This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fDrHZna0poljYQtWSTH-QZttgGE.roa
File: fDrHZna0poljYQtWSTH-QZttgGE.roa (raw, json)
Hash identifier: KITdLO3cweVSLuxlQGczxylWZETJoY33fzS6OZAOqF0=
Subject key identifier: 7C:3A:C7:66:76:B4:A6:89:63:61:0B:56:49:31:FE:41:9B:6D:80:61
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019BDFDEAC4F554E0D37506DA32BCF2ED1BF
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fDrHZna0poljYQtWSTH-QZttgGE.roa
Signing time: Wed 21 Jan 2026 09:24:30 +0000
ROA not before: Wed 21 Jan 2026 09:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:de:ac:4f:55:4e:0d:37:50:6d:a3:2b:cf:2e:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 21 09:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c3ac76676b4a68963610b564931fe419b6d8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:71:06:b8:79:57:24:7c:ce:6d:b6:b6:5f:
ab:6a:23:f3:f7:77:16:39:4b:f5:9c:20:e3:86:e1:
75:fc:10:a5:ec:73:f2:4f:37:c8:c1:8b:94:d4:e8:
bd:b7:8c:0b:f5:82:e9:2c:ec:e2:0e:ec:4d:82:a3:
ef:0e:d9:15:c8:43:40:71:30:ca:a3:ed:af:1b:74:
5b:c9:76:eb:8e:fb:cb:af:fe:24:38:14:dc:75:ab:
0b:9e:ad:2f:f7:ea:85:6c:bf:4b:55:f3:9e:bc:28:
a0:57:e7:a3:46:65:d2:ea:3d:27:07:50:c4:64:70:
47:96:99:e0:3e:6c:66:3e:da:8d:99:51:b0:25:15:
c6:93:b3:14:96:88:cb:5d:ca:a2:a3:c5:fd:fe:57:
ce:b0:1d:4c:44:69:4a:49:38:aa:2a:21:60:20:af:
4c:76:d5:c2:08:37:05:13:fd:ac:32:98:af:bf:87:
82:52:ff:4f:80:c0:3c:f7:e7:b9:0e:b3:4d:c8:60:
d4:13:a6:76:ba:36:ca:2d:95:da:99:a9:8f:92:3b:
28:fb:11:97:78:e4:45:fc:55:cd:d4:07:f8:ac:81:
21:bd:7f:62:f6:36:f5:7f:6e:a7:aa:2c:3e:3b:11:
c8:4e:c7:ca:89:59:6c:ec:75:51:00:81:5c:f3:8c:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:C7:66:76:B4:A6:89:63:61:0B:56:49:31:FE:41:9B:6D:80:61
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fDrHZna0poljYQtWSTH-QZttgGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
58:00:d8:a9:6f:4c:10:16:d9:b9:ff:0b:54:dd:e8:1e:2f:f6:
94:07:6d:bd:60:1c:e9:9b:d8:5d:75:19:f5:44:67:0e:d9:f0:
7e:31:ab:8e:d8:17:a4:f5:5e:06:fc:b2:29:56:83:d0:9f:42:
e6:ec:e4:40:6c:d1:8e:c0:13:e6:f8:b1:af:19:b1:07:cb:2d:
1f:0f:5a:f8:38:0f:a0:62:a0:2a:49:f6:cd:83:35:22:3b:be:
65:f8:90:27:26:07:9c:23:17:86:4d:c6:51:46:ad:ef:b1:1c:
3a:81:7c:d1:ec:1f:fc:7a:38:f1:5c:3a:04:a1:27:cb:bf:1c:
30:fa:0f:64:d2:c0:94:ad:f6:92:ba:b2:72:39:34:2c:e7:84:
a6:c3:91:98:69:71:bf:71:05:db:ce:ac:5c:68:58:5a:34:f2:
c4:c3:09:69:a2:5b:7c:a9:c8:9d:5c:2f:da:1d:b0:ab:0e:b2:
fc:dc:48:ff:d7:85:cc:fa:e9:c4:6e:d3:70:d4:ba:9e:6d:bd:
60:15:2d:77:d8:79:8d:c3:16:24:f9:d5:7c:05:71:1d:23:41:
19:53:8d:56:01:24:cd:10:13:9b:27:dd:55:c4:f6:b0:bd:59:
d4:1f:c8:71:c5:3a:9a:fa:53:f1:b0:ca:a5:78:ad:a3:c2:93:
86:c1:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:59:34 2026 by rpki-client