This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa
File: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (raw, json)
Hash identifier: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=
Subject key identifier: 7C:F2:C2:73:1E:47:E2:F5:AD:F9:03:E3:8A:AF:92:23:47:2D:82:AB
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019B7DCAF05644B3200B1E7D0C3F8D63FFF0
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa
Signing time: Fri 02 Jan 2026 08:20:10 +0000
ROA not before: Fri 02 Jan 2026 08:20:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15699
IP address blocks: 46.226.40.0/21 maxlen: 32
2a0b:9d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:f0:56:44:b3:20:0b:1e:7d:0c:3f:8d:63:ff:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jan 2 08:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cf2c2731e47e2f5adf903e38aaf9223472d82ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:cb:8b:9b:f2:53:4a:60:7f:eb:5d:db:f5:
8a:72:be:2a:88:34:8f:7d:02:ae:ac:6b:9b:3d:fe:
70:23:97:5f:48:28:24:a2:18:1d:5c:c0:d2:56:c1:
a6:51:9b:fb:c7:00:b4:6e:5d:2b:a5:1e:33:7d:51:
bd:5c:f9:fd:bd:3a:53:02:91:04:53:4b:19:72:c9:
f2:98:44:33:1a:36:4e:bf:26:21:b5:81:fa:85:cf:
97:59:18:bc:66:ca:45:77:a9:ce:96:bb:d3:6f:4e:
94:71:f6:35:83:9e:41:40:f8:c2:a0:aa:90:0b:fc:
25:50:9c:f8:fc:bb:74:96:fb:14:51:31:8d:05:9a:
a1:c5:f2:15:70:90:90:4d:99:9c:17:e6:a2:5e:d0:
19:24:cf:c5:14:b9:62:e8:c6:b6:a6:4e:32:a8:a5:
e6:37:6f:fa:c6:b8:58:46:fe:ea:bb:f9:79:91:f1:
fd:19:04:15:ff:f8:0d:b4:c5:12:ba:d3:6a:a5:99:
fd:35:d5:e9:cc:79:2e:48:d1:45:f4:01:1a:c8:2f:
e9:bb:2e:98:02:c7:57:fb:d1:d1:9b:56:73:85:2e:
a5:57:43:e4:c6:3d:7e:33:91:98:29:c9:c7:a9:b5:
f6:1a:a5:0e:19:b4:38:81:69:32:51:d7:e0:68:9b:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:C2:73:1E:47:E2:F5:AD:F9:03:E3:8A:AF:92:23:47:2D:82:AB
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.40.0/21
IPv6:
2a0b:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
45:8b:f9:f1:94:51:c5:48:e5:2f:ba:df:a3:06:58:97:f0:9c:
bf:fb:af:b8:42:11:32:96:3a:e6:f3:c1:ed:30:46:4b:ea:0f:
c2:38:f8:d8:09:5c:6d:74:92:3f:26:b2:54:57:6c:fe:aa:dc:
84:0e:15:f0:be:5d:71:dd:0a:4b:5e:dc:ef:c3:c0:15:7b:35:
a5:93:bb:14:2a:62:f6:71:6f:31:3a:5e:b5:17:5f:b8:2a:b4:
68:0e:f0:c5:70:b7:34:2e:fb:9e:fb:ed:13:e4:3f:9e:5f:b0:
a6:63:e2:0d:93:cc:23:ad:92:8e:50:96:e5:1d:64:97:7e:3d:
d5:d0:00:4a:22:4a:5d:6a:25:a4:25:03:66:b6:d9:70:4c:84:
0a:3e:39:5f:86:31:12:20:67:c7:84:2d:f0:01:03:27:63:1a:
95:c8:4f:9b:bf:8b:1a:2b:57:ee:a3:0f:f0:33:15:9a:2b:7a:
cb:4c:22:6b:9f:6b:a0:05:fa:d8:83:9f:0c:d4:b3:98:4b:42:
b0:7b:df:7c:80:75:9c:1c:ea:b5:6d:37:48:d1:24:1d:51:be:
7d:ed:51:66:93:37:ed:3a:68:22:b6:7a:c4:e5:b9:b1:86:27:
3e:c2:4f:5d:11:a8:5e:20:75:67:4a:5a:33:96:57:47:62:a1:
24:e3:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:58:11 2026 by rpki-client