This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa
File: 72o1zQG6O8_8WQS5xWxLLwedUHA.roa (raw, json)
Hash identifier: hxPUIpJCQ0HNeMfrnwSBVOj6gd6VpV7h2c++shFRmY4=
Subject key identifier: EF:6A:35:CD:01:BA:3B:CF:FC:59:04:B9:C5:6C:4B:2F:07:9D:50:70
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019BD65F32B4BBD230EE20D2CF103D92CB62
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa
Signing time: Mon 19 Jan 2026 13:08:41 +0000
ROA not before: Mon 19 Jan 2026 13:08:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204224
IP address blocks: 95.130.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d6:5f:32:b4:bb:d2:30:ee:20:d2:cf:10:3d:92:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Jan 19 13:08:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef6a35cd01ba3bcffc5904b9c56c4b2f079d5070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:72:00:e6:6c:1e:49:77:4e:6f:50:44:0d:
4e:1c:a7:47:d2:f7:83:7a:c2:a5:cb:4f:98:e6:6f:
62:f3:2f:b9:b8:68:c9:d6:95:7a:f6:86:37:7f:7e:
63:2b:27:89:77:a3:fc:1d:e5:bb:c7:06:6b:86:d4:
07:98:de:ee:e4:fb:47:c6:30:4a:23:f2:cb:a0:27:
07:68:24:0a:ad:9a:50:9a:36:b7:88:b3:20:87:08:
c3:51:56:f2:46:35:2b:75:d1:59:eb:b0:90:6f:eb:
af:84:a7:48:bc:95:02:ba:3c:f4:04:d8:29:15:48:
10:77:91:3e:e3:7c:85:dc:50:bf:8e:4a:21:2a:58:
2f:f5:d1:4e:0b:82:ff:23:1c:2d:51:9c:90:7c:90:
a0:1d:ae:6d:1f:ac:6b:e9:e2:2f:3e:1f:28:88:cf:
aa:92:3d:e8:bc:51:e1:3f:a1:54:18:31:8e:5e:44:
b5:9f:f0:28:4b:21:29:e1:ab:fb:f6:e9:e6:b9:ff:
d4:98:7f:57:6c:de:0e:00:88:c1:01:4c:a3:c0:d0:
36:66:db:8f:14:c6:73:11:42:69:c4:eb:6c:e2:5f:
54:57:7e:7b:95:d2:14:a2:62:5f:c6:3f:ba:41:d2:
b6:8c:d4:1d:0d:0b:a0:74:2f:a9:ce:b8:e3:6d:94:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:35:CD:01:BA:3B:CF:FC:59:04:B9:C5:6C:4B:2F:07:9D:50:70
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/72o1zQG6O8_8WQS5xWxLLwedUHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.217.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d1:fd:d7:7d:38:0b:fc:ba:4f:81:f7:1e:15:96:e0:2a:34:
27:d6:43:19:68:4e:0d:52:1e:41:37:8e:0f:94:a4:7f:4a:58:
34:02:1f:ba:07:cb:43:0d:2d:57:77:c2:02:73:41:82:1b:82:
94:ff:30:80:ce:08:d8:db:79:85:2e:a2:c3:42:7d:4b:d7:a8:
32:3c:82:07:9c:65:2c:55:99:af:77:41:3d:a4:36:da:e8:eb:
29:bf:e0:6b:b6:c7:70:64:3f:78:b6:8e:6a:63:cd:b9:18:20:
92:e1:73:18:5f:c6:44:7b:69:6b:87:ce:26:6d:5a:f6:70:81:
98:21:d1:4e:94:4b:6c:c4:18:08:ba:d5:8e:d7:89:7e:ce:67:
21:83:92:5a:f6:63:c8:e0:6f:9c:f6:11:fc:4c:5c:9f:60:21:
c1:b4:29:d7:7a:e9:a1:86:f6:73:97:a2:72:a1:be:2b:06:25:
66:85:c7:2f:f9:49:81:f2:68:bf:da:2c:15:34:75:f4:6f:91:
1f:53:5b:96:05:b6:80:fd:1e:41:84:78:1d:3e:5e:e2:af:4d:
12:8b:59:3a:5e:b9:eb:dd:b6:c3:e9:9e:41:2c:e8:27:4a:e8:
89:08:bb:32:a5:ec:d0:eb:5b:b5:ed:30:c9:a2:86:6e:41:6b:
3b:50:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:21 2026 by rpki-client