This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa
File: fkccfi7U2J0VPclLxq1z-10Vueg.roa (raw, json)
Hash identifier: 0x4LuqEdaNq3L3rQXr3MKnKIAXFaI3RqdUjnhTRxMC0=
Subject key identifier: 7E:47:1C:7E:2E:D4:D8:9D:15:3D:C9:4B:C6:AD:73:FB:5D:15:B9:E8
Certificate issuer: /CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Certificate serial: 019B7EA69F577ABE6D2366B879034B1816B9
Authority key identifier: 3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa
Signing time: Fri 02 Jan 2026 12:20:07 +0000
ROA not before: Fri 02 Jan 2026 12:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207533
IP address blocks: 212.6.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:9f:57:7a:be:6d:23:66:b8:79:03:4b:18:16:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a6d97fc7878429404578e5cc0cc652fe4b4d4
Validity
Not Before: Jan 2 12:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e471c7e2ed4d89d153dc94bc6ad73fb5d15b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:9a:08:77:f1:cb:44:ab:4d:3a:03:1f:ea:
51:58:17:c6:23:69:96:85:46:df:5d:00:34:b4:ae:
a3:08:61:c4:af:a2:4e:bd:e0:50:57:23:38:7e:a5:
7d:1d:1d:4b:e7:94:f4:86:64:34:d5:1e:c3:90:44:
8d:db:52:97:c7:80:4f:00:a3:43:57:9e:36:f7:65:
d8:52:69:83:05:36:95:d7:3a:c4:d8:2d:2a:e6:98:
30:fe:0a:71:81:77:8a:16:17:98:ce:a1:83:7e:45:
0f:ea:e8:b4:a0:87:0d:86:fc:cc:4e:8f:59:c4:56:
9d:98:fe:e2:b7:86:7a:b5:f7:aa:1e:d8:3e:c8:56:
77:b4:b5:08:8a:8e:2c:1e:5c:51:de:b5:b4:85:48:
65:21:9e:c6:8a:6a:5e:b7:6e:ba:24:c2:36:2e:98:
6f:d4:eb:a7:68:2d:f1:39:f8:bc:fc:a6:67:00:26:
47:f1:79:d6:13:cf:93:19:92:7c:41:d7:57:eb:b5:
ee:b9:d4:1b:2d:94:d0:a9:96:c2:aa:72:fb:53:37:
81:6b:7f:2d:60:cb:43:b8:13:74:a5:c7:c3:97:7c:
c2:a1:e4:8e:ae:3a:9c:fb:f7:51:df:e2:06:8a:69:
06:8a:41:25:9d:6a:fe:c2:80:4e:df:83:c5:f4:e5:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:1C:7E:2E:D4:D8:9D:15:3D:C9:4B:C6:AD:73:FB:5D:15:B9:E8
X509v3 Authority Key Identifier:
keyid:3F:5A:6D:97:FC:78:78:42:94:04:57:8E:5C:C0:CC:65:2F:E4:B4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/fkccfi7U2J0VPclLxq1z-10Vueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/65f0c1-fe9d-4b09-b528-5db030c1f14b/1/P1ptl_x4eEKUBFeOXMDMZS_ktNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:16:1c:a1:9b:1d:48:22:9f:ac:f5:a5:c4:c7:db:57:05:2c:
0a:a4:fd:ed:98:f3:5b:14:ed:ca:ab:1a:b5:e4:f7:f4:56:80:
cb:06:82:ef:f2:f1:d5:b0:c1:08:95:74:6e:43:1e:65:21:23:
79:f1:a1:e1:41:37:2d:99:d5:f3:16:1c:ec:fd:a5:f4:7d:a7:
91:6d:e4:cb:99:ff:06:be:e2:cb:36:86:d0:e9:48:41:f3:39:
5a:a4:b8:8a:37:e3:be:ca:60:bb:5f:50:d8:42:74:49:6f:9d:
03:e7:99:e3:e6:cb:a3:0b:39:7f:ed:c2:ff:67:15:72:df:f4:
06:02:fc:93:6b:ed:5c:19:f6:83:bd:c8:7e:6e:62:25:8c:c8:
84:0d:0a:b6:5f:74:00:d6:b2:0a:52:b4:e0:7d:74:0a:99:ca:
29:bf:64:da:6a:ae:d3:dc:1e:78:66:84:51:19:09:95:2c:58:
cb:f7:20:60:ee:c3:b1:b7:c3:f5:89:a6:39:8d:e9:6e:6e:9e:
d6:b2:ee:2f:b6:01:8d:04:94:44:b6:97:f2:cc:fb:6f:45:75:
1a:e7:8d:2e:ee:9e:66:9d:b1:cb:dd:3a:48:36:9d:c7:0f:bf:
07:71:b0:b4:10:99:92:33:16:18:74:36:f9:aa:bf:2a:3e:84:
f5:65:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:18 2026 by rpki-client