This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8sBs9mzVwjP5JLwmXTN7B6oCQ68.roa
File: 8sBs9mzVwjP5JLwmXTN7B6oCQ68.roa (raw, json)
Hash identifier: maQmotfhZcipPlMymRXX/wMdU6pb8trIltFtuSfgW1o=
Subject key identifier: F2:C0:6C:F6:6C:D5:C2:33:F9:24:BC:26:5D:33:7B:07:AA:02:43:AF
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019B79EBB161DF81F269E08180F7E05561E1
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8sBs9mzVwjP5JLwmXTN7B6oCQ68.roa
Signing time: Thu 01 Jan 2026 14:17:27 +0000
ROA not before: Thu 01 Jan 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8851
IP address blocks: 194.207.0.0/19 maxlen: 19
2a00:4901::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:b1:61:df:81:f2:69:e0:81:80:f7:e0:55:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2c06cf66cd5c233f924bc265d337b07aa0243af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:15:ab:b8:64:30:2a:2a:be:3b:84:3f:d9:
1d:28:ae:94:63:75:31:a5:e1:7f:e1:28:ed:87:8e:
d1:79:40:d7:0e:90:83:2e:02:4c:3f:f4:97:6a:4d:
60:0e:1e:ce:c3:83:a0:b3:66:20:05:52:c5:88:24:
7e:e9:e4:30:f7:08:02:1a:f9:1f:f0:0a:05:18:06:
30:8b:6a:78:aa:0b:e6:48:36:2c:c0:f0:ce:31:bc:
96:77:15:ec:58:ae:c5:eb:97:e0:56:bb:b4:d6:c3:
88:af:96:a2:8c:e2:43:49:d8:f3:1d:05:a0:08:41:
7c:d3:9e:df:66:aa:43:d9:10:a0:22:37:01:fa:c7:
06:59:0c:35:ec:3b:d9:4f:d2:c2:c9:5e:78:72:93:
fe:fb:ce:01:8b:c3:6a:8e:df:8a:06:af:b7:d8:13:
de:58:51:8f:7a:1e:c2:95:fa:14:8d:ae:76:e6:30:
f9:92:4d:c4:e3:70:66:00:4a:8c:0b:8e:62:58:d6:
09:4c:5b:e4:b8:f2:13:7d:e0:6b:5d:cb:18:81:b2:
be:6d:a6:4f:2f:0f:b3:86:4f:8a:5c:ae:d5:39:63:
a3:bd:e4:45:5b:70:23:3d:21:28:f3:5c:12:78:2d:
28:9f:2e:98:dd:d8:1f:30:78:2f:36:b8:ce:ea:f4:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C0:6C:F6:6C:D5:C2:33:F9:24:BC:26:5D:33:7B:07:AA:02:43:AF
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8sBs9mzVwjP5JLwmXTN7B6oCQ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
IPv6:
2a00:4901::/32
Signature Algorithm: sha256WithRSAEncryption
20:11:c7:21:aa:2b:10:f1:47:d4:24:ed:13:c4:70:53:ab:30:
42:8e:d2:8f:17:4d:04:df:1c:e7:6f:fe:ee:d7:c8:f2:fa:ff:
3b:04:30:33:8f:c8:95:dc:8d:36:b4:11:34:00:a2:12:bf:eb:
0f:2b:ca:1e:e4:df:e1:bb:6d:ec:df:e7:ec:09:49:5c:bf:8e:
28:77:6e:ba:05:07:6a:e2:c3:95:50:76:86:19:8b:f2:d9:f3:
e6:98:08:f3:a0:21:73:f6:db:5c:51:e5:e4:9a:41:49:3e:8f:
c9:0e:be:8e:9c:18:e0:71:22:3c:89:56:bd:43:60:ae:61:62:
97:c7:ce:b3:47:55:47:ce:b3:b9:e6:47:8c:c1:00:8e:32:38:
73:d0:76:15:a7:37:60:93:43:1c:d2:2a:e8:4c:13:9e:27:4a:
cd:b1:b6:a1:1c:9f:f0:af:15:88:67:bf:c5:e3:17:9c:42:19:
97:ff:0d:ad:4a:9c:ca:bc:99:5a:07:fe:0c:0a:da:98:a8:de:
7c:ca:56:91:a5:1e:59:52:bf:bd:a6:74:7c:1a:db:ba:1b:dd:
45:86:42:1f:c7:33:ed:d3:92:63:f0:74:ab:d9:bc:83:5c:86:
93:fe:fb:c7:57:21:a9:35:5f:dc:5d:96:b9:cb:3c:6e:a7:eb:
40:55:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 13:40:45 2026 by rpki-client