This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa
File: fTPoxCe4jGfBgPBLkUKcm_JbirE.roa (raw, json)
Hash identifier: 02Sw+k6mgA2rz0rcR6vWe/Ze2n73fjDgyV/8LWMOJoc=
Subject key identifier: 7D:33:E8:C4:27:B8:8C:67:C1:80:F0:4B:91:42:9C:9B:F2:5B:8A:B1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019B7BA391C1BBBEFD4BC6D14D5C16625F75
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa
Signing time: Thu 01 Jan 2026 22:17:55 +0000
ROA not before: Thu 01 Jan 2026 22:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208645
IP address blocks: 45.91.244.0/22 maxlen: 22
185.91.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:91:c1:bb:be:fd:4b:c6:d1:4d:5c:16:62:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jan 1 22:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d33e8c427b88c67c180f04b91429c9bf25b8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:0a:3d:7d:c5:1b:f9:7d:83:8d:32:9f:3c:
45:bd:f4:d5:bc:15:7d:d4:21:18:4a:4c:cf:fc:cd:
fb:dd:99:48:e0:02:ac:aa:7f:5c:3c:33:d7:72:c5:
ad:b1:80:54:5d:8b:45:0d:b6:b1:8a:92:af:79:6d:
56:8e:e3:d6:a8:f4:90:56:36:bd:98:18:17:65:3d:
ea:00:82:42:5f:4b:42:cb:92:1d:15:a2:26:4c:ff:
ef:e5:0f:27:c9:5c:55:d9:2d:87:8a:b1:d4:30:0a:
8f:28:e1:b9:98:8a:6c:c6:5c:d4:26:84:81:e5:4d:
06:e9:c3:af:1f:ed:9d:c9:e2:b7:22:41:b2:7e:0d:
9d:55:87:d8:04:b6:11:7b:3f:ae:8b:70:16:09:51:
a9:56:25:08:24:a4:36:3b:a0:9e:30:c6:ba:1f:98:
3b:ee:56:22:3c:c2:b9:31:06:52:3b:91:55:02:ec:
4e:71:2a:c8:1a:62:ee:1e:fd:d9:2e:1b:60:2f:5e:
40:94:1b:47:06:bf:6a:0c:b2:da:c6:72:55:83:f4:
a9:a7:0b:22:55:0a:b3:c5:db:a3:97:48:bf:dc:4e:
0d:46:ae:d7:9d:2a:60:8b:bf:6a:c6:fe:2b:32:e6:
c2:c9:b2:d1:a1:76:bd:d2:ba:47:bb:db:f6:9c:1f:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:33:E8:C4:27:B8:8C:67:C1:80:F0:4B:91:42:9C:9B:F2:5B:8A:B1
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/fTPoxCe4jGfBgPBLkUKcm_JbirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.244.0/22
185.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:05:23:81:4f:a4:da:7a:2d:be:5b:51:e2:67:fa:7f:2d:fa:
9c:25:80:b3:7d:e5:c2:65:5f:a2:88:49:71:1c:14:18:d4:9e:
e7:f2:73:c5:39:6b:8c:42:72:c9:67:1f:2c:34:2e:62:2f:8e:
e4:87:95:6f:5b:b8:f9:1f:4f:77:ec:12:ac:5a:af:10:a1:cb:
cf:4a:00:1f:a1:36:eb:47:30:a6:da:ef:26:2c:74:3f:b0:11:
34:6d:36:99:5a:14:1b:1d:f1:23:b5:33:b4:5f:e5:4d:84:3e:
37:a7:d6:bb:a2:18:77:8c:dc:63:68:7c:1b:e4:b4:b2:33:eb:
59:7e:2f:d6:2e:a6:2a:2c:50:1d:18:e0:02:45:f7:60:a2:91:
19:e7:5e:be:c3:d9:1a:7c:a2:a7:5e:eb:03:3f:65:00:68:88:
ca:a8:0f:01:9e:8b:2b:15:5b:dc:40:8b:fd:f9:34:15:c3:00:
c8:bf:3f:6e:8e:01:d8:3e:2b:ed:6b:fe:0b:bb:c9:67:0c:a6:
06:c5:c8:ad:e1:f0:52:e7:be:ef:c2:19:f4:59:92:34:65:95:
b5:e1:61:41:03:d6:7b:50:67:06:78:36:fe:76:54:0a:ca:7b:
e3:5c:ea:e5:b2:8d:57:fd:b5:b3:23:b4:cc:7b:7d:c3:08:e9:
78:6c:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:31:23 2026 by rpki-client