This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa
File: 7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa (raw, json)
Hash identifier: ISmlrNLUJ9oatP75F6hJydyOwv0HwqatazNk2zCU8B8=
Subject key identifier: ED:5B:75:EF:A0:13:61:28:E6:F7:16:53:4F:E5:D0:5F:E6:5B:DE:08
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019B76EAD2EE81EA9DBD1BD9E69EBDF62180
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa
Signing time: Thu 01 Jan 2026 00:17:39 +0000
ROA not before: Thu 01 Jan 2026 00:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 45.8.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 15:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:d2:ee:81:ea:9d:bd:1b:d9:e6:9e:bd:f6:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 00:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed5b75efa0136128e6f716534fe5d05fe65bde08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:1a:8f:98:8b:85:15:53:02:bd:64:5d:f3:
5a:1b:63:54:dd:f1:93:c1:b9:17:da:f0:b3:88:d9:
e4:52:c4:8a:43:87:4a:71:b5:a3:bc:77:cd:a6:a1:
3c:0a:39:fc:5d:6e:e3:bd:20:e5:d2:73:e5:d2:41:
84:0a:30:26:f8:1d:95:82:7e:6b:cd:ef:2e:d8:aa:
86:e8:b6:38:ea:c8:69:b6:15:2d:b9:e8:1d:39:f9:
4e:6f:cf:44:0c:4d:a2:a4:96:9f:1f:86:5b:a5:7d:
c0:01:d0:d5:7f:b9:3b:0b:77:7d:fa:5d:9d:c0:ae:
09:99:71:a0:55:09:c6:e2:65:55:fa:01:f1:bd:6d:
1c:f3:dd:71:51:28:71:7b:01:33:33:32:78:32:d6:
c5:5a:1f:fc:e8:fe:34:31:86:c3:cd:1a:e4:5f:19:
8c:49:6f:07:cb:62:7d:81:41:1a:2f:cf:0b:fb:94:
d9:4a:f5:47:dc:35:ad:7a:d4:30:61:5d:0c:3a:c1:
10:bc:8e:38:db:6a:e2:06:56:4e:89:45:f2:a3:4d:
ee:14:79:0a:2a:90:c9:46:db:6b:d0:16:f3:9c:e0:
54:ac:f5:83:8f:0a:bf:f0:cf:a5:a8:4d:80:8f:97:
dc:5b:cc:8b:25:65:52:d4:d1:0d:5f:cf:7f:31:4b:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:75:EF:A0:13:61:28:E6:F7:16:53:4F:E5:D0:5F:E6:5B:DE:08
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.191.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:79:b9:aa:0a:ba:c5:03:ea:7f:a8:93:c0:20:6d:06:61:f4:
eb:be:20:ab:4f:36:fe:aa:48:75:79:b9:41:46:b8:af:2f:3a:
65:e9:65:fc:20:e6:20:f9:6b:87:56:d0:9e:32:80:33:1f:b7:
ca:ee:82:b9:eb:e6:29:1b:9f:01:19:8c:89:c8:f6:a0:fe:59:
0b:f6:82:e4:02:e5:8d:84:7c:5f:06:dc:08:46:e0:81:f8:61:
a0:0d:cd:71:b3:6c:08:6d:e0:4a:a5:c3:21:d6:3a:dd:0c:29:
1d:a7:36:e5:6c:49:c7:28:7f:78:c6:1e:e9:15:78:dc:4a:85:
54:16:0b:b2:11:89:02:7f:ef:03:d9:c3:7b:93:26:1a:b8:a4:
9c:45:c0:ee:8a:0d:25:b2:98:c8:0b:22:73:d8:70:e8:ee:97:
d1:5a:98:00:69:d2:35:37:37:af:72:06:1e:c4:93:6e:c4:99:
46:14:e6:f6:f4:e4:43:42:8e:94:7d:b0:19:e6:1a:72:ab:10:
be:4f:96:ac:62:af:9c:d4:8f:f7:41:bc:f6:fd:6b:40:7f:66:
50:ae:fb:6b:dc:88:94:da:4e:e1:b3:ce:1f:ee:07:b4:c9:3a:
61:9c:f6:07:97:13:e1:ca:83:56:0e:56:1e:86:43:f1:dc:25:
f2:e8:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:07:58 2026 by rpki-client