This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/P_mFxEcYlCrFN3MG993zE4Mm2l4.roa
File: P_mFxEcYlCrFN3MG993zE4Mm2l4.roa (raw, json)
Hash identifier: qelseO1it8WIi6uPqUIeiOJkVLkt0DoO5JMwvTxaQaY=
Subject key identifier: 3F:F9:85:C4:47:18:94:2A:C5:37:73:06:F7:DD:F3:13:83:26:DA:5E
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019B7B36364F0300455A9A51801895C7F925
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/P_mFxEcYlCrFN3MG993zE4Mm2l4.roa
Signing time: Thu 01 Jan 2026 20:18:28 +0000
ROA not before: Thu 01 Jan 2026 20:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50767
IP address blocks: 176.104.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:36:4f:03:00:45:5a:9a:51:80:18:95:c7:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Jan 1 20:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff985c44718942ac5377306f7ddf3138326da5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:75:32:4c:c8:3e:2e:6c:29:23:fa:af:05:
12:8b:58:7a:6d:34:99:ed:be:50:8f:d8:db:66:3d:
86:53:20:22:f4:bc:c7:dd:43:0a:41:91:34:67:7b:
02:0b:85:f1:f0:83:7e:65:7b:4a:94:2e:45:c6:b3:
3e:3e:76:d3:ec:95:66:cb:47:2e:57:c2:64:eb:19:
bc:6c:97:d7:0e:e1:df:c1:f4:07:f1:d5:45:49:ce:
89:ac:4c:04:2a:e9:b9:d7:69:bb:9f:58:83:70:2e:
0b:06:be:8f:13:5f:2f:ca:db:2f:30:aa:87:4b:7b:
1f:aa:b0:e0:4f:91:6e:43:52:43:88:fb:c0:4e:4b:
73:e2:c8:d9:33:b3:c1:10:9f:37:41:90:5e:05:fc:
10:b1:65:1d:52:d6:64:f8:36:aa:82:ae:2e:f4:08:
5d:eb:3b:85:af:83:0b:22:f2:1d:5e:82:f9:be:3c:
18:5e:e1:67:a2:d4:27:2f:e3:3c:b6:4c:b3:71:96:
51:17:74:0b:58:62:30:9d:fb:a4:df:b8:1c:4b:5c:
6d:f9:0d:27:55:33:11:fd:b9:56:ad:90:a4:fd:b3:
3d:44:7c:5d:0a:ee:1a:84:de:13:e2:b8:2c:b2:28:
83:b9:26:ae:1e:49:98:41:7e:a5:0b:2a:de:be:9a:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:85:C4:47:18:94:2A:C5:37:73:06:F7:DD:F3:13:83:26:DA:5E
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/P_mFxEcYlCrFN3MG993zE4Mm2l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.176.0/21
Signature Algorithm: sha256WithRSAEncryption
63:28:f9:6b:b9:60:c0:ed:70:71:07:e0:79:cb:ee:56:f5:e4:
ce:72:8b:0c:db:10:59:7f:ce:58:c3:44:bc:ab:78:a9:c4:7e:
3e:39:2c:80:63:23:63:86:27:6b:04:18:94:6c:e2:22:9a:02:
45:65:9c:dd:ad:6c:9c:69:40:b1:ff:cd:cc:21:b0:a3:6c:90:
5b:6c:83:10:1e:84:b7:70:77:fa:c5:f4:b6:f9:39:58:cd:16:
67:c6:8c:9d:0a:d2:4f:9b:90:8c:e2:6d:c1:c6:b4:2d:ff:42:
ed:2d:5e:5c:c9:df:87:07:46:f9:b6:5f:90:53:eb:f7:99:7e:
7e:87:90:35:33:c5:0e:ff:87:bb:60:51:91:31:62:ef:57:18:
5d:25:04:bd:bb:e8:d5:03:3b:d0:92:f2:30:fb:38:c0:79:3a:
cb:e3:65:bf:e5:63:cf:fd:ef:ad:bb:62:ac:f6:28:ef:88:49:
ba:b3:b7:33:4a:a6:0e:2c:5d:aa:d4:7f:f7:e1:ac:20:b2:db:
4b:e0:18:17:a0:94:a8:8f:fa:55:8d:fb:62:ff:cd:02:96:3a:
12:78:10:e5:82:bf:6c:6a:cf:a6:50:a7:ef:d3:96:da:81:ab:
26:7f:59:ae:02:a6:da:56:72:81:c6:0b:99:6b:00:5c:3f:74:
f1:a9:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:15 2026 by rpki-client