This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-F6aMEn1F373pcV8gW2hr9hzXq0.roa
File: 1-F6aMEn1F373pcV8gW2hr9hzXq0.roa (raw, json)
Hash identifier: LsI+RgquZU/tyWHNIXJn1vGL0r9mfKMYrcj6JypNP0g=
Subject key identifier: F8:5E:9A:30:49:F5:17:7E:F7:A5:C5:7C:81:6D:A1:AF:D8:73:5E:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB9D04FAF700564066CD696F8C29D2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-F6aMEn1F373pcV8gW2hr9hzXq0.roa
Signing time: Fri 02 Jan 2026 08:20:54 +0000
ROA not before: Fri 02 Jan 2026 08:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 151.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:9d:04:fa:f7:00:56:40:66:cd:69:6f:8c:29:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f85e9a3049f5177ef7a5c57c816da1afd8735ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:73:c5:c3:e2:e6:91:1c:05:c4:c2:91:b3:
5c:09:e5:07:cd:29:d6:64:07:4e:a5:07:9e:1d:14:
40:f2:b6:d3:65:57:39:b7:16:8e:85:34:09:35:64:
80:1a:29:2d:61:c0:80:40:89:b2:db:c8:7f:7e:55:
62:93:7d:60:59:a0:97:0f:70:64:89:c4:a5:b5:bc:
ca:36:54:49:39:85:29:91:50:9f:1d:33:3c:e3:a4:
ab:d4:aa:82:5d:df:54:1e:99:8e:0c:93:a6:1c:11:
fa:2e:10:12:9a:8f:23:b2:52:ac:72:72:41:42:ce:
f4:ff:ef:6c:26:c1:6e:31:bd:c7:2e:5b:9a:78:29:
3c:10:ef:f3:45:6c:ea:9e:0c:ec:2b:00:26:86:5b:
a3:83:6c:32:ed:39:10:0b:ee:6e:d4:0b:be:42:c6:
bb:42:3a:4b:c2:4d:74:ee:f7:fc:29:bf:3d:72:f7:
87:47:bf:0b:0a:b4:f8:ba:fa:b1:1f:9e:49:e9:65:
d2:71:ab:12:23:11:50:a2:5c:56:ea:68:e8:fa:ae:
ea:6d:62:11:d4:52:64:72:5a:2f:60:ca:06:0d:a3:
9b:1d:a4:5f:01:78:19:cf:cf:10:7a:ed:db:e9:0b:
7b:69:3a:2e:5f:4a:2e:c9:be:99:6d:83:b7:f9:0c:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5E:9A:30:49:F5:17:7E:F7:A5:C5:7C:81:6D:A1:AF:D8:73:5E:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-F6aMEn1F373pcV8gW2hr9hzXq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b1:8a:c4:ec:7e:f1:92:55:d5:41:3e:50:36:69:b3:91:bd:
5e:69:6c:02:78:b2:5e:97:5a:58:0f:79:46:cd:21:70:77:48:
90:c9:c9:8b:96:3c:33:d5:01:25:9c:04:45:42:61:3b:3f:73:
98:e1:07:54:a9:98:37:70:a2:eb:65:3d:56:3b:40:31:e3:e1:
02:ee:66:ed:7e:cf:34:1b:3f:90:1a:8c:0a:d0:39:20:4b:19:
a0:35:8b:f0:c8:c4:24:fc:07:51:48:84:b8:a7:1a:c1:16:85:
31:9a:80:48:a2:a6:40:9a:d3:61:9d:d6:5c:81:c7:c7:1d:3d:
e5:82:b1:35:f9:3b:93:29:f5:f3:2d:14:43:36:b8:b8:cb:59:
c8:8b:58:5b:4b:10:17:a5:90:01:ae:ab:3a:48:ed:04:c1:ae:
b9:21:ee:32:c8:e8:9a:b4:6a:38:66:5b:68:45:26:8e:14:40:
53:22:96:9e:a1:cb:c6:e2:c5:a9:49:0e:0c:d7:98:23:5d:0f:
3e:f2:64:55:91:25:98:a0:72:7c:e2:0f:f0:12:27:28:f8:0f:
de:f8:61:f8:0c:85:87:f7:72:48:60:d3:05:7e:a7:b5:a0:d9:
67:c0:90:0a:19:8b:fc:52:54:7a:9a:83:fb:96:46:1e:b5:7f:
7c:44:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:58 2026 by rpki-client