This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa
File: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (raw, json)
Hash identifier: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=
Subject key identifier: C7:BC:F7:F9:69:66:36:BD:98:51:24:C2:DC:F5:77:4D:6A:8A:36:E1
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 019B7CEE5CC5F89EE3F358EFEA44F2C75EE3
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa
Signing time: Fri 02 Jan 2026 04:19:14 +0000
ROA not before: Fri 02 Jan 2026 04:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202756
IP address blocks: 62.4.109.0/24 maxlen: 24
62.4.110.0/24 maxlen: 24
62.4.111.0/24 maxlen: 24
62.4.112.0/24 maxlen: 24
62.4.113.0/24 maxlen: 24
62.4.114.0/24 maxlen: 24
62.4.115.0/24 maxlen: 24
62.4.117.0/24 maxlen: 24
62.4.118.0/24 maxlen: 24
62.4.119.0/24 maxlen: 24
62.4.120.0/24 maxlen: 24
62.4.121.0/24 maxlen: 24
62.4.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:5c:c5:f8:9e:e3:f3:58:ef:ea:44:f2:c7:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Jan 2 04:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7bcf7f9696636bd985124c2dcf5774d6a8a36e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:d8:bb:46:e7:72:06:d9:88:71:4b:44:8c:
0d:1a:50:e5:f8:7c:af:b9:c1:33:2b:36:20:87:ca:
4f:29:1e:7b:49:94:b5:84:c6:dc:13:f6:92:eb:40:
f4:33:13:cc:ef:19:ce:a7:8b:cf:f5:1e:9b:14:2b:
34:0b:33:77:f7:4b:be:22:e5:7e:7d:49:12:64:45:
a5:ab:ed:04:1b:0f:89:3a:04:20:38:2e:c5:b7:81:
51:a1:58:6c:49:8f:2c:34:16:e6:cc:09:5c:7e:74:
4b:d1:91:3c:71:3f:91:bf:e8:1d:f7:dd:53:f4:60:
77:4e:9a:e0:2a:46:b4:c7:13:67:29:74:e3:6d:b0:
c0:0e:3b:b0:6c:83:81:ac:50:fd:db:8f:30:b5:52:
63:1e:65:89:3b:21:2c:ee:8d:69:e0:f2:24:21:58:
57:15:65:03:70:ae:c4:fe:23:31:f6:83:de:64:27:
69:58:92:5a:c3:40:2b:9b:93:ea:9f:eb:46:7d:0a:
e0:0e:6a:09:d3:05:45:a6:9b:a8:6b:df:fb:4b:7f:
4c:ce:86:1f:00:31:ae:a5:8d:31:82:70:4c:f6:3f:
68:34:27:57:cf:4d:72:19:34:85:dc:f4:df:d3:c8:
39:03:1f:ac:0d:c0:1b:d9:9a:02:63:87:c4:49:8c:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:F7:F9:69:66:36:BD:98:51:24:C2:DC:F5:77:4D:6A:8A:36:E1
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.109.0-62.4.115.255
62.4.117.0-62.4.122.255
Signature Algorithm: sha256WithRSAEncryption
73:76:d7:53:a5:c7:7f:4e:5a:97:1d:ba:33:d1:ac:c3:0e:af:
60:61:23:89:ac:7b:79:98:02:ae:dc:fe:bb:9d:70:d1:3c:6b:
91:f5:b4:41:df:69:2e:ab:55:bf:0f:79:16:75:c6:4b:49:ef:
32:18:17:9d:2e:91:b4:e4:2d:12:37:d9:bf:fb:4e:cc:fb:0b:
9d:11:b6:74:87:39:9f:d3:2f:87:5f:03:8d:2f:20:f8:da:dd:
6b:e5:40:22:77:26:3a:02:b0:62:b1:f3:c8:1d:54:16:1b:5f:
47:a4:17:c4:25:16:91:1b:3b:2e:73:57:e7:90:90:ea:9d:43:
0b:a8:c6:16:3c:0e:1c:b0:58:f8:c8:fa:b8:40:8c:35:13:51:
8d:09:47:f2:84:85:c0:19:6e:72:ac:56:6a:94:a3:88:82:72:
4f:be:93:3b:5b:be:97:d9:c0:31:3b:ad:3c:81:c6:81:3c:af:
d2:f2:25:59:f5:7c:04:8e:65:f9:54:ff:11:d2:5c:4f:b8:80:
91:c9:13:97:c5:5b:38:5b:72:e5:db:1b:15:69:42:e4:13:a9:
dc:3a:43:25:74:88:6b:13:85:c1:ba:a4:31:f3:e0:e6:0e:5f:
ae:71:f2:ae:0d:cb:0f:4b:de:cc:df:57:73:14:88:dc:8d:d7:
32:09:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:59:43 2026 by rpki-client