This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa
File: fJGTQ-92RYM4ESVZMma9WElMl1Y.roa (raw, json)
Hash identifier: u4BRew2rcL4+f1DSutDXYgeNYGW2Xyb7Ti04ciTUI4Y=
Subject key identifier: 7C:91:93:43:EF:76:45:83:38:11:25:59:32:66:BD:58:49:4C:97:56
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019B7910C53558ECB97407F6E8DDB94D5121
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa
Signing time: Thu 01 Jan 2026 10:18:20 +0000
ROA not before: Thu 01 Jan 2026 10:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216047
IP address blocks: 2a12:bec0:590::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:c5:35:58:ec:b9:74:07:f6:e8:dd:b9:4d:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 10:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c919343ef764583381125593266bd58494c9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:dc:75:e2:8f:81:8f:a8:6b:95:41:ea:f7:
b0:02:ff:5b:d0:3e:46:82:26:b4:b6:9a:7c:e9:76:
21:b8:88:2f:61:83:83:07:94:9a:40:ac:6b:96:8c:
3b:dc:d6:93:37:85:31:7a:a9:b6:8d:19:85:8a:a3:
97:bc:a7:fa:50:85:4a:82:89:9d:1a:ea:89:2a:39:
44:87:d0:31:e9:51:ce:6d:76:28:43:55:dd:7f:fc:
68:5d:73:79:a8:59:22:27:92:d0:77:72:40:9d:19:
b9:08:9e:23:6c:0a:d7:a2:bc:1a:d1:6f:41:27:a4:
47:f6:e6:9f:d9:4f:df:0a:9e:80:d3:f0:49:50:b5:
a7:79:5a:5a:8f:78:12:94:c6:bd:90:4d:75:10:5a:
10:67:50:11:53:0b:34:e5:ba:71:9f:4e:84:65:91:
1c:dc:48:d7:48:af:de:a5:f5:3b:08:44:84:94:ac:
8d:25:ba:f5:96:56:95:e2:b2:84:52:cc:ac:08:57:
42:e3:b6:7f:d3:90:60:4a:df:c9:c9:58:57:72:b8:
56:77:77:90:37:46:7e:07:a2:1d:e2:31:e0:01:1d:
30:13:6e:8f:5e:68:23:41:0b:d5:e1:77:14:15:ac:
fd:3b:eb:e0:98:6d:96:23:d7:b0:26:38:d4:2e:1f:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:93:43:EF:76:45:83:38:11:25:59:32:66:BD:58:49:4C:97:56
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fJGTQ-92RYM4ESVZMma9WElMl1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:590::/44
Signature Algorithm: sha256WithRSAEncryption
af:78:04:70:54:d3:8d:cd:f2:b2:bd:4d:84:29:fc:ef:0e:af:
4b:45:c8:d3:ad:d2:26:e1:92:e4:da:9a:f1:3a:8e:a6:2f:ca:
12:44:3c:0a:bc:39:e4:2b:f9:f8:2a:30:fa:7a:05:da:f2:01:
6b:53:5d:d2:dc:3c:46:f2:ef:a6:15:b7:e3:fb:d1:b7:b9:6e:
b8:4d:c2:39:26:89:5a:f2:f5:a9:3f:36:c1:d4:96:59:cf:ab:
f7:f6:e7:c9:cd:78:59:dd:8c:af:56:2d:84:9b:37:ab:2d:a5:
a6:15:d8:e4:de:aa:0f:b9:f8:bf:e4:96:f4:2b:28:3e:39:6b:
83:a4:29:22:02:d7:4b:f0:40:c0:7e:2c:79:ee:62:40:69:10:
90:03:65:8a:50:9d:00:5f:81:5d:83:91:f1:b5:2f:1c:a4:31:
7f:24:48:25:ed:eb:77:d3:40:65:e1:77:3f:91:c4:66:53:24:
7e:d8:f9:8e:0d:a5:95:3b:25:fa:c7:6b:d1:c4:2c:de:36:a6:
10:ba:ad:d9:d9:9c:4d:9c:7e:b9:a4:5f:96:e2:93:8b:9e:ae:
38:f2:77:a2:7a:23:e1:e7:c8:e6:c8:df:2a:f2:c1:65:95:42:
be:f5:d0:9b:65:b4:fc:6b:33:67:56:7c:02:96:60:d9:11:68:
ef:39:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:00 2026 by rpki-client