This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa
File: fIACLuWd2jewktBlpXCJABXEMc8.roa (raw, json)
Hash identifier: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=
Subject key identifier: 7C:80:02:2E:E5:9D:DA:37:B0:92:D0:65:A5:70:89:00:15:C4:31:CF
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 019B79107E54D0395262CDB0BCC65968BC53
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa
Signing time: Thu 01 Jan 2026 10:18:02 +0000
ROA not before: Thu 01 Jan 2026 10:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275
IP address blocks: 5.158.213.64/31 maxlen: 31
185.84.19.224/27 maxlen: 27
213.130.47.16/28 maxlen: 28
2001:728:0:5000::1532/127 maxlen: 127
2001:728:0:7000::/64 maxlen: 64
2001:728:401:21::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:7e:54:d0:39:52:62:cd:b0:bc:c6:59:68:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 1 10:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c80022ee59dda37b092d065a570890015c431cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:75:e3:53:79:f8:6e:33:f3:ee:07:d8:5d:
79:1e:36:76:29:5a:38:c3:a8:65:ce:87:79:0c:2d:
5b:54:af:f4:a6:1a:07:82:ad:8e:9f:49:47:71:9b:
9b:af:8c:36:fc:7e:00:c3:ee:7f:e5:99:3d:5d:d6:
4c:28:f0:57:ca:13:be:46:92:c4:7e:bc:3b:0b:33:
9c:87:78:55:dc:ec:04:81:85:e1:75:1c:21:35:a4:
06:3a:9a:f5:35:e2:14:60:aa:b0:77:59:89:ed:e2:
0b:a6:84:50:70:c1:11:44:60:d9:43:84:cf:a0:d7:
48:21:0b:bc:5e:5a:12:fb:b6:1f:5d:9f:49:53:38:
c3:9d:ad:f9:8e:20:06:07:f7:80:96:0c:88:68:08:
0d:89:63:2b:3d:2a:6e:8d:e3:70:79:83:3a:ce:61:
9d:ce:48:79:b6:bc:3c:d6:bd:2e:66:1b:82:13:b4:
35:ee:3c:6e:bd:93:05:c5:da:01:a6:99:b8:c1:aa:
07:de:a0:c6:d0:5d:74:92:b4:6d:2e:b6:6b:6a:da:
07:b9:90:d4:ac:e4:00:ef:86:5e:2b:8f:c6:6b:e8:
01:76:d2:51:01:44:bf:9f:33:b8:ca:0e:21:b0:56:
bc:e0:78:06:96:bc:f2:27:cf:26:3f:ac:fe:33:8f:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:02:2E:E5:9D:DA:37:B0:92:D0:65:A5:70:89:00:15:C4:31:CF
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.158.213.64/31
185.84.19.224/27
213.130.47.16/28
IPv6:
2001:728:0:5000:0:0:0:1532/127
2001:728:0:7000::/64
2001:728:401:21::/64
Signature Algorithm: sha256WithRSAEncryption
8b:d5:d9:4e:99:de:d8:04:fd:2b:d4:9e:ac:7d:ad:df:b7:21:
48:4b:4c:05:e6:ce:0e:c2:44:0e:e7:e4:81:33:89:6b:b9:5f:
72:80:93:a0:b4:d6:a2:2c:02:31:51:38:f9:d8:a5:b2:71:b3:
b7:03:76:00:7b:f3:ef:14:be:57:0f:37:65:f8:fa:a4:e8:21:
c8:f7:6b:b9:15:e4:e7:7d:5c:c2:97:6f:db:f1:99:db:a3:68:
27:80:1f:0c:f2:4e:38:b6:f9:25:45:ed:f0:2b:b3:6f:ad:9b:
f3:d1:ee:64:ff:59:e6:c4:0c:cb:d1:48:77:b6:96:fb:d2:eb:
6c:61:c9:39:c0:b4:53:88:d7:32:e0:a5:05:eb:22:e6:50:41:
9f:45:23:b6:69:8f:ca:fd:b8:7d:e1:9e:9b:92:92:c4:ec:93:
6c:11:d5:e5:68:55:fd:d8:ea:25:c7:93:3a:b2:26:94:71:da:
f4:b8:02:fc:57:53:f1:50:b4:53:0c:9f:5d:58:a5:1d:ec:4f:
f9:7c:60:05:2e:24:8e:1a:ac:38:2a:3d:ab:b1:2f:0f:b6:e2:
b2:03:91:3a:0f:6e:0c:d4:bb:5f:30:35:31:76:9e:d4:d9:57:
1c:24:50:88:7d:91:3d:01:f6:41:d1:e6:e0:9d:80:c6:90:ff:
a2:3e:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:33:22 2026 by rpki-client