This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FLErTDzsAL7k_RMkTEI5o-LeprA.roa
File: FLErTDzsAL7k_RMkTEI5o-LeprA.roa (raw, json)
Hash identifier: WIUKJzwom7uV8o+Cukgrk2mhJfs5LUgnRXgNnLe637M=
Subject key identifier: 14:B1:2B:4C:3C:EC:00:BE:E4:FD:13:24:4C:42:39:A3:E2:DE:A6:B0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019AA151ACAD2564C90329D369A384DB960C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FLErTDzsAL7k_RMkTEI5o-LeprA.roa
Signing time: Thu 20 Nov 2025 12:51:15 +0000
ROA not before: Thu 20 Nov 2025 12:51:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
77.47.210.0/23 maxlen: 23
77.47.242.0/24 maxlen: 24
195.178.149.0/24 maxlen: 24
195.178.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Nov 2025 22:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a1:51:ac:ad:25:64:c9:03:29:d3:69:a3:84:db:96:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 20 12:51:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14b12b4c3cec00bee4fd13244c4239a3e2dea6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:61:ce:5b:dc:b3:1c:18:63:70:e1:f4:be:
6a:69:4b:39:38:06:78:b6:d0:04:ea:4f:0d:86:33:
e5:b8:39:ed:4c:12:c2:ce:e5:fb:c7:cb:51:ba:fc:
8c:02:60:ba:5b:2a:26:a6:20:87:2e:67:8b:6d:e2:
bd:e1:b5:4d:08:f8:48:63:80:8f:18:24:e0:6f:f8:
ef:96:79:66:b6:62:c5:6f:67:ff:17:e5:01:9c:53:
24:b1:63:b9:6f:34:0d:f8:8c:32:93:36:8e:84:ac:
27:ad:04:fd:9a:18:05:3f:f4:d0:ff:27:db:12:37:
da:45:61:80:28:5a:0e:32:b7:76:87:3c:04:02:04:
62:4f:11:da:a3:27:80:2d:3f:6a:02:5e:4e:80:4f:
39:81:1b:9a:6e:5e:95:9a:7d:39:b1:3c:5f:40:88:
65:3b:04:2a:3d:6e:c7:df:39:ea:9b:cd:99:1f:97:
62:50:81:d3:f3:5e:43:7a:14:80:82:58:08:0b:21:
a4:c2:6c:e9:8b:71:78:53:53:b3:b3:b6:ed:c4:8b:
10:ce:92:9f:cb:7a:5e:f0:26:39:8c:ea:37:87:ac:
f6:f6:e5:7a:c0:ed:dd:82:65:ef:b5:24:6f:68:97:
4a:67:8a:ac:b6:2c:06:79:fb:1d:1f:c4:7f:48:22:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:2B:4C:3C:EC:00:BE:E4:FD:13:24:4C:42:39:A3:E2:DE:A6:B0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FLErTDzsAL7k_RMkTEI5o-LeprA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.152.0/22
77.47.210.0/23
77.47.242.0/24
195.178.149.0/24
195.178.156.0/24
Signature Algorithm: sha256WithRSAEncryption
31:90:2e:85:f2:fd:ba:8f:ed:51:db:f7:3d:4a:80:e1:52:fc:
40:0d:80:0a:12:aa:e8:ec:ca:91:f8:8e:cc:65:b6:00:a0:88:
2f:d2:21:b9:80:1f:a1:73:0c:4d:fe:a7:b1:f3:d8:d6:c8:af:
6e:66:e1:e8:6d:e9:30:a2:d5:5d:9f:0c:e1:58:59:0e:98:a4:
ec:d7:c5:ab:36:6d:0e:7d:6f:53:f4:46:ae:df:63:19:9d:32:
11:8c:5b:52:47:9d:57:24:64:3b:48:fe:5b:86:67:e1:32:1b:
a4:d0:ad:67:54:ba:06:b9:f9:9a:3c:2e:14:64:33:a8:f3:a4:
24:a7:2f:c8:fa:d3:ef:35:02:72:e8:da:f5:91:26:b4:61:d8:
d1:51:18:a7:4a:d2:94:6d:1b:aa:3b:2e:9d:e8:e8:98:b3:22:
f8:c9:2c:e7:d7:d9:08:27:09:ee:5a:d3:2a:1e:8b:5d:ec:87:
8c:c5:04:b4:df:23:bc:4b:61:dd:d3:5e:11:de:07:89:21:2f:
22:b2:21:9b:bf:ea:5d:c2:1c:7b:ce:be:71:32:e8:ad:30:03:
51:3d:9b:95:63:6b:4e:59:a8:11:3f:d7:95:f8:53:bd:87:e3:
5f:bb:65:11:ca:b1:9c:67:81:1b:03:e0:c1:67:ef:04:d6:dc:
a2:64:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 27 04:02:52 2025 by rpki-client