This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/xPNjonS-j6_s0qx30GbSQ5coSUo.roa
File: xPNjonS-j6_s0qx30GbSQ5coSUo.roa (raw, json)
Hash identifier: wXOlLCXdrnqHOpH2EZ4rMiD8YtbKaHU+VO6r3kXpRKk=
Subject key identifier: C4:F3:63:A2:74:BE:8F:AF:EC:D2:AC:77:D0:66:D2:43:97:28:49:4A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 019A9AFC9CEF1E0D1AD996DF822B0468AEC5
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/xPNjonS-j6_s0qx30GbSQ5coSUo.roa
Signing time: Wed 19 Nov 2025 07:20:37 +0000
ROA not before: Wed 19 Nov 2025 07:20:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215729
IP address blocks: 77.81.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:9a:fc:9c:ef:1e:0d:1a:d9:96:df:82:2b:04:68:ae:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Nov 19 07:20:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f363a274be8fafecd2ac77d066d2439728494a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:04:7b:54:13:7f:fd:aa:c5:49:ef:40:39:
82:ac:21:3a:3e:2e:66:66:e0:bf:37:69:91:9d:8f:
2b:d0:8c:9d:99:b4:8d:9e:9b:87:15:5c:1a:c8:78:
b3:1c:d3:2f:3a:2c:94:ed:22:39:73:b8:83:32:ca:
32:3a:ea:34:3a:0c:72:7d:0d:25:c2:ae:04:b3:44:
ff:b2:26:58:85:b1:f9:3f:d8:cc:b2:b0:e2:00:89:
97:dc:cf:a1:5e:b8:82:21:c4:df:ca:9f:7d:e3:d2:
f7:a9:52:b4:64:6f:f7:5d:6d:14:f6:e2:c2:88:a1:
ca:f2:b9:4f:59:15:51:dd:81:c3:8c:c1:55:e5:59:
59:44:5e:18:ce:ac:80:74:84:69:e4:ce:ef:94:a9:
ae:b1:01:3a:15:22:25:40:d9:e4:f3:f0:86:89:0c:
a2:bc:7a:fc:c1:9b:12:91:b5:31:8e:74:28:36:bc:
90:cd:f0:d6:fc:8c:2a:4a:c2:ee:ab:dc:05:8e:3a:
f8:0f:30:e5:a5:8f:8b:8b:36:a3:49:68:93:e3:7e:
b4:0b:07:b5:eb:58:b1:48:25:8b:47:f3:02:27:36:
67:ff:36:00:bc:94:ad:c0:0a:f9:63:c0:d4:01:db:
a3:32:f6:6b:a3:10:3e:95:a6:c3:a6:ea:16:90:b0:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F3:63:A2:74:BE:8F:AF:EC:D2:AC:77:D0:66:D2:43:97:28:49:4A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/xPNjonS-j6_s0qx30GbSQ5coSUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.190.0/24
Signature Algorithm: sha256WithRSAEncryption
61:36:6d:e1:b9:a2:b4:5d:dc:a2:d4:d4:7d:9e:01:90:d5:f3:
d2:de:b4:3d:4e:d0:21:96:4b:b9:42:4b:ce:cb:23:93:5e:c1:
83:10:19:c1:27:2a:3a:25:b3:e5:98:13:c7:03:ea:00:41:3c:
eb:f5:d2:e2:d3:16:4e:47:78:dc:e5:1b:31:eb:7c:ab:dc:33:
2e:bb:86:ac:1f:03:98:d2:a9:72:2c:b6:8c:42:7c:fd:03:69:
50:6a:87:d5:39:9d:dd:b2:e3:42:7e:e0:12:24:e5:f7:62:07:
76:44:de:be:c3:8c:3c:42:f0:a9:24:bb:7f:9c:05:1e:f4:de:
84:d4:56:e4:92:f0:1b:0d:af:06:1b:a3:a9:3e:05:86:19:5c:
b5:dc:9d:99:89:37:39:0f:c3:4d:1d:bc:22:ea:8d:21:41:bb:
dd:fb:45:31:c6:6c:7a:e5:f7:ea:17:6a:ad:ea:0d:8a:a5:6b:
0d:af:ff:e7:d7:ba:d8:d4:7c:95:b0:11:24:f2:db:cc:25:f1:
68:a7:65:e3:c1:3b:10:cd:a9:b0:a2:f4:a6:9f:e2:d5:1a:f2:
48:d5:ab:25:99:44:78:9d:b8:65:63:2e:4e:72:1d:e8:d5:c2:
a2:76:6a:ad:70:bf:e8:f9:4f:47:ad:cd:b4:3c:f9:8e:30:ab:
4a:9e:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:11:49 2025 by rpki-client