This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/fIl8xxivGUZsaj8kaaW_71inehg.roa
File: fIl8xxivGUZsaj8kaaW_71inehg.roa (raw, json)
Hash identifier: zYHkvAQ/ytlKOUn9y5s0CfOnBXPRV19zcGQTulQeAcg=
Subject key identifier: 7C:89:7C:C7:18:AF:19:46:6C:6A:3F:24:69:A5:BF:EF:58:A7:7A:18
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019B7FF209F96F82B58D27D367F546502568
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/fIl8xxivGUZsaj8kaaW_71inehg.roa
Signing time: Fri 02 Jan 2026 18:22:07 +0000
ROA not before: Fri 02 Jan 2026 18:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43365
IP address blocks: 193.228.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:09:f9:6f:82:b5:8d:27:d3:67:f5:46:50:25:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Jan 2 18:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c897cc718af19466c6a3f2469a5bfef58a77a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:b5:4a:71:74:b2:a8:93:3f:ec:58:76:87:
0a:08:c8:b7:e5:c4:01:35:ba:e2:9a:32:ca:6c:22:
29:ba:7e:47:63:b7:2c:7f:0b:d3:b3:0d:50:43:78:
ba:53:86:75:e7:ea:64:dc:f0:5e:cb:2c:b0:82:47:
8d:de:1e:a1:cd:0b:e8:e6:04:31:32:78:f5:97:59:
2f:d8:b5:b4:92:e7:fb:0c:0b:66:d7:b8:80:58:11:
6f:e1:09:4f:aa:9a:22:57:bd:a9:6b:14:6d:6d:b0:
c9:0e:c9:15:7d:45:9b:fa:01:52:45:ff:d3:5f:c3:
59:6a:5b:9d:a0:9a:c9:39:11:74:87:1e:4f:8c:7e:
3c:e3:52:ec:fe:0f:09:a3:3c:13:3b:e4:66:c8:5b:
ec:b2:d8:88:ac:24:cb:f0:2d:3a:0e:18:0d:9f:5f:
62:c3:4c:6f:0f:da:98:db:e4:e4:5e:71:a1:5c:0b:
f6:55:f3:5f:5e:de:db:64:2e:0e:00:0f:c9:17:0e:
1e:e5:e8:c9:83:19:cc:94:cd:c3:38:3e:30:a3:3f:
bc:0d:bb:3b:96:34:f1:c5:a8:23:6e:fa:a1:e3:3a:
88:d1:3e:14:7f:d0:db:7a:3c:1a:cf:75:a9:ab:46:
c6:bd:bc:12:3b:a4:0c:fc:4d:7a:e2:ed:fc:b8:eb:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:7C:C7:18:AF:19:46:6C:6A:3F:24:69:A5:BF:EF:58:A7:7A:18
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/fIl8xxivGUZsaj8kaaW_71inehg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8a:aa:c4:0c:d2:6c:fe:ec:e9:36:be:5e:d1:ff:29:8c:34:
f3:f1:76:10:36:ca:31:b4:42:03:62:f8:28:86:7c:bc:1a:e5:
a0:0f:36:50:b1:27:17:d6:4a:9a:0f:71:16:5f:cf:98:91:0d:
55:77:ab:1b:0d:3e:f2:b4:60:fe:d5:17:ee:f2:4f:40:ab:0d:
28:a5:69:bd:5f:5b:f3:27:07:17:4b:e9:4e:83:1a:b4:95:ad:
6d:21:0d:89:bf:28:86:b1:8b:02:60:2b:f9:75:f2:68:4e:1b:
56:9e:ea:73:71:a2:2c:61:08:5d:6b:b5:52:9c:c1:9f:ac:27:
6a:35:5b:70:05:1f:79:f1:bb:57:07:6e:69:8c:3a:5d:26:9f:
b3:e3:61:3f:c4:42:74:8a:50:fa:73:93:c2:0e:9a:ba:db:f7:
fc:f0:ad:5a:8e:aa:dc:69:d9:88:ce:fb:9b:cb:6a:b0:4c:8c:
98:6a:2e:d2:c5:62:eb:02:6d:b3:a5:40:11:b7:e3:d9:7f:51:
b4:d5:c6:28:77:d5:23:22:e5:56:cf:be:48:71:6d:6f:27:bb:
da:e1:99:1d:43:e5:0b:83:c1:37:c6:42:7f:49:24:8c:51:b8:
10:dc:da:11:2b:02:fb:ac:c4:33:8c:e7:f1:b6:0d:8e:3a:bf:
2a:21:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:23:48 2026 by rpki-client