This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa
File: R7vQI65gTXgD096Fp399u1cS500.roa (raw, json)
Hash identifier: IXA5A3ZHv2Fl0EslRQpFmCFIqapjgNHWaVoxU2SjDaw=
Subject key identifier: 47:BB:D0:23:AE:60:4D:78:03:D3:DE:85:A7:7F:7D:BB:57:12:E7:4D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019B77C73DDEF905AEF40335E102AB45ED4E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa
Signing time: Thu 01 Jan 2026 04:18:24 +0000
ROA not before: Thu 01 Jan 2026 04:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56994
IP address blocks: 195.208.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:3d:de:f9:05:ae:f4:03:35:e1:02:ab:45:ed:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 04:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47bbd023ae604d7803d3de85a77f7dbb5712e74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:8e:72:81:e9:1b:fb:49:b6:1b:60:a1:82:
54:92:e5:ab:30:7b:d2:07:7f:d2:f4:64:6f:35:e2:
f9:fe:6e:63:7b:91:c2:6e:52:1e:db:e9:a3:02:13:
f7:60:10:af:cd:2f:6c:cf:d7:e2:11:51:4a:50:4a:
15:23:dd:99:3c:5d:d4:53:78:48:3e:49:0d:99:2c:
08:25:aa:a0:55:f0:0a:17:ea:df:21:d4:e3:66:44:
e2:44:6e:93:67:fc:90:d6:87:6c:f0:41:74:dd:e8:
f4:75:04:77:31:d2:40:f8:d0:89:3d:e6:43:37:c1:
c9:b8:d0:9c:d7:36:69:1a:87:13:f4:85:3d:e6:ed:
7d:e0:51:95:ec:2e:06:06:a6:65:1b:a2:1c:09:6d:
e8:72:fb:c2:fc:ff:41:6e:76:41:83:f6:06:92:40:
a6:f4:48:cd:0e:97:a2:bb:a3:57:3a:9a:50:9c:ce:
2a:32:53:22:2e:da:9f:04:d4:0a:1b:c9:4f:97:81:
41:5d:2b:50:cd:d6:ea:b0:81:ff:82:70:b3:a0:d5:
e7:60:18:1a:e4:79:c0:2f:f3:6d:45:26:6b:b6:a2:
c1:df:ff:d3:39:81:a7:b0:43:70:74:b2:6e:92:a8:
44:b8:72:e9:ee:1a:6d:e7:81:cc:49:2b:15:f3:0a:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:D0:23:AE:60:4D:78:03:D3:DE:85:A7:7F:7D:BB:57:12:E7:4D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/R7vQI65gTXgD096Fp399u1cS500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.184.0/22
Signature Algorithm: sha256WithRSAEncryption
34:56:c2:e1:27:a7:90:5d:54:f8:6a:f2:f4:5b:66:15:71:09:
ad:f9:09:56:15:3f:82:59:33:d7:24:55:e7:83:bb:32:d9:90:
72:44:4d:bb:9b:a1:da:6e:ca:18:9d:7d:ef:41:b0:30:c7:b0:
32:3c:dd:c6:a7:49:98:cc:e5:32:7b:ed:f9:f2:2a:37:31:b2:
4c:58:56:8a:4c:ed:7f:af:f4:38:c4:3f:df:25:62:f4:79:38:
ba:3f:4c:2e:1d:1e:dc:57:78:6e:23:c6:48:a3:b7:18:06:79:
87:d1:54:10:ae:c9:ce:51:e1:6f:b2:16:e7:54:8b:09:d3:47:
a7:50:da:8e:1d:0c:aa:bc:44:e8:44:9e:02:9a:f3:c1:8d:ca:
01:86:2d:f2:03:39:1e:d8:a1:8c:14:9d:32:1b:73:1c:7f:b5:
f2:9c:d3:95:e5:d5:89:53:b9:4d:59:c5:3f:6a:bf:ad:61:e4:
f9:d7:7e:66:77:59:f5:4f:10:b7:5a:32:51:f9:eb:90:06:5b:
88:8d:f7:4c:73:e5:60:4e:5f:12:a0:f8:a8:b1:f9:f9:b9:7f:
4c:3a:79:62:68:ab:8e:dc:6b:87:ec:61:fc:12:97:07:f0:20:
14:31:ab:27:41:06:f1:36:1a:b2:72:0d:29:a4:9e:57:32:c4:
7e:7b:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:16:01 2026 by rpki-client