f:58:
42:8e:24:32:c1:c1:94:74:68:44:86:41:7c:f5:75:
42:84:86:6b:31:d7:a1:08:ea:5d:f6:11:ae:34:11:
ac:a0:04:58:63:ea:5f:6a:81:50:56:17:97:3e:97:
00:13:0b:19:da:48:ef:55:8f:76:08:c5:7f:77:f8:
3b:6d:5e:02:10:d3:04:84:d5:d6:42:3a:61:87:b6:
24:72:ef:a2:30:3e:5b:b3:58:c0:11:ff:a4:c6:9d:
bf:36:fe:03:00:50:eb:2e:fb:bb:8c:81:bc:02:de:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:5A:9D:AC:E9:FC:79:3F:8F:0C:05:8A:09:C9:28:ED:C3:28:02
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/7YFanazp_Hk_jwwFignJKO3DKAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:52:8d:fd:94:c8:08:99:f1:cd:a5:ea:c2:23:50:04:bf:85:
8e:e0:5a:f5:4d:c1:7f:a3:bb:8a:e7:bb:a2:bd:54:7b:9e:cf:
d0:3d:40:0b:74:50:0d:4c:06:10:73:9b:f6:b1:9b:63:a2:61:
70:4c:3b:d8:f5:a3:29:8a:13:0f:1e:c0:d8:42:eb:a9:79:51:
ec:d8:d1:e5:db:4d:49:d3:5f:81:2f:75:9c:bb:06:67:45:21:
23:24:69:8f:04:c4:7e:4e:99:e4:8d:2a:ac:71:03:e4:ef:83:
44:9e:6d:04:07:fc:4b:b0:2b:55:b4:ed:36:e8:a6:f9:b5:8c:
3d:8e:34:a8:bc:ad:19:ea:99:73:17:a4:cf:c9:2c:dc:a9:a8:
ae:b3:a0:54:2b:d0:83:6f:b9:16:a9:c2:22:13:e1:c1:19:1a:
a1:9d:76:a3:09:cf:6b:25:0f:b3:2f:08:22:2c:b1:cc:97:a2:
96:57:9c:d2:91:fd:a8:11:65:5f:41:83:69:0b:d5:7a:32:56:
90:39:dc:1b:a0:23:65:e3:c4:65:e4:ee:65:60:df:b9:eb:62:
53:24:52:f3:b4:f3:05:86:38:40:5e:4d:dd:c2:ce:d4:82:ba:
6c:fa:5f:f2:85:11:ca:15:a3:ed:a8:dd:10:ea:b4:ca:dc:3c:
4f:83:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:03 2026 by rpki-client