This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa
File: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (raw, json)
Hash identifier: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=
Subject key identifier: A7:FD:73:3A:31:3B:44:33:48:3C:CF:BD:8A:33:CB:B1:30:F8:70:2E
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019B7759355C0F22F512C10DD904137BDFAF
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa
Signing time: Thu 01 Jan 2026 02:18:13 +0000
ROA not before: Thu 01 Jan 2026 02:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61385
IP address blocks: 2a05:9281::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:35:5c:0f:22:f5:12:c1:0d:d9:04:13:7b:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 1 02:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7fd733a313b4433483ccfbd8a33cbb130f8702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:fc:71:41:12:3f:ac:29:4f:39:38:74:69:
f3:25:18:7f:dc:ec:34:59:59:77:93:0a:0b:9d:ff:
76:b7:ee:80:05:ce:e2:63:b4:d6:e8:e2:79:89:70:
7e:1c:16:ed:71:09:bb:bc:d9:53:7f:27:c1:50:2d:
bf:d9:6a:c6:3e:85:1e:b3:2f:95:47:fb:a1:60:b1:
8e:04:71:41:f0:cd:b9:ad:c4:7a:6a:65:13:34:da:
4c:c0:c4:7f:0c:03:92:02:e8:ad:36:aa:76:d7:b6:
d9:13:c7:fe:e7:49:76:6b:64:14:e1:8d:95:dd:cc:
8b:c3:46:b6:02:8e:8b:95:8e:44:59:ec:ff:6b:cb:
8c:a5:6c:5a:42:69:f1:05:fc:7a:34:ff:72:3c:3b:
7f:73:4d:17:f7:27:64:ef:a8:df:fb:a7:90:fb:1f:
69:90:a3:4e:c0:02:33:c3:bd:3c:0c:49:68:b8:42:
75:d2:e6:fa:f1:a0:24:96:6e:cf:e0:ca:45:ce:f0:
23:34:aa:78:d8:6d:ee:7e:4b:28:b7:f7:da:66:d3:
ef:9d:17:ae:24:d6:58:c9:c0:6a:70:34:41:d3:e1:
ba:5f:0d:7b:07:72:a7:07:da:8c:79:d5:14:f0:f3:
3d:4b:36:06:c5:1e:00:67:95:ad:73:e9:8b:fd:e2:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:73:3A:31:3B:44:33:48:3C:CF:BD:8A:33:CB:B1:30:F8:70:2E
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9281::/32
Signature Algorithm: sha256WithRSAEncryption
4b:bc:9f:de:30:73:24:0d:ce:c9:fa:c2:8b:2f:9c:eb:77:f0:
c9:11:af:ff:c3:75:e3:bd:0d:8c:18:12:30:3e:c3:54:2a:1e:
2a:91:ca:19:7d:f9:63:0a:fc:2c:71:eb:bf:1d:c6:59:e4:27:
02:a2:ce:bd:ee:f5:6f:06:81:e2:e6:79:12:e8:6c:39:96:99:
5b:91:7a:ca:70:0f:c2:4b:38:a7:ec:dd:69:e5:db:1b:02:2a:
32:bf:e3:34:33:bd:15:8d:8f:70:af:e4:ee:6b:9c:53:b6:40:
80:f7:93:26:42:ae:6d:90:ca:8d:c1:45:88:25:a4:61:86:b7:
93:cf:d0:b6:cd:f8:9c:6c:95:e0:7c:5b:1d:89:09:5e:73:6f:
0f:db:57:ba:2b:f4:01:92:8a:e9:a8:1e:27:05:ac:56:8f:95:
f4:5a:06:63:6f:da:16:7b:e8:fb:03:cd:90:c5:f3:22:8f:f8:
4f:cc:4c:93:bb:ba:a4:00:bb:c4:89:30:ca:ed:8e:0a:43:6d:
14:6e:a8:93:74:61:ca:ad:a1:9c:ea:f2:2b:7d:04:3d:62:61:
e3:cc:e2:ad:7d:42:23:8b:2d:30:0c:4a:8b:71:54:44:cc:56:
56:6d:3b:61:5f:29:ae:d5:07:4b:f8:55:5e:12:95:03:0d:8d:
1e:23:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:18 2026 by rpki-client