This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/R-F3hbGJdOvhvuAeQIMq8EoAnjw.roa
File: R-F3hbGJdOvhvuAeQIMq8EoAnjw.roa (raw, json)
Hash identifier: No6c9/YWn9MVmL5hiJnLaMWWeQF2lOi/cgCUTWRZ78g=
Subject key identifier: 47:E1:77:85:B1:89:74:EB:E1:BE:E0:1E:40:83:2A:F0:4A:00:9E:3C
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 019B76EB263AFE7DE487D7CDF2096E8B2F90
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/R-F3hbGJdOvhvuAeQIMq8EoAnjw.roa
Signing time: Thu 01 Jan 2026 00:18:00 +0000
ROA not before: Thu 01 Jan 2026 00:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35434
IP address blocks: 91.222.212.0/22 maxlen: 22
195.242.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:26:3a:fe:7d:e4:87:d7:cd:f2:09:6e:8b:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jan 1 00:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47e17785b18974ebe1bee01e40832af04a009e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:1d:23:b1:17:86:e7:cc:84:74:ce:a0:47:
29:08:bc:76:79:0e:c5:62:b1:ba:84:f1:fb:7b:52:
f9:33:4b:fc:fc:2c:7b:27:6c:8d:aa:4d:c1:94:5d:
2a:f0:11:8c:6f:e7:6b:e7:85:d3:7d:4a:3f:52:a7:
d8:71:eb:bf:6a:ac:0a:ce:d3:c3:9b:da:bc:d1:1f:
0c:7d:c4:e4:4b:f3:b1:78:6f:a7:b0:96:36:2b:40:
cc:47:53:f4:77:9e:08:b3:fc:2c:8b:2f:5b:cc:86:
d7:6a:4d:f4:f9:89:40:ae:ed:47:23:1c:12:9b:cd:
16:c6:4d:fb:3c:98:7d:73:60:93:2b:20:98:39:73:
bc:0d:78:c5:95:69:02:04:d1:96:98:d7:8f:fd:80:
1c:11:82:54:43:1f:4e:08:1c:40:7b:54:42:57:d6:
16:7d:42:7c:02:eb:ca:86:30:22:8a:98:bb:71:c4:
27:e0:b6:c5:1f:22:31:62:3e:3b:bf:29:f3:6c:8a:
77:3f:c1:c9:2c:4f:d3:1f:c8:b2:56:c9:51:34:85:
0c:bb:52:2b:43:8b:b7:07:66:9f:f2:88:ef:af:cb:
5c:c4:4e:de:db:86:d5:73:3b:d9:b0:c3:73:cb:ad:
bd:94:b4:2e:c7:60:83:1a:45:83:49:d5:b4:2b:ae:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:77:85:B1:89:74:EB:E1:BE:E0:1E:40:83:2A:F0:4A:00:9E:3C
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/R-F3hbGJdOvhvuAeQIMq8EoAnjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.212.0/22
195.242.128.0/23
Signature Algorithm: sha256WithRSAEncryption
06:9d:3c:de:91:49:61:da:5e:f8:aa:64:55:ad:cb:e9:75:33:
a0:34:e1:93:5d:bd:e4:0e:ea:49:db:3f:c2:52:e1:16:d7:46:
fa:f3:7b:f5:b3:01:39:e2:c6:ed:77:a5:fe:28:6d:35:43:da:
f7:a7:30:1f:f5:6f:ac:23:4e:e3:b6:8c:be:02:d2:d9:91:c2:
5a:aa:a3:ed:0b:70:d3:5a:8a:c3:c9:7f:2b:d2:2c:f9:5a:2d:
7e:20:ce:6b:05:43:8e:b6:95:ad:5f:e5:63:87:76:33:6a:2d:
9f:e7:e4:11:3a:09:ab:ed:eb:50:34:97:29:25:2e:98:ea:69:
48:3d:60:9c:89:b3:dd:90:75:d3:f0:f0:5c:21:fc:f9:92:47:
c4:91:5a:b2:bc:f0:dc:ee:6f:0b:74:ff:50:d0:1a:28:3d:2d:
bf:91:4f:ef:79:24:31:bb:17:be:71:fe:4d:12:82:a0:44:70:
c3:a7:44:40:f9:a3:62:6e:c2:60:ca:89:46:fd:a1:e0:bb:e3:
c4:16:84:57:91:31:b4:bd:27:71:9d:4b:c3:d9:05:95:b1:1d:
8c:f7:03:f4:07:68:b3:0c:b4:68:eb:55:37:ef:56:cb:4f:15:
88:0b:72:e1:b1:24:e9:cd:e4:75:b8:e8:b4:33:15:45:6a:67:
99:b4:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:19:27 2026 by rpki-client