This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa
File: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (raw, json)
Hash identifier: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=
Subject key identifier: 88:C7:99:E7:9C:57:4D:15:05:F9:4A:AB:CC:93:9C:45:6A:8B:9E:BD
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019B7A5A652046A4540A7713F7D2315845CD
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa
Signing time: Thu 01 Jan 2026 16:18:22 +0000
ROA not before: Thu 01 Jan 2026 16:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59560
IP address blocks: 176.116.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:65:20:46:a4:54:0a:77:13:f7:d2:31:58:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Jan 1 16:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c799e79c574d1505f94aabcc939c456a8b9ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:67:8a:dd:02:6d:70:b7:9f:74:3d:7e:11:
2b:ba:0b:8f:82:52:64:08:fc:80:01:57:9b:31:49:
20:5b:fe:de:16:f8:aa:52:5b:11:26:bc:71:c9:5f:
03:a2:61:a4:ba:8f:db:01:40:9d:e8:f6:7b:62:17:
a2:c9:ad:8b:a0:0f:7a:6f:b7:03:d5:38:ad:8d:89:
72:bc:b7:03:7c:fb:9a:cc:ac:28:ce:88:67:94:40:
73:7e:c8:8d:21:f9:f0:de:63:99:3d:7f:26:a0:cc:
6d:56:0f:48:fc:53:8e:e3:9b:b4:64:90:9f:6f:0b:
1b:39:9f:8b:1b:b1:df:19:20:11:e0:7c:e1:21:d7:
9a:06:61:a5:07:88:8c:8a:48:14:83:ab:10:82:81:
b6:e1:c3:7b:df:76:9a:f0:14:7e:13:1f:79:0e:7f:
dd:ae:ec:0a:a5:33:aa:31:e5:f5:86:80:80:3a:0d:
03:17:5f:e5:61:ba:26:c8:8f:61:9d:ef:96:9e:56:
8b:97:c4:98:ad:14:6a:4e:65:3f:1c:2f:61:6e:99:
c1:9c:7a:ac:54:98:cb:85:0c:e0:d2:9c:10:0a:29:
9d:4d:9a:5e:7b:b0:53:17:42:06:5d:db:2c:18:af:
55:4d:cc:b5:3c:73:48:66:2c:3c:10:b8:18:22:c5:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:99:E7:9C:57:4D:15:05:F9:4A:AB:CC:93:9C:45:6A:8B:9E:BD
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.145.0/24
Signature Algorithm: sha256WithRSAEncryption
62:75:d4:f4:be:1b:fd:a1:ad:e2:05:a0:b8:c9:24:10:36:ca:
7b:ff:c1:fd:0d:96:9c:42:65:5b:d6:f6:6c:79:7c:2f:d6:4d:
28:86:86:56:f5:3a:00:c2:fa:48:62:7c:fd:c5:88:f1:95:c6:
28:50:57:8e:64:4d:f7:70:37:b9:c9:bd:5f:b0:e6:28:cd:2c:
e8:e1:5a:d1:6f:af:15:31:9c:00:1d:82:80:a6:b8:4e:e5:58:
fb:17:96:48:ee:35:15:07:32:45:78:50:2c:fe:7d:c4:74:94:
ce:ba:bb:fa:28:06:f3:98:20:dd:55:72:92:ed:a5:31:9b:5d:
b9:83:18:c2:1a:71:1b:5b:6b:15:26:4d:bb:54:7c:1d:6f:fc:
05:d5:b6:cf:5f:ee:ee:bd:57:98:d9:8c:e1:8b:55:3e:38:23:
fc:fb:9c:4a:89:8f:e2:34:4a:11:e8:f7:ec:74:db:be:19:17:
27:aa:cb:2c:37:8a:2c:09:3b:e4:ed:f4:e7:da:67:63:7a:cb:
42:54:fc:c1:8e:85:b3:68:9d:32:77:5e:fc:fc:65:3d:33:4a:
bb:fc:c1:e6:57:a7:3e:e3:ad:56:82:aa:df:7c:44:58:f9:2e:
c9:cb:50:d6:21:09:b0:6b:12:d3:41:78:45:0f:0e:ef:40:eb:
dd:a7:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:43 2026 by rpki-client