This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa
File: _F5w43RHV6dx3R_wQAV5wzUAHzc.roa (raw, json)
Hash identifier: BxgPa91m82H9cRlL0aKlQX+98I+Jq5YFGlS8SucX+mo=
Subject key identifier: FC:5E:70:E3:74:47:57:A7:71:DD:1F:F0:40:05:79:C3:35:00:1F:37
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019B7EA559CB98B91634AC60F92E81C373F0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa
Signing time: Fri 02 Jan 2026 12:18:44 +0000
ROA not before: Fri 02 Jan 2026 12:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201480
IP address blocks: 2a10:4646:250::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:59:cb:98:b9:16:34:ac:60:f9:2e:81:c3:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 12:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc5e70e3744757a771dd1ff0400579c335001f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a8:8c:2a:e6:59:9b:14:c6:5c:54:7a:d7:af:
e9:68:6f:2f:84:38:32:4d:e6:44:22:b8:f8:67:0c:
47:e9:57:d7:7a:13:fa:b4:d5:6c:ab:80:95:e8:2f:
ec:b2:a1:6b:c8:e8:16:b2:0a:6c:d1:6f:5d:d7:35:
76:d7:ef:0d:3b:f7:ff:fe:48:0d:39:51:ea:fd:56:
14:3c:d5:c1:61:48:dd:5a:a8:60:1a:42:96:82:c8:
87:57:99:f8:c6:7b:7c:3d:bc:16:7c:13:5a:c2:0d:
d2:0d:b0:53:ef:4c:b7:4d:ce:ef:05:0b:1f:18:19:
38:8a:53:de:9d:3b:58:70:7e:1d:03:af:4f:6b:df:
ab:10:53:c4:43:46:3c:00:d9:3b:f5:04:1a:89:f4:
f8:11:a4:d7:44:e1:8e:a2:7c:51:96:cd:a9:02:a1:
e2:e2:f6:c0:70:26:ce:75:30:9b:e0:cc:70:29:cf:
90:bd:53:e9:ac:5b:84:02:76:52:64:31:0f:dc:3d:
89:5f:5f:a2:3b:80:ff:c0:43:9f:f2:98:f6:ba:98:
87:18:58:48:ef:d7:d6:d4:cf:23:46:ff:98:9d:20:
b7:88:a5:54:6d:f0:d3:79:3f:cf:2e:ec:45:82:0f:
47:40:88:ff:c7:df:c1:4d:5b:2f:d7:cc:db:af:3f:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:70:E3:74:47:57:A7:71:DD:1F:F0:40:05:79:C3:35:00:1F:37
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_F5w43RHV6dx3R_wQAV5wzUAHzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:250::/44
Signature Algorithm: sha256WithRSAEncryption
6f:39:50:91:aa:6f:45:8e:43:9d:ef:a1:07:94:d0:d0:fe:e6:
27:18:e2:aa:cb:80:f3:04:ac:11:c7:97:5b:b4:97:85:26:0a:
f9:67:29:21:3b:b1:e2:d3:49:b5:68:1f:9e:4f:61:ec:16:f2:
47:bf:45:42:66:59:c5:93:2b:d3:40:a8:fb:30:eb:5a:72:53:
1c:54:b8:24:9e:ba:02:0c:12:75:18:69:e2:d7:a3:99:79:e5:
77:e8:61:24:0c:3c:9d:59:e0:d1:3c:a8:ae:3a:cf:4a:b8:b6:
47:9d:e0:57:c8:0a:d6:9a:ff:f2:00:ca:c4:2f:6e:db:11:e0:
4f:06:fb:77:c2:c9:4d:95:82:38:da:89:44:4d:61:d5:9a:74:
68:51:47:cf:4a:ad:4f:78:8d:92:67:6a:90:3d:32:6e:b1:3f:
65:c3:6b:a4:ba:d0:a4:bf:94:ea:7e:6a:aa:bd:8b:b8:44:a6:
64:89:96:30:e1:f2:81:3d:82:17:2d:0a:64:0a:e2:8a:6d:a5:
92:2e:07:90:4c:78:e9:3d:3f:d7:aa:07:38:9f:e6:36:50:f9:
4a:23:21:03:4a:79:43:45:7d:25:17:e6:78:f9:8c:c2:2f:9f:
8d:6b:92:bc:fa:5b:97:f5:ce:a3:1e:53:5c:71:47:91:5e:ea:
80:51:da:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt+pVnLmLkWNKxg+S6Bw3PwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzVlNzBlMzc0NDc1N2E3NzFkZDFmZjA0MDA1NzljMzM1MDAxZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qiMKuZZmxTGXFR616/paG8vhDgy
TeZEIrj4ZwxH6VfXehP6tNVsq4CV6C/ssqFryOgWsgps0W9d1zV21+8NO/f//kgN
OVHq/VYUPNXBYUjdWqhgGkKWgsiHV5n4xnt8PbwWfBNawg3SDbBT70y3Tc7vBQsf
GBk4ilPenTtYcH4dA69Pa9+rEFPEQ0Y8ANk79QQaifT4EaTXROGOonxRls2pAqHi
4vbAcCbOdTCb4MxwKc+QvVPprFuEAnZSZDEP3D2JX1+iO4D/wEOf8pj2upiHGFhI
79fW1M8jRv+YnSC3iKVUbfDTeT/PLuxFgg9HQIj/x9/BTVsv18zbrz9C5wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPxecON0R1encd0f8EAFecM1AB83MB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvX0Y1dzQzUkhWNmR4M1Jfd1FBVjV3elVBSHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgJQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBvOVCRqm9FjkOd76EHlNDQ/uYnGOKqy4DzBKwR
x5dbtJeFJgr5ZykhO7Hi00m1aB+eT2HsFvJHv0VCZlnFkyvTQKj7MOtaclMcVLgk
nroCDBJ1GGni16OZeeV36GEkDDydWeDRPKiuOs9KuLZHneBXyArWmv/yAMrEL27b
EeBPBvt3wslNlYI42olETWHVmnRoUUfPSq1PeI2SZ2qQPTJusT9lw2ukutCkv5Tq
fmqqvYu4RKZkiZYw4fKBPYIXLQpkCuKKbaWSLgeQTHjpPT/Xqgc4n+Y2UPlKIyED
SnlDRX0lF+Z4+YzCL5+Na5K8+luX9c6jHlNccUeRXuqAUdoe
-----END CERTIFICATE-----
Generated at Fri Jan 30 22:55:38 2026 by rpki-client