This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FP32CXa4bJkrAzn-mUypAVuTRcU.roa
File: FP32CXa4bJkrAzn-mUypAVuTRcU.roa (raw, json)
Hash identifier: 2l89ddYZWse7SniAD+u1r0X1fyl4WgZC/mow8ll5aKY=
Subject key identifier: 14:FD:F6:09:76:B8:6C:99:2B:03:39:FE:99:4C:A9:01:5B:93:45:C5
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019B77C726593952EA8FFD10BB685D5FB463
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FP32CXa4bJkrAzn-mUypAVuTRcU.roa
Signing time: Thu 01 Jan 2026 04:18:18 +0000
ROA not before: Thu 01 Jan 2026 04:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8323
IP address blocks: 185.92.51.0/24 maxlen: 24
193.193.64.0/19 maxlen: 19
195.150.0.0/16 maxlen: 16
195.150.0.0/17 maxlen: 17
195.150.128.0/18 maxlen: 18
2001:6d8::/29 maxlen: 29
2001:6d8::/32 maxlen: 32
2001:6df::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:26:59:39:52:ea:8f:fd:10:bb:68:5d:5f:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 04:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14fdf60976b86c992b0339fe994ca9015b9345c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:96:7a:b9:4e:26:d7:a3:e9:ff:f8:a5:d1:
b8:fc:f3:68:e7:e8:fe:e8:93:dc:64:19:37:51:35:
45:36:5d:08:fe:2e:93:d1:9a:36:f8:60:15:78:a8:
ee:65:df:8f:06:69:09:8e:ed:9b:14:30:fc:e8:0b:
f8:cb:f3:64:63:14:0d:1e:fa:35:22:29:6e:0a:23:
7a:d6:f7:0f:5a:c5:24:ae:34:73:c4:4a:5e:ca:83:
9d:b4:1e:a8:d4:a3:d9:bf:fc:d8:de:71:ed:f2:c3:
0c:e3:f5:66:6d:2c:f1:10:9c:c4:d5:d2:70:40:35:
19:d4:f6:95:a0:c5:ef:f5:ec:1e:67:9e:a3:ee:04:
30:d0:af:d4:a6:3e:76:91:f5:ae:98:e5:c7:67:79:
43:1c:d3:0c:4b:99:f3:ef:0a:0f:e1:35:a4:a6:a6:
8b:ba:73:a8:2e:90:85:12:7b:aa:1e:a9:5b:23:69:
fe:14:c3:68:e6:ad:da:ef:64:2a:a3:ab:9b:8d:0f:
5d:c0:4b:69:cb:54:ec:39:47:8a:7f:cc:73:8c:76:
7a:80:f6:66:b9:27:7a:90:48:6f:25:a7:bd:98:d2:
44:b9:af:dd:19:22:a0:f7:e8:f5:8e:83:6b:2b:bb:
ee:2a:c2:8b:28:61:84:d9:bb:46:03:65:86:d0:02:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FD:F6:09:76:B8:6C:99:2B:03:39:FE:99:4C:A9:01:5B:93:45:C5
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FP32CXa4bJkrAzn-mUypAVuTRcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.51.0/24
193.193.64.0/19
195.150.0.0/16
IPv6:
2001:6d8::/29
Signature Algorithm: sha256WithRSAEncryption
2a:d2:67:22:dd:b1:a0:a0:bf:f0:f7:6c:76:0b:8b:ce:17:55:
76:27:c1:1b:19:a5:b3:b3:51:4e:27:d8:d3:11:69:a7:ba:a7:
71:4b:03:a7:1c:81:f5:85:c5:49:b5:70:59:c0:a9:af:90:21:
16:13:44:1f:56:96:7b:60:22:31:5e:22:60:42:fb:fc:38:29:
41:54:b1:fe:0d:01:ed:49:d8:6d:6b:d0:17:25:75:a7:67:fa:
e0:fc:1f:7a:8f:c0:18:68:f4:f4:f1:4b:c0:a4:7b:6d:96:38:
ef:68:9f:3e:ac:18:3a:a1:cb:66:a3:2d:fc:3b:72:03:0d:67:
6d:36:39:78:bf:ec:4f:76:fd:be:bf:b9:47:c4:14:0b:53:db:
ce:56:f8:c8:01:55:53:3a:eb:e8:21:75:79:bb:94:c3:12:b2:
d4:45:12:94:6a:8e:84:78:7f:65:8a:e6:37:14:eb:ec:91:90:
6c:2a:38:f1:ee:e1:ee:f2:c7:c0:47:19:a4:82:97:f6:f7:aa:
cb:0d:72:0f:7c:ed:b6:96:b8:cc:1a:35:fb:65:8d:91:69:7a:
dc:5e:83:fb:7c:c8:74:e4:93:0f:f8:ea:b0:13:94:58:27:43:
a6:84:6f:ca:a9:d0:8f:41:ec:15:c6:40:37:27:02:87:64:f2:
d3:2c:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:51 2026 by rpki-client