This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa
File: e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa (raw, json)
Hash identifier: IevTKfUQJkqwDYYU6PQJwFiwDh/wjsGFxyO8+JdLEM4=
Subject key identifier: 7B:B0:07:4C:DE:86:30:71:A4:FF:C7:40:71:FF:E0:55:99:EF:C5:52
Certificate issuer: /CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Certificate serial: 019B7AC941384F49F4F3CE3A6DA77C9DD1B9
Authority key identifier: 53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa
Signing time: Thu 01 Jan 2026 18:19:28 +0000
ROA not before: Thu 01 Jan 2026 18:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39502
IP address blocks: 194.50.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:41:38:4f:49:f4:f3:ce:3a:6d:a7:7c:9d:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84b523dfe32b8a89b9cdd30a9f8711007fdb9
Validity
Not Before: Jan 1 18:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb0074cde863071a4ffc74071ffe05599efc552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:bd:2b:5c:25:0b:80:26:4d:e7:72:56:25:
4d:01:2d:e2:de:dd:d0:ee:ed:92:89:db:27:42:aa:
f1:ca:7c:0b:b8:e9:b4:1b:0f:f2:cb:66:b4:b2:65:
68:95:e9:c2:c0:7a:cc:af:0e:eb:1c:88:09:16:40:
ae:85:d9:a6:22:0c:dc:f7:b6:80:e8:a6:46:56:da:
e4:18:f8:0b:da:0b:bb:35:4e:89:cd:34:b9:21:e1:
a4:23:68:ab:96:cf:45:a5:e4:c7:4d:33:9f:45:a7:
01:06:d7:6c:28:b1:95:bb:cd:88:bb:75:c4:47:25:
c1:2a:e2:cc:ca:ba:64:10:15:8b:d3:53:38:85:d6:
c7:52:67:8e:ca:65:74:4a:cd:74:b1:2d:55:68:e1:
ed:49:5d:6e:86:92:e6:21:ae:35:b9:2e:b0:1b:f3:
54:62:cd:e0:f3:d8:be:73:fd:5a:4d:02:d8:ed:6a:
2f:24:34:5c:19:f5:dc:b9:b1:64:eb:a2:22:a7:d3:
f4:63:01:fa:44:26:1b:5d:32:e7:2f:b9:1a:27:a7:
46:56:92:93:50:1a:61:18:99:a1:32:b1:7b:6e:8b:
6b:82:f5:ba:9d:07:61:7f:18:1d:ba:01:e4:2f:c3:
40:a1:df:71:65:db:55:5c:d7:ec:cb:ce:d4:b5:56:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:07:4C:DE:86:30:71:A4:FF:C7:40:71:FF:E0:55:99:EF:C5:52
X509v3 Authority Key Identifier:
keyid:53:A8:4B:52:3D:FE:32:B8:A8:9B:9C:DD:30:A9:F8:71:10:07:FD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6hLUj3-Mriom5zdMKn4cRAH_bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/e7AHTN6GMHGk_8dAcf_gVZnvxVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/07e105-5680-40aa-8c9d-0d66c75b026d/1/U6hLUj3-Mriom5zdMKn4cRAH_bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.11.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c0:1a:b8:fa:47:af:24:b8:34:07:ba:9e:79:0f:ee:3f:0e:
f9:ea:c8:70:6f:b5:55:ee:80:2a:e1:a5:9e:64:8d:2f:db:8a:
3f:f1:07:11:c3:d6:16:dd:4f:e8:83:8b:ff:d2:ac:cb:e9:17:
be:00:8d:6b:c9:72:e4:b9:fc:c0:08:22:ad:8a:4c:ab:a3:4d:
94:4a:6e:26:2c:4a:cb:0e:d8:60:8a:d9:76:f1:26:13:61:51:
a2:88:7d:d9:c7:60:de:eb:f1:f4:da:b8:9a:30:4c:47:49:03:
2c:30:91:ce:a7:09:1d:b0:35:03:97:2d:92:ec:61:7e:a9:e1:
2d:11:c0:ab:8c:a9:19:f0:6e:e8:02:a0:7f:53:61:43:32:ba:
0f:64:d3:ba:ff:6c:dc:12:2d:a1:b9:02:68:c5:72:db:c4:d6:
de:b2:e7:3b:c3:aa:13:8d:e1:8e:64:df:b2:a1:79:58:8c:16:
91:47:70:cb:f4:a7:72:9d:36:c4:a9:cc:2c:58:b9:d8:88:ed:
91:d6:2a:de:2b:9b:76:ff:f3:ad:0c:fa:85:f7:0b:65:f4:08:
a2:50:7b:93:88:4c:22:ba:64:52:75:1f:5b:ba:71:ba:b3:a4:
b6:48:24:0a:84:09:12:3f:94:c7:6a:85:b8:da:89:9b:00:27:
7f:45:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:21 2026 by rpki-client