This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/FlBj5E86mMaezxnELPbZi5fwTQY.roa
File: FlBj5E86mMaezxnELPbZi5fwTQY.roa (raw, json)
Hash identifier: 2DTFE3oHOQavlSuV+6kY/PV66gB0kYmblqBhttOkiNQ=
Subject key identifier: 16:50:63:E4:4F:3A:98:C6:9E:CF:19:C4:2C:F6:D9:8B:97:F0:4D:06
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 019B78A36C7FE247E56FB76063C79E911E41
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/FlBj5E86mMaezxnELPbZi5fwTQY.roa
Signing time: Thu 01 Jan 2026 08:18:54 +0000
ROA not before: Thu 01 Jan 2026 08:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 193.178.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:6c:7f:e2:47:e5:6f:b7:60:63:c7:9e:91:1e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jan 1 08:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=165063e44f3a98c69ecf19c42cf6d98b97f04d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:ac:20:43:1e:53:9a:2e:b7:d0:b1:1e:b5:
7e:62:9d:62:18:1b:07:e5:d7:cd:e6:c1:36:91:74:
56:3f:e0:43:52:e0:58:55:f2:9a:23:02:86:3d:72:
4c:d0:85:54:da:87:cb:2f:e5:5c:f9:48:c8:ee:a8:
8e:ab:73:1a:02:ee:c3:33:5f:57:c6:47:a8:6b:fb:
a6:81:b1:56:d7:f1:0c:b5:b0:be:33:c4:8f:09:91:
8b:fa:0e:43:0f:63:e3:42:82:8b:a0:69:2f:2a:14:
f8:7b:b3:ab:b5:54:ff:d8:5a:5d:56:e2:94:60:3b:
65:87:49:8d:dd:7c:69:7b:4a:84:28:3d:b7:a8:e1:
92:e3:da:c9:d2:60:d5:cb:2b:7e:9e:ef:ab:38:c4:
13:a2:e2:dc:61:fa:cc:57:78:7e:9d:7b:a1:96:e2:
75:b5:99:5a:e3:a4:9d:42:dc:23:f5:22:c5:74:e8:
40:3a:78:27:23:28:61:51:2a:4a:a0:96:e4:45:e1:
7f:d1:17:12:d2:94:56:5d:32:35:4f:9f:a1:03:28:
37:43:c7:42:0c:83:5a:34:ca:88:0f:ae:ea:88:5d:
93:fd:70:cb:5a:77:5e:81:02:ef:7d:ba:aa:29:c8:
77:60:29:c9:76:be:62:86:39:ee:3f:22:1c:6a:f5:
61:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:63:E4:4F:3A:98:C6:9E:CF:19:C4:2C:F6:D9:8B:97:F0:4D:06
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/FlBj5E86mMaezxnELPbZi5fwTQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.227.0/24
Signature Algorithm: sha256WithRSAEncryption
70:98:0a:a9:d4:d5:a7:f7:33:61:9b:17:11:15:63:cb:25:1e:
57:fa:b9:a7:4e:7b:f5:e3:74:3f:d2:1e:98:71:07:18:96:f8:
02:37:a2:e7:c9:9d:92:72:60:04:76:2c:16:fa:81:1a:3d:9f:
16:de:f7:1e:b5:e4:9e:6d:b5:6c:73:96:70:70:df:6e:27:69:
65:b6:62:9b:3a:79:18:5d:5a:06:71:f5:a7:65:14:84:f6:3e:
07:7d:8a:f8:b8:c1:a2:65:fd:0d:d3:6b:d9:55:14:f7:b8:4c:
08:72:80:29:80:bd:a3:70:12:4c:0c:5d:b9:44:b3:d3:29:b1:
86:8c:e7:49:21:4a:91:a3:39:d7:06:56:08:68:d8:0a:9f:26:
cb:f3:ae:44:c6:b0:c0:70:51:e3:cd:dc:c1:5d:4b:e5:b9:b4:
e1:61:6d:2e:a4:ec:7a:09:0a:ad:51:d0:6f:f5:c7:7e:d4:a3:
67:53:91:4c:90:a3:43:4e:45:96:1e:d2:02:1a:da:94:e2:bc:
23:18:86:83:18:92:44:35:8e:b7:9a:a0:b0:50:2e:a3:9a:4d:
ee:51:18:d9:b1:e1:f2:df:45:64:ee:3b:72:99:82:ca:a7:59:
69:c6:06:a9:da:bc:11:9c:d7:c5:c6:7c:10:d4:d5:11:ec:4f:
20:44:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:18 2026 by rpki-client