This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa
File: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (raw, json)
Hash identifier: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=
Subject key identifier: ED:0C:78:F0:49:81:9F:E3:9A:C1:62:52:3E:94:53:87:15:F1:1A:CC
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019B7BA4E78AF7D41A49A4FFD9622F4D3839
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa
Signing time: Thu 01 Jan 2026 22:19:23 +0000
ROA not before: Thu 01 Jan 2026 22:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 80.245.0.0/24 maxlen: 24
80.245.1.0/24 maxlen: 24
80.245.2.0/24 maxlen: 24
80.245.3.0/24 maxlen: 24
80.245.4.0/24 maxlen: 24
80.245.5.0/24 maxlen: 24
80.245.6.0/24 maxlen: 24
80.245.7.0/24 maxlen: 24
80.245.8.0/24 maxlen: 24
80.245.9.0/24 maxlen: 24
80.245.10.0/24 maxlen: 24
80.245.11.0/24 maxlen: 24
80.245.12.0/24 maxlen: 24
80.245.13.0/24 maxlen: 24
80.245.14.0/24 maxlen: 24
80.245.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:e7:8a:f7:d4:1a:49:a4:ff:d9:62:2f:4d:38:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jan 1 22:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed0c78f049819fe39ac162523e94538715f11acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:0f:57:1b:03:7e:f1:99:73:7a:e2:3f:2f:
10:37:06:09:42:ce:a7:fa:b3:d8:89:80:7d:93:cb:
45:d9:bb:ad:4f:77:b9:a6:59:22:13:c6:4f:33:9f:
71:9f:ca:d3:97:32:78:5f:74:50:40:c7:85:95:77:
eb:40:f7:90:c6:05:cf:63:70:5a:37:12:f7:38:7a:
b9:bd:ab:ed:c8:64:c8:97:73:fb:34:39:d6:e5:d0:
bb:e5:1d:b7:6c:51:f7:c0:ef:ea:ab:35:16:65:0b:
bf:a7:d2:0d:cf:b9:95:2f:c4:f2:c0:1d:b3:6e:4f:
74:42:f7:17:77:e4:2d:63:5d:52:d7:64:f9:c6:91:
8d:8f:60:af:fa:85:3b:f4:bd:eb:fa:07:b1:bb:0d:
83:85:ca:3d:ae:8e:95:9f:6e:e7:63:02:fd:e2:82:
5c:9f:14:68:b4:64:4a:bb:b5:2e:31:a0:15:ce:a7:
85:b1:b1:38:26:0e:bf:f5:46:19:8c:96:fc:18:35:
6b:ed:3a:e1:78:59:84:fa:67:ab:81:ec:5b:ad:af:
7f:0a:53:14:4c:78:40:18:e9:f9:00:b5:5e:05:fc:
ee:e5:d7:64:a2:73:81:5f:24:68:b9:65:c7:a8:db:
52:fd:07:68:c9:94:91:e8:25:87:19:57:4d:09:78:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:78:F0:49:81:9F:E3:9A:C1:62:52:3E:94:53:87:15:F1:1A:CC
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:21:d5:50:59:6d:28:16:61:62:ed:53:21:0b:dd:55:47:f6:
76:d0:76:7b:9a:8e:85:a9:7f:e0:bc:93:d7:01:5c:c5:96:c4:
8d:2b:64:53:96:f4:7d:2b:c9:c6:fa:68:0a:df:dc:ba:95:5a:
90:79:ee:0c:aa:b2:37:d7:8a:7e:0e:b5:0d:c3:40:6b:bc:c9:
37:29:55:1c:a8:62:6f:18:a8:67:3f:11:52:8b:14:a5:80:cb:
9d:29:99:0e:e4:b7:51:c6:c5:76:70:50:18:f4:81:d2:9d:09:
e1:de:ce:8d:c6:64:48:f2:53:84:59:26:3e:fe:83:8f:15:ad:
a5:af:a2:48:19:6c:41:f1:06:6e:d9:b9:1c:08:cb:5f:3f:ee:
b7:72:ef:b1:4e:31:94:4c:f5:3a:e2:36:1e:be:e6:c8:11:11:
09:53:3b:cd:24:7c:0b:50:58:5d:90:ce:ee:f0:ef:40:a7:8a:
bb:3f:52:32:80:fd:2f:69:de:02:fc:7f:e2:32:10:3d:ef:c3:
a6:70:fd:2c:ee:b6:c1:b2:da:58:b3:8c:b3:38:27:04:af:a4:
1c:2f:c4:ae:04:ea:f0:26:60:ad:45:54:a5:eb:70:2e:5b:e4:
eb:1f:0a:55:16:4f:66:f0:59:ec:2e:6b:1c:cc:3d:91:94:50:
f6:d2:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client