This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FiEiuI7WkV0RrBWPvG70NNZv3Ds.roa
File: FiEiuI7WkV0RrBWPvG70NNZv3Ds.roa (raw, json)
Hash identifier: uOZIjYjwKgZKPBZBIZs6ySuJNK37Qfr2oN8x2htIulI=
Subject key identifier: 16:21:22:B8:8E:D6:91:5D:11:AC:15:8F:BC:6E:F4:34:D6:6F:DC:3B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019B77C6A67B4F7E95A5C1B8E1B621761054
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FiEiuI7WkV0RrBWPvG70NNZv3Ds.roa
Signing time: Thu 01 Jan 2026 04:17:46 +0000
ROA not before: Thu 01 Jan 2026 04:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149430
IP address blocks: 46.8.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:a6:7b:4f:7e:95:a5:c1:b8:e1:b6:21:76:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 04:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162122b88ed6915d11ac158fbc6ef434d66fdc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3a:6d:cd:3a:bb:c2:ee:f4:36:99:39:c3:80:
94:e1:95:6a:ab:5c:e5:65:21:88:1b:38:4f:ab:5b:
68:05:4d:3f:a4:ee:d4:62:2a:fa:6b:ac:a4:d4:e7:
00:ba:c4:9d:b0:0a:84:2a:24:94:6d:92:48:b4:98:
ef:84:18:9b:27:72:7e:06:26:12:72:f5:cc:3d:70:
b9:64:e8:1e:d0:37:dc:95:46:0d:ca:d5:ab:8b:fe:
ae:d5:af:18:46:b7:05:4d:2a:29:7e:38:51:16:38:
88:73:f2:9c:23:a4:e0:40:56:05:74:f3:7e:44:ec:
91:c2:f4:d2:59:bf:2b:33:a4:20:d3:b2:63:19:c8:
8a:26:b2:c4:05:53:e0:31:1a:8f:d8:19:6d:ca:87:
3d:d8:71:95:8a:6c:60:c6:21:e4:5e:0b:ca:7a:c2:
b8:49:02:b3:d1:d6:2a:5e:31:2c:55:bb:1a:15:27:
c8:6e:77:96:cc:80:a0:d3:6b:27:b0:3a:2d:00:c3:
a5:aa:19:34:32:f5:2f:ca:10:a2:6f:a4:dd:aa:5f:
d1:de:62:e5:cb:0f:58:f0:40:24:d7:30:6d:73:e6:
97:32:41:94:ca:56:f6:79:9c:19:e6:81:de:9e:ba:
70:a8:89:5a:ce:1c:d6:d5:04:dd:c3:91:e8:c6:f8:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:22:B8:8E:D6:91:5D:11:AC:15:8F:BC:6E:F4:34:D6:6F:DC:3B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FiEiuI7WkV0RrBWPvG70NNZv3Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
00:83:75:ef:ef:d1:9e:1b:70:0d:0b:5d:6d:54:03:df:f0:ae:
fa:06:56:4c:10:69:41:e2:5d:6e:4c:13:22:fe:9a:29:e7:bc:
40:47:de:31:aa:f2:1d:7d:7c:c0:05:0b:bd:2b:7a:de:1f:fd:
75:f5:24:c8:60:37:8c:51:95:fb:76:39:5b:5c:a9:11:70:56:
8f:87:eb:91:f1:6b:39:73:cc:bc:9f:9c:2d:30:f6:4f:7e:90:
82:6f:02:e3:27:88:82:f3:19:9d:bd:a2:0d:40:62:fc:cf:52:
72:a7:6b:c7:60:82:fc:2d:9c:46:20:68:77:b9:02:a6:47:5f:
2b:f9:95:bf:e4:70:ad:a2:3d:4c:cf:06:58:83:58:ed:e1:70:
f1:e5:eb:7c:5f:7e:70:a5:4c:3e:50:d4:07:24:c3:be:dc:81:
61:61:d8:3a:54:08:22:c5:dd:51:4a:17:44:c6:2e:a2:0b:fc:
2a:ce:52:6e:99:50:c2:dc:f3:04:4c:94:c9:41:48:02:9a:6f:
a0:b2:81:88:92:48:92:0d:09:17:e1:59:2e:b4:98:68:98:01:
ab:5e:84:30:2d:63:c0:0e:8d:a7:9a:7e:d4:14:46:76:6a:35:
b3:af:96:1f:65:87:84:d7:9d:16:ee:a5:be:d1:7c:d3:77:e1:
db:a5:db:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xqZ7T36VpcG44bYhdhBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjIxMjJiODhlZDY5MTVkMTFhYzE1OGZiYzZlZjQzNGQ2NmZkYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jptzTq7wu70Npk5w4CU4ZVqq1zl
ZSGIGzhPq1toBU0/pO7UYir6a6yk1OcAusSdsAqEKiSUbZJItJjvhBibJ3J+BiYS
cvXMPXC5ZOge0DfclUYNytWri/6u1a8YRrcFTSopfjhRFjiIc/KcI6TgQFYFdPN+
ROyRwvTSWb8rM6Qg07JjGciKJrLEBVPgMRqP2Bltyoc92HGVimxgxiHkXgvKesK4
SQKz0dYqXjEsVbsaFSfIbneWzICg02snsDotAMOlqhk0MvUvyhCib6Tdql/R3mLl
yw9Y8EAk1zBtc+aXMkGUylb2eZwZ5oHenrpwqIlazhzW1QTdw5HoxvjuywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYhIriO1pFdEawVj7xu9DTWb9w7MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvRmlFaXVJN1drVjBSckJXUHZHNzBOTlp2M0RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLgi2MA0G
CSqGSIb3DQEBCwUAA4IBAQAAg3Xv79GeG3ANC11tVAPf8K76BlZMEGlB4l1uTBMi
/pop57xAR94xqvIdfXzABQu9K3reH/119STIYDeMUZX7djlbXKkRcFaPh+uR8Ws5
c8y8n5wtMPZPfpCCbwLjJ4iC8xmdvaINQGL8z1Jyp2vHYIL8LZxGIGh3uQKmR18r
+ZW/5HCtoj1MzwZYg1jt4XDx5et8X35wpUw+UNQHJMO+3IFhYdg6VAgixd1RShdE
xi6iC/wqzlJumVDC3PMETJTJQUgCmm+gsoGIkkiSDQkX4VkutJhomAGrXoQwLWPA
Do2nmn7UFEZ2ajWzr5YfZYeE150W7qW+0XzTd+Hbpdv5
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:41:41 2026 by rpki-client