This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa
File: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (raw, json)
Hash identifier: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=
Subject key identifier: EE:61:41:19:82:19:4D:33:E4:52:6D:85:65:1E:64:A6:40:CC:EC:5F
Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Certificate serial: 019B7DCB601322F25A6594DA3FD14B4FEA93
Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa
Signing time: Fri 02 Jan 2026 08:20:38 +0000
ROA not before: Fri 02 Jan 2026 08:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214342
IP address blocks: 193.200.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:60:13:22:f2:5a:65:94:da:3f:d1:4b:4f:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f
Validity
Not Before: Jan 2 08:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee61411982194d33e4526d85651e64a640ccec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:93:94:6f:8c:22:2e:96:d9:83:7e:c2:a2:
ad:1b:a8:fe:aa:96:ba:51:25:8d:3d:bc:e2:9a:f9:
b6:0c:c9:de:ee:ec:f0:3a:22:c2:fd:7b:ee:f6:92:
22:77:77:88:23:7e:2d:a1:17:fe:62:08:59:b4:71:
f8:66:46:ab:d4:12:39:03:fc:f8:01:63:da:66:ac:
d5:fc:cc:2b:e8:93:95:ce:16:9c:4e:27:3c:fc:ff:
88:c5:3d:ef:3b:fb:65:99:c4:76:73:b8:9f:86:fb:
a3:d8:27:06:de:e4:3f:3e:bb:56:f9:e6:e9:68:f8:
fd:70:27:12:7e:04:e1:8a:e4:37:37:18:bf:24:fd:
30:f5:1c:aa:0f:62:e2:c5:c1:48:2a:a8:22:ba:1f:
ed:30:aa:06:f0:4d:eb:c9:46:4b:9f:7e:a0:4d:05:
a7:15:ab:7e:45:d7:7c:57:d5:81:cd:a2:2a:98:6c:
f9:aa:11:de:95:63:96:e0:6d:45:c6:37:1d:29:6e:
82:d2:e5:1e:1f:29:f4:cc:dc:34:21:8b:63:0e:a1:
d8:4a:37:f3:e5:98:90:db:ea:82:8a:32:16:1d:e4:
31:c3:84:e1:f2:2f:f8:32:4f:e7:3b:45:f3:47:42:
56:56:c7:55:3d:d2:5d:6b:66:b2:69:fd:bd:e3:28:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:41:19:82:19:4D:33:E4:52:6D:85:65:1E:64:A6:40:CC:EC:5F
X509v3 Authority Key Identifier:
keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.28.0/24
Signature Algorithm: sha256WithRSAEncryption
73:60:f6:c5:70:66:3f:57:69:48:2d:9c:e4:48:2e:8a:74:3e:
ce:5d:46:cf:0d:a9:3a:95:75:34:81:33:c1:bd:0a:86:7f:e3:
bc:7b:6c:11:e9:7c:fe:bf:ff:0b:82:3f:e0:e5:88:53:8a:d9:
68:39:19:7e:e9:10:73:2d:84:13:c9:a0:c0:9b:0c:c6:2e:06:
b1:53:c1:c1:7b:ab:91:e1:cd:f4:32:49:fa:6b:2c:6f:f8:57:
00:36:61:d2:b2:05:64:04:e1:03:ca:c2:0b:c6:33:ad:5f:a5:
be:fd:dd:fe:30:5d:56:12:78:1e:3a:d2:eb:e9:94:6d:3f:a7:
65:aa:f8:ce:78:7d:5c:e8:67:57:dd:f2:2b:85:a9:40:be:fc:
52:e5:b8:d8:d5:67:b0:ba:34:08:e5:52:ab:c8:e4:95:d0:d0:
c3:7f:06:7a:d9:42:c0:d3:3f:72:16:96:f8:a3:53:5f:ee:4a:
b6:11:45:98:f2:a3:db:62:cc:0f:4a:11:32:a5:ba:42:40:85:
09:67:ae:11:33:52:a6:d6:f7:e5:16:29:e1:ac:41:bd:84:21:
22:5d:d8:01:8c:13:88:0f:94:7f:c1:9e:aa:f8:a9:a8:13:d3:
04:f5:63:d0:ae:42:66:6a:ab:d4:e3:2d:2a:04:96:74:ee:57:
d4:0c:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:54:38 2026 by rpki-client