This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa
File: 9s7Z0kbqXD8kMrOscbviyqc_bvg.roa (raw, json)
Hash identifier: 5KRTzHrVO9bh3V7iu0nkUKaInske11yP7Ccj66neaB8=
Subject key identifier: F6:CE:D9:D2:46:EA:5C:3F:24:32:B3:AC:71:BB:E2:CA:A7:3F:6E:F8
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019B263A80907C7C2C223FBFE007D3D1452A
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa
Signing time: Tue 16 Dec 2025 08:15:26 +0000
ROA not before: Tue 16 Dec 2025 08:15:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41720
IP address blocks: 195.182.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:3a:80:90:7c:7c:2c:22:3f:bf:e0:07:d3:d1:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Dec 16 08:15:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6ced9d246ea5c3f2432b3ac71bbe2caa73f6ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:35:e2:cc:4c:f3:c6:68:f6:fe:f2:37:3d:
ea:9f:44:2a:bf:9c:a5:8a:7b:7f:48:89:df:fc:5a:
95:02:3d:23:0f:9a:10:87:5f:32:7d:60:ec:af:1d:
11:50:46:cf:65:0b:22:a8:70:38:70:ea:08:4c:e4:
6c:5c:ad:97:fa:33:6b:2d:b6:f2:57:d5:43:6c:3d:
81:77:bb:31:1e:52:7a:51:09:73:dc:2e:9b:da:8d:
f8:da:0e:23:1c:37:c0:c0:72:96:16:d6:0a:e5:ee:
a4:4a:1f:eb:41:56:d9:4b:24:16:8e:a0:2c:38:5d:
95:18:ab:6f:e5:e6:41:e8:04:50:5e:ad:9a:6b:03:
7e:f6:b3:07:53:22:86:4d:37:2c:d8:ba:11:fa:48:
2f:d2:99:a0:93:95:37:25:10:00:9c:8b:7e:39:15:
0d:70:1d:15:62:31:66:82:58:d0:c9:64:fe:80:e6:
86:9f:8b:64:15:f6:90:44:ec:b8:04:bf:6b:a4:30:
4f:96:b9:f4:33:cb:08:3e:73:4b:5b:26:0f:80:86:
c1:5b:f9:36:54:36:98:e8:d2:59:b2:ce:8b:b1:40:
be:cc:4b:22:da:b5:29:14:0c:45:88:5b:99:e3:ef:
24:eb:fa:f5:b2:91:b2:d0:cc:ec:56:3d:71:42:8f:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:D9:D2:46:EA:5C:3F:24:32:B3:AC:71:BB:E2:CA:A7:3F:6E:F8
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.210.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1c:28:fc:ec:a3:ea:47:b0:01:ad:49:b3:e9:95:59:41:62:
53:d8:7a:96:27:f1:54:13:39:1d:3e:f6:35:37:9a:e1:f1:e0:
32:98:26:cd:fc:31:8e:46:c8:9b:85:96:ba:8a:d7:ea:32:aa:
21:8c:68:e9:d8:38:4b:cd:ee:30:67:2b:42:d1:c2:6d:1e:9e:
69:26:30:9a:fe:33:17:e3:d5:a7:36:1f:d5:06:18:3c:44:c3:
f0:17:e2:50:4a:26:a2:1b:8b:27:a6:22:56:93:c1:a9:f5:a1:
de:99:04:aa:27:8e:0a:d3:d3:ac:da:8f:2f:90:3f:48:e8:e7:
b1:68:0d:b8:2b:fb:04:2c:70:a3:bc:37:1c:86:1c:9a:25:38:
49:45:44:a7:04:6d:d1:3a:90:ef:91:a1:8e:91:c3:98:fc:e8:
97:73:15:e0:0a:18:b9:d3:12:fa:8b:e5:76:25:e0:31:ab:1b:
10:5c:60:97:c2:41:78:5e:0b:83:0b:59:bc:96:0c:40:a4:44:
f0:cb:b3:94:c6:0b:59:bc:05:66:40:e2:85:d5:54:3e:59:c4:
23:07:39:0b:38:08:66:3c:e4:ea:17:54:30:08:14:23:c5:b0:
01:57:91:b3:95:22:cd:7b:47:30:52:e8:0b:f2:b8:79:6b:79:
85:62:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:58 2025 by rpki-client