This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa
File: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (raw, json)
Hash identifier: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=
Subject key identifier: 17:0E:93:AE:B2:A9:AD:48:47:43:B2:E6:46:0E:F6:82:42:B3:61:FA
Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial: 019B77C75E2549FABDEC72665DF59D715BEE
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa
Signing time: Thu 01 Jan 2026 04:18:33 +0000
ROA not before: Thu 01 Jan 2026 04:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204949
IP address blocks: 91.241.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:5e:25:49:fa:bd:ec:72:66:5d:f5:9d:71:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Validity
Not Before: Jan 1 04:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=170e93aeb2a9ad484743b2e6460ef68242b361fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:fb:4a:3d:6c:72:42:f3:27:46:0f:78:bf:
5a:0f:86:38:87:dd:1c:a3:91:cf:79:64:0d:da:47:
21:ea:24:48:98:b5:f7:07:af:a2:e0:cd:62:10:4f:
38:7e:b8:d9:2d:40:5d:c2:84:ce:6a:5e:66:e3:37:
82:b3:3b:77:06:1e:0d:8c:11:0b:c3:69:9e:04:3d:
9d:9c:f4:63:1f:cb:49:92:04:f5:d9:47:14:ee:9f:
71:eb:22:29:5d:ea:b0:e3:be:7c:42:ee:96:f5:20:
28:0c:32:13:03:25:c2:bc:9a:e0:d5:90:3d:6d:8b:
fc:31:b0:a8:9d:ff:c1:82:85:7b:dd:23:e8:9b:46:
cf:7c:2f:d3:87:a6:87:b9:63:9c:24:1c:03:b0:44:
91:13:ee:b2:76:a3:1a:62:72:48:28:4b:3d:ff:92:
54:18:7b:e1:aa:0a:6e:41:f2:29:08:da:19:1e:20:
11:cc:4d:c4:60:85:30:a8:aa:ce:df:13:7f:78:08:
b4:6d:af:db:b1:3a:32:78:3d:7c:f1:1c:cd:aa:41:
46:31:46:0f:7a:58:29:84:15:84:c5:d0:a6:90:5a:
d5:48:25:9c:7c:85:8a:7f:76:e1:5a:c5:e4:44:f3:
26:ea:5e:79:a0:a4:f8:0e:03:2b:ca:ef:0e:07:4c:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:93:AE:B2:A9:AD:48:47:43:B2:E6:46:0E:F6:82:42:B3:61:FA
X509v3 Authority Key Identifier:
keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.77.0/24
Signature Algorithm: sha256WithRSAEncryption
16:73:b9:26:24:6d:1a:59:22:d9:a5:7a:0a:3c:ce:c7:30:46:
9b:4a:35:4c:30:ae:16:11:4e:6c:3b:0f:14:ad:78:ba:d4:8c:
7f:ca:de:d6:da:3d:c0:37:c3:20:23:28:25:72:17:52:54:fb:
9e:d6:ff:ee:46:a8:d7:15:e7:12:42:18:fe:0f:09:e6:12:af:
a5:2a:e0:e3:e3:03:f1:47:a9:27:16:c4:cf:81:4d:29:90:48:
20:0e:2f:ab:8d:af:2b:2e:22:b8:ca:07:30:8b:b7:64:86:b1:
25:22:0f:47:32:34:2e:2e:dd:8a:c3:08:d7:74:51:b0:6a:fe:
66:78:67:96:32:39:65:87:ce:4b:a9:29:da:b0:e0:3e:ec:a4:
87:0a:e2:82:39:93:59:b5:f4:25:10:32:18:eb:b9:22:3f:e6:
59:94:a7:68:ff:d5:30:d8:0f:4e:24:56:27:4f:d1:14:b9:8f:
68:97:a1:d6:44:b0:23:71:f8:d5:7d:46:7b:4f:4b:de:d4:74:
53:c5:d0:2a:00:c2:97:be:84:1d:ef:75:4f:75:2c:6c:a4:59:
d1:c6:a2:fa:92:97:89:e8:36:68:88:f5:b6:4a:44:03:ba:2f:
be:4a:12:46:dd:43:6c:06:53:6a:90:cc:d0:a1:d3:ed:63:08:
8d:9c:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:02 2026 by rpki-client