This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa
File: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (raw, json)
Hash identifier: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=
Subject key identifier: 7E:91:C4:9A:E9:33:09:FF:2C:11:93:75:FB:54:4E:2B:73:39:F0:78
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019BF9FD16F9739F6C7DBD9B2BA6D91A2C34
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa
Signing time: Mon 26 Jan 2026 11:07:51 +0000
ROA not before: Mon 26 Jan 2026 11:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 194.115.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 11:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:fd:16:f9:73:9f:6c:7d:bd:9b:2b:a6:d9:1a:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Jan 26 11:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e91c49ae93309ff2c119375fb544e2b7339f078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:f2:ce:df:17:da:04:23:a0:6b:a6:13:ef:
df:51:1f:80:36:47:3b:0f:80:70:34:2c:fe:7e:dc:
eb:7d:60:d0:4a:54:58:c6:22:ec:0b:49:a2:24:30:
f7:f9:f9:49:c9:66:db:96:04:04:4b:ae:e4:3e:b3:
9a:ee:c9:ce:d9:19:1c:c3:00:35:a9:bd:1b:af:11:
9a:ef:be:6c:64:fb:a4:61:ad:22:de:db:99:97:30:
0b:24:94:34:2c:23:42:bf:0f:37:29:a0:2d:7e:20:
f4:cd:8e:8a:aa:55:b2:35:72:5c:65:12:de:62:88:
03:28:2f:f5:8e:d7:97:06:79:07:d3:33:a9:ef:a8:
36:8c:a3:5c:d8:d6:69:2f:4a:a8:61:c3:5e:1c:75:
4e:71:a5:e1:c6:f0:77:a5:a2:38:ec:1c:3c:15:f9:
0b:c7:cf:4e:4d:45:f0:8b:ba:91:3e:8d:4e:83:6c:
aa:e8:26:ce:a5:ac:14:fa:9c:69:df:33:bc:2b:20:
b1:f0:1b:27:97:f0:69:fe:a5:4a:63:e0:8b:c2:29:
db:fd:dd:04:89:25:b0:74:a1:06:51:19:22:56:5a:
b0:56:e7:51:6b:6e:04:09:8c:e2:41:f6:cf:bb:c5:
18:1a:43:96:b1:47:a3:64:d7:47:71:17:d9:19:95:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:91:C4:9A:E9:33:09:FF:2C:11:93:75:FB:54:4E:2B:73:39:F0:78
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/fpHEmukzCf8sEZN1-1ROK3M58Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.26.0/24
Signature Algorithm: sha256WithRSAEncryption
28:53:05:f7:de:7a:90:a3:3d:f3:55:f0:6a:e2:6d:78:67:2c:
7d:3a:66:1d:20:42:e0:e9:07:35:84:a1:bb:b6:81:3b:51:a1:
1c:64:0a:36:ab:39:67:47:43:87:85:a8:88:a7:3c:25:12:7b:
06:c4:22:d3:9b:e0:62:d4:e5:61:8f:62:6f:a7:a1:41:c9:88:
ea:53:63:53:8a:fe:a2:a4:16:49:41:a5:da:a6:bb:5c:23:cf:
1e:a4:ee:68:0d:7e:51:1d:11:2c:02:e1:34:bb:bc:c4:50:43:
27:bb:30:f6:96:57:b5:d4:95:9c:b2:25:37:07:23:e0:3e:3b:
db:1f:a0:e2:f0:2f:85:b2:63:6d:6c:dd:30:25:93:a8:90:9e:
89:8e:94:fd:b6:71:dd:82:fc:36:84:75:07:09:cd:07:2c:cb:
87:97:54:c7:78:92:22:6f:36:29:9e:f3:4b:82:a0:2d:ee:57:
db:d9:a6:a1:59:9d:5c:36:82:af:44:99:f9:a6:a2:f0:a5:17:
08:47:0c:58:5b:b3:c5:05:8f:eb:84:f3:67:65:28:b7:25:b1:
af:6b:19:56:80:b0:f5:bb:ce:ba:ab:82:9a:43:1c:00:37:30:
41:e1:e7:4e:9d:14:17:2c:22:7b:20:31:47:84:1f:8f:9a:24:
b4:b6:38:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv5/Rb5c59sfb2bK6bZGiw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzQ2NzMxYjQzMTAyYjk2ZWJhMmRlNWQzOGMzZGNkMjg0
YjhmZTYwHhcNMjYwMTI2MTEwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTkxYzQ5YWU5MzMwOWZmMmMxMTkzNzVmYjU0NGUyYjczMzlmMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03Lyzt8X2gQjoGumE+/fUR+ANkc7
D4BwNCz+ftzrfWDQSlRYxiLsC0miJDD3+flJyWbblgQES67kPrOa7snO2RkcwwA1
qb0brxGa775sZPukYa0i3tuZlzALJJQ0LCNCvw83KaAtfiD0zY6KqlWyNXJcZRLe
YogDKC/1jteXBnkH0zOp76g2jKNc2NZpL0qoYcNeHHVOcaXhxvB3paI47Bw8FfkL
x89OTUXwi7qRPo1Og2yq6CbOpawU+pxp3zO8KyCx8Bsnl/Bp/qVKY+CLwinb/d0E
iSWwdKEGURkiVlqwVudRa24ECYziQfbPu8UYGkOWsUejZNdHcRfZGZU8AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6RxJrpMwn/LBGTdftUTitzOfB4MB8GA1UdIwQY
MBaAFLR0ZzG0MQK5brot5dOMPc0oS4/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGIt
YmEwNjQyOWY0MmY1LzEvZnBIRW11a3pDZjhzRVpOMS0xUk9LM001OEhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jNGY0MzctZGVmNy00OWM3LWJmMGItYmEwNjQyOWY0MmY1
LzEvdEhSbk1iUXhBcmx1dWkzbDA0dzl6U2hMai1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnMaMA0G
CSqGSIb3DQEBCwUAA4IBAQAoUwX33nqQoz3zVfBq4m14Zyx9OmYdIELg6Qc1hKG7
toE7UaEcZAo2qzlnR0OHhaiIpzwlEnsGxCLTm+Bi1OVhj2Jvp6FByYjqU2NTiv6i
pBZJQaXaprtcI88epO5oDX5RHREsAuE0u7zEUEMnuzD2lle11JWcsiU3ByPgPjvb
H6Di8C+FsmNtbN0wJZOokJ6JjpT9tnHdgvw2hHUHCc0HLMuHl1THeJIibzYpnvNL
gqAt7lfb2aahWZ1cNoKvRJn5pqLwpRcIRwxYW7PFBY/rhPNnZSi3JbGvaxlWgLD1
u866q4KaQxwANzBB4edOnRQXLCJ7IDFHhB+PmiS0tjig
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:32:40 2026 by rpki-client