This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa
File: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (raw, json)
Hash identifier: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=
Subject key identifier: 16:F7:BC:93:F3:99:35:D8:D4:91:99:C8:AA:F4:A6:36:57:1D:D0:B8
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019B7F8331AB044A067C5ACF02FA777F5BF2
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa
Signing time: Fri 02 Jan 2026 16:21:02 +0000
ROA not before: Fri 02 Jan 2026 16:21:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198932
IP address blocks: 193.242.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:31:ab:04:4a:06:7c:5a:cf:02:fa:77:7f:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Jan 2 16:21:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f7bc93f39935d8d49199c8aaf4a636571dd0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:ad:f2:10:38:73:bf:8d:da:8b:30:33:3f:
27:af:05:1f:fb:ac:bd:e2:13:45:11:62:c6:2b:12:
d5:a8:b1:f5:76:d5:00:14:38:23:0c:62:25:e3:e0:
8d:5b:25:c0:61:86:0b:80:8a:7e:19:99:8f:37:0d:
63:84:b9:51:83:6e:c7:47:4e:b2:97:a9:e7:93:4b:
5f:52:07:87:dd:4c:f2:d5:fc:b1:5e:81:83:86:da:
59:73:87:f4:42:23:ba:7b:df:4d:ba:70:c6:15:f1:
94:8f:e7:98:0b:64:ab:54:e6:05:30:c0:00:d5:7d:
2d:f8:89:0f:e0:12:63:25:34:29:79:9f:d6:66:3f:
f0:0e:17:87:17:69:48:12:2a:27:56:c7:1f:99:eb:
30:35:5d:27:ed:32:f9:c1:b6:d6:f9:e5:aa:b1:bf:
fb:a6:1d:99:77:cb:4c:89:95:e9:56:c7:ad:ef:5a:
88:3b:0e:0e:48:58:d4:ab:68:eb:51:e9:1c:22:48:
a6:10:ce:f2:59:4f:52:ff:a1:3d:43:c5:01:f9:4d:
a9:cf:5d:cb:89:e0:7c:71:0b:2e:ca:25:d2:36:74:
fe:0f:9e:26:e1:5e:5d:7c:01:e7:6e:b9:b9:8f:46:
47:5e:6c:60:2f:96:7b:9b:97:cd:d1:b5:76:91:11:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:BC:93:F3:99:35:D8:D4:91:99:C8:AA:F4:A6:36:57:1D:D0:B8
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:67:12:97:8e:cf:57:f2:97:ec:a1:49:35:14:60:a9:a0:ba:
e0:5a:5e:a6:71:dc:60:0a:f0:76:ca:fc:de:6b:c7:91:cb:29:
73:62:96:f5:bc:44:5a:80:a8:fb:2b:f9:70:cf:01:d6:8d:3f:
41:bb:56:a1:fa:f9:c9:18:8c:5c:c3:cf:e1:71:cd:bb:b5:67:
25:5c:be:d7:c2:81:65:4e:4a:da:76:62:18:53:32:ae:e7:86:
6f:3c:aa:18:8b:6a:ce:72:5e:d1:97:a0:b9:52:2d:61:28:44:
12:59:36:8b:30:19:ae:56:77:3c:f8:d8:17:d5:41:8e:0d:43:
c4:f7:80:5c:c8:41:3e:ea:46:8b:07:75:f6:ed:94:36:53:c4:
64:99:26:f1:3c:69:85:ee:2a:46:f8:3a:16:f2:62:bf:6e:72:
fc:3f:47:dc:9d:4a:0e:af:a6:08:38:40:92:0a:0a:c0:6c:5b:
51:1f:b8:dd:b4:81:65:d5:75:6f:b3:af:15:2f:70:7e:7c:23:
2d:ee:62:43:2a:b1:af:92:f1:f9:5f:2d:5c:4d:14:9e:81:62:
79:08:93:6b:7a:d2:cc:e7:e5:da:d5:6d:21:fa:aa:50:76:3e:
12:67:14:c3:0f:85:5a:2b:c6:a9:77:0f:4b:d1:7d:8c:87:ff:
c2:39:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:33 2026 by rpki-client