This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa
File: 7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa (raw, json)
Hash identifier: yBmho6Hc+8S+AZOf8tb5d8VX1stt/f9ql0bZ3I/nuA4=
Subject key identifier: EF:EC:16:56:1D:92:86:A3:A3:5D:15:37:0B:9F:E7:2C:25:7C:4D:AC
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 019B7A5ABD1722EB76E5E00E876A5B8B5C3E
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa
Signing time: Thu 01 Jan 2026 16:18:45 +0000
ROA not before: Thu 01 Jan 2026 16:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 176.103.222.0/23 maxlen: 23
194.169.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:bd:17:22:eb:76:e5:e0:0e:87:6a:5b:8b:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 1 16:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efec16561d9286a3a35d15370b9fe72c257c4dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:f7:3c:6c:27:b5:22:7e:ae:0b:97:f8:91:
6e:d5:c2:89:ed:51:ab:54:a3:e0:d1:d8:92:98:93:
73:13:10:0e:e1:56:05:80:4d:56:69:74:fd:48:87:
fc:0c:54:73:9c:ca:f4:4a:78:cf:15:64:fc:1c:2f:
b6:c9:8c:70:a4:8a:23:44:fb:4c:78:fe:bb:1e:d1:
c3:c4:59:48:72:58:91:4c:17:af:cf:fa:b6:17:2b:
f8:1c:17:4e:32:fe:bf:03:9e:53:42:45:fc:06:33:
6a:5e:10:b4:19:8f:96:ee:db:2c:e3:80:c6:3c:cb:
02:ed:56:2e:1d:56:c7:c2:4b:c5:13:44:e5:70:3e:
f9:9f:46:aa:e1:32:75:7d:67:b9:a1:e4:40:f5:6b:
1d:25:f7:c7:50:cc:b8:09:7d:fb:5b:4a:92:17:73:
98:ed:3e:dc:47:ac:9c:92:c5:77:da:31:88:1b:ce:
b0:f8:da:3f:e4:7b:da:ea:81:c7:67:00:f5:58:e8:
d8:92:1f:db:fb:93:9a:f0:1d:53:4a:48:d5:a9:74:
03:8f:42:b0:42:55:be:65:ff:af:05:87:28:14:dd:
19:ac:09:2a:84:cb:08:12:a2:0c:33:b6:e2:ce:28:
db:1e:85:8c:a9:c6:cb:2e:43:cb:f3:a3:7f:62:95:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:16:56:1D:92:86:A3:A3:5D:15:37:0B:9F:E7:2C:25:7C:4D:AC
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e0:29:98:ce:bd:6b:bc:8f:ac:00:b9:b0:e2:fc:66:b5:89:
08:09:b5:ce:bf:b4:bd:41:02:ce:11:33:7a:f8:ab:61:2d:64:
1b:09:2d:ee:21:83:4d:42:d3:6c:96:16:ab:24:ad:87:4d:1d:
1f:ff:31:f7:03:d9:d6:9a:8e:f4:b3:3c:74:d7:2d:8a:a9:25:
d1:d7:91:34:f8:63:cc:95:31:a7:2e:39:6e:3c:81:9c:f9:c2:
cd:32:75:f7:c5:8c:df:34:0d:f6:75:7a:51:fe:85:c0:54:bd:
a5:11:e4:40:94:d9:bf:61:40:66:2f:a7:95:60:4e:52:ad:4f:
0a:52:71:b9:77:8f:2e:8f:1f:df:23:fd:5e:ce:fe:0d:03:fe:
2f:76:b9:d5:e2:b3:52:17:63:f5:36:59:b2:e3:32:5a:a9:57:
57:4e:f8:07:3f:e8:6b:3f:03:4a:9f:3d:23:f1:f1:05:8f:a8:
e7:2f:ad:53:40:29:49:5a:ec:94:8c:d7:5a:41:2a:72:07:dc:
fa:51:18:35:56:c4:9b:43:75:85:5c:47:dc:aa:4e:39:8d:c2:
c1:a1:65:4c:65:69:3e:94:c6:f1:bf:37:aa:ba:c8:38:55:73:
f0:fb:af:f4:57:b2:99:0f:13:a7:a8:49:cc:0c:22:63:4f:fe:
70:74:45:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6Wr0XIut25eAOh2pbi1w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2
YjNjN2IwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmVjMTY1NjFkOTI4NmEzYTM1ZDE1MzcwYjlmZTcyYzI1N2M0ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsn3PGwntSJ+rguX+JFu1cKJ7VGr
VKPg0diSmJNzExAO4VYFgE1WaXT9SIf8DFRznMr0SnjPFWT8HC+2yYxwpIojRPtM
eP67HtHDxFlIcliRTBevz/q2Fyv4HBdOMv6/A55TQkX8BjNqXhC0GY+W7tss44DG
PMsC7VYuHVbHwkvFE0TlcD75n0aq4TJ1fWe5oeRA9WsdJffHUMy4CX37W0qSF3OY
7T7cR6ycksV32jGIG86w+No/5Hva6oHHZwD1WOjYkh/b+5Oa8B1TSkjVqXQDj0Kw
QlW+Zf+vBYcoFN0ZrAkqhMsIEqIMM7bizijbHoWMqcbLLkPL86N/YpUWVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/sFlYdkoajo10VNwuf5ywlfE2sMB8GA1UdIwQY
MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt
ZDNhNThiNWNiMGMwLzEvNy13V1ZoMlNocU9qWFJVM0M1X25MQ1Y4VGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw
LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsGfeAwQA
wqn1MA0GCSqGSIb3DQEBCwUAA4IBAQAi4CmYzr1rvI+sALmw4vxmtYkICbXOv7S9
QQLOETN6+KthLWQbCS3uIYNNQtNslharJK2HTR0f/zH3A9nWmo70szx01y2KqSXR
15E0+GPMlTGnLjluPIGc+cLNMnX3xYzfNA32dXpR/oXAVL2lEeRAlNm/YUBmL6eV
YE5SrU8KUnG5d48ujx/fI/1ezv4NA/4vdrnV4rNSF2P1Nlmy4zJaqVdXTvgHP+hr
PwNKnz0j8fEFj6jnL61TQClJWuyUjNdaQSpyB9z6URg1VsSbQ3WFXEfcqk45jcLB
oWVMZWk+lMbxvzequsg4VXPw+6/0V7KZDxOnqEnMDCJjT/5wdEWS
-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:20 2026 by rpki-client