This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/hRarERDoAYiUF5L6tILZ5NKtnbA.roa
File: hRarERDoAYiUF5L6tILZ5NKtnbA.roa (raw, json)
Hash identifier: BMiUxVpImWSX01DGsmdsHNUIwRwgueagWkBF6bRntqA=
Subject key identifier: 85:16:AB:11:10:E8:01:88:94:17:92:FA:B4:82:D9:E4:D2:AD:9D:B0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 019B7AC8F2B08F8B27DD02BD904ACA25B55D
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/hRarERDoAYiUF5L6tILZ5NKtnbA.roa
Signing time: Thu 01 Jan 2026 18:19:08 +0000
ROA not before: Thu 01 Jan 2026 18:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197312
IP address blocks: 194.147.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:f2:b0:8f:8b:27:dd:02:bd:90:4a:ca:25:b5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Jan 1 18:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8516ab1110e80188941792fab482d9e4d2ad9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:ff:91:39:eb:12:18:8d:3a:ca:83:3a:ed:
79:fc:13:00:d8:fb:1f:3d:9d:f3:33:9d:c4:31:f9:
7c:0a:48:5c:cd:fb:10:2b:6f:70:c4:15:de:1a:70:
05:6e:b5:38:32:0c:f4:41:9f:02:86:7c:32:38:b4:
95:42:9f:e5:f1:91:df:73:be:8c:71:92:b2:44:2d:
a2:53:a7:62:69:2f:d9:11:f4:b3:e3:9d:9d:bd:e7:
e5:51:d7:64:ce:73:0e:32:61:6a:b1:93:35:31:86:
3e:a6:71:c4:45:75:e1:25:27:2c:36:b3:53:fa:46:
f8:83:29:2e:73:9b:6e:a9:33:09:88:65:8a:41:d5:
c9:37:42:d9:6f:f5:96:b6:57:36:1d:57:2c:64:7b:
e9:be:c1:e9:07:4a:64:a1:fb:1e:71:a8:26:02:80:
59:90:dd:f5:f3:e7:f9:3d:59:8f:f5:d6:85:20:d1:
37:e4:1b:28:e2:3c:2b:fc:e7:d3:03:5b:8a:24:a2:
ee:b1:7a:9b:3c:30:31:c8:3a:fd:02:a1:96:54:e0:
3e:71:0a:78:59:43:2f:45:fe:c9:c9:14:ef:8f:f4:
5f:18:13:2d:f3:86:89:04:d4:3a:f5:15:2d:03:ca:
a9:b9:95:91:98:03:b3:f3:48:69:ed:86:ae:b2:9c:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:AB:11:10:E8:01:88:94:17:92:FA:B4:82:D9:E4:D2:AD:9D:B0
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/hRarERDoAYiUF5L6tILZ5NKtnbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.254.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d8:bc:69:75:35:db:27:e9:df:d0:d2:56:d8:f9:f6:12:f6:
92:96:43:50:0c:86:aa:13:53:42:87:79:c0:a1:8a:99:96:7f:
ce:d4:1e:61:8e:60:3e:4e:66:28:c8:95:43:90:16:e2:c5:aa:
8f:aa:fa:4d:9b:3c:03:d9:8a:b6:a6:04:a1:be:9f:3d:c6:82:
d6:9c:21:f2:6a:eb:42:21:c8:d3:71:d2:c1:ba:79:15:8f:8b:
89:73:8b:23:0c:3c:0f:dc:05:4c:03:38:63:24:ef:8a:9b:77:
36:52:35:2b:3d:c2:27:79:e5:66:0f:fb:a3:c7:db:37:10:0c:
ec:b5:05:e5:83:d1:da:00:43:23:6a:5d:cd:f5:6b:18:44:0a:
94:c5:3d:c8:53:4c:2f:f4:f5:79:3d:aa:a2:2c:c4:12:fe:70:
49:a0:64:f3:ad:04:92:61:6f:b1:fe:1f:cc:7f:83:ae:85:d5:
44:c9:79:39:e9:7a:0e:e0:31:8a:7a:92:76:09:36:a1:44:34:
ac:f7:71:74:02:16:78:16:50:5f:ed:27:3a:8f:c2:85:f9:3b:
57:84:0e:c0:e7:89:cf:d5:df:de:4c:65:2c:b0:be:be:3c:3a:
2b:77:ef:1a:75:d3:66:a9:98:6d:8e:d7:e3:3f:8c:3b:bf:27:
32:62:38:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:19 2026 by rpki-client