This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7pc5S5FXP1zAIHYlAoQyxFoWuqk.roa
File: 7pc5S5FXP1zAIHYlAoQyxFoWuqk.roa (raw, json)
Hash identifier: rrEyRXUCqzbGD+/0mEzGW4/MJWgiPS51bSvyatG7Cbs=
Subject key identifier: EE:97:39:4B:91:57:3F:5C:C0:20:76:25:02:84:32:C4:5A:16:BA:A9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019AB173699664BF5C41282670D08ABFBA41
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7pc5S5FXP1zAIHYlAoQyxFoWuqk.roa
Signing time: Sun 23 Nov 2025 16:02:02 +0000
ROA not before: Sun 23 Nov 2025 16:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:b1:73:69:96:64:bf:5c:41:28:26:70:d0:8a:bf:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 23 16:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee97394b91573f5cc0207625028432c45a16baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:f0:8a:6a:3e:68:ea:ac:d5:f2:d7:22:af:
fb:69:7a:ec:72:06:7c:e6:56:cd:ac:38:61:67:0a:
46:30:33:e7:81:fd:45:a0:0c:3d:a2:db:39:d3:f4:
5d:38:c3:2d:01:da:af:9e:4e:8e:47:ec:c7:b4:ce:
bf:1f:27:d9:b0:39:6b:c3:9a:d2:9f:9d:de:40:8a:
ad:65:8e:a3:df:5f:14:68:9c:8b:63:88:bd:0a:a6:
a0:c1:96:0e:7d:76:b0:27:57:09:a8:7e:54:4c:c3:
07:00:02:c8:2a:9c:58:67:43:86:a4:8a:6c:2f:41:
68:70:bb:a0:d8:f0:91:79:3c:74:3f:f4:cc:a0:60:
17:3b:0a:53:d3:44:07:23:e5:10:be:a0:6a:14:ba:
a6:ef:4e:b7:91:c8:c1:dd:71:fc:9f:3b:d1:11:d3:
8c:54:94:bd:37:80:b8:f7:ab:a1:9b:8d:5d:d1:fa:
8d:35:97:08:7e:02:a8:1d:cb:07:f0:c4:58:b5:ca:
8b:f3:c9:2f:c6:af:9c:e9:42:8f:53:87:3b:bf:2f:
13:1a:1a:90:58:d8:be:09:3e:5e:69:34:03:8e:51:
0c:21:ba:4c:4b:d1:d0:5e:2a:d8:c2:da:50:ac:f7:
cf:e8:26:81:df:c2:f7:6b:c8:46:e7:eb:41:ba:1e:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:39:4B:91:57:3F:5C:C0:20:76:25:02:84:32:C4:5A:16:BA:A9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7pc5S5FXP1zAIHYlAoQyxFoWuqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.169.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:c2:23:48:cc:69:17:ee:96:a6:fc:ad:8e:bb:35:1d:6d:
53:08:db:3c:58:00:af:73:57:b9:1d:6d:93:9e:b0:aa:29:a8:
d5:59:fd:51:e8:24:a6:04:e5:a9:26:2f:aa:4c:ee:aa:e5:d1:
c8:a8:54:2a:38:5d:f3:17:a7:ac:70:d3:e7:2d:03:e1:2f:23:
23:4a:97:d4:97:30:c4:fe:b7:3f:e1:7b:f7:27:98:11:2c:1d:
47:91:e3:e9:14:49:22:44:3f:0f:e7:c6:fe:74:8b:75:8f:39:
04:4d:ac:ab:ee:ee:02:d0:42:5e:ca:9b:70:ce:c9:44:5f:ad:
03:02:24:88:84:f9:6f:c0:60:1a:2c:42:2e:1a:48:53:83:73:
eb:75:10:d5:1f:e9:c7:a7:1d:12:23:4e:89:b5:57:ce:a8:51:
b9:82:ee:c2:b6:ff:c0:3f:a7:35:01:ef:36:9d:89:11:64:f6:
d4:90:07:a5:1c:2c:da:e9:ec:a6:f4:3c:8d:07:dd:5c:c4:24:
bc:4b:78:65:2a:d1:2e:c3:ab:20:19:a6:48:d0:9d:f9:39:2b:
b0:d3:2b:e4:e8:db:67:5d:cc:9a:b5:ef:6f:67:e9:98:ed:88:
fa:a2:dd:eb:af:f0:3c:a5:91:06:f2:bf:94:fc:fa:33:ca:8b:
b3:14:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 16:41:13 2025 by rpki-client