This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa
File: FLcD5GM3w38Bkf6-ofdUUggipDY.roa (raw, json)
Hash identifier: j629CGaUVrsk4spu3DmpUrCgmxrvYlncEchc9Bf2lnA=
Subject key identifier: 14:B7:03:E4:63:37:C3:7F:01:91:FE:BE:A1:F7:54:52:08:22:A4:36
Certificate issuer: /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial: 019B77587B49175C012A43B1B54A4ACAD265
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa
Signing time: Thu 01 Jan 2026 02:17:26 +0000
ROA not before: Thu 01 Jan 2026 02:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212979
IP address blocks: 195.69.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:7b:49:17:5c:01:2a:43:b1:b5:4a:4a:ca:d2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
Validity
Not Before: Jan 1 02:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14b703e46337c37f0191febea1f754520822a436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:b3:51:33:cf:18:64:fb:b2:3d:90:59:3e:
c5:65:48:cc:c4:e8:06:c9:04:1f:1c:ec:48:26:eb:
ae:47:0c:c2:cf:46:6d:2f:47:d8:82:83:b7:45:1a:
3c:06:4e:2f:ea:69:83:36:88:3b:de:c9:d6:d8:67:
b0:5d:da:af:d1:2b:48:68:6e:f0:12:11:60:25:20:
d8:68:d3:81:12:b5:11:54:91:f7:96:51:3b:1e:bd:
1d:6a:8c:d3:94:e6:dd:1b:f7:83:2b:4d:9a:f6:6a:
e4:12:70:77:36:85:a1:8f:e5:53:d7:69:73:7d:84:
25:7a:3d:6c:c9:77:3a:78:d7:40:3f:3b:7d:3d:07:
64:58:ae:ef:3e:05:ab:24:e7:b4:28:4e:9d:fd:55:
02:5e:3e:13:7e:2a:16:ff:6b:81:2b:f8:98:a0:93:
90:40:c3:93:e1:7a:12:4a:f8:a1:88:3d:e4:58:b0:
c2:89:5a:e5:57:dc:46:cf:96:56:b9:c0:4f:84:06:
8e:d4:a1:5b:42:91:27:01:8d:d3:1d:1c:0e:e2:fa:
d7:65:bd:8d:ea:d3:b3:e2:c0:78:cf:8b:97:98:bd:
77:b2:f9:41:2d:d3:7d:9c:a8:a5:6a:a6:60:a4:56:
48:d6:72:cd:f5:39:dd:2b:a5:aa:75:cb:94:2f:ff:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:03:E4:63:37:C3:7F:01:91:FE:BE:A1:F7:54:52:08:22:A4:36
X509v3 Authority Key Identifier:
keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/FLcD5GM3w38Bkf6-ofdUUggipDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ab:7c:52:82:60:11:06:2e:44:74:97:64:f2:7f:5a:d5:09:
dc:9b:44:94:e0:ac:f9:8d:68:0a:da:3d:36:cc:6c:f3:26:a7:
05:06:93:10:33:57:25:84:9e:f7:01:f6:f6:ab:4c:6b:09:05:
9c:99:03:06:ef:3f:18:10:ce:05:c2:47:06:e7:91:e7:66:6c:
1b:2d:ad:86:74:c1:af:de:a8:09:80:0e:14:36:07:7b:ec:72:
85:09:0d:7a:60:e1:e9:63:19:4a:f0:e9:f9:f5:33:de:08:ae:
32:55:3e:f8:49:73:eb:74:02:8a:0c:05:fd:e8:a4:fb:9d:20:
6b:f5:13:de:3e:da:3a:a0:66:56:16:ee:62:56:ad:16:03:91:
0b:c5:c5:b0:86:13:3a:5f:fb:c2:64:f9:0d:e4:32:69:4d:67:
c5:76:a0:d6:09:74:d5:f4:f5:93:0f:a3:ec:3c:4a:b9:b1:d1:
74:5d:ab:08:c5:44:85:58:e5:57:d0:85:b1:6c:a4:60:8b:b3:
c3:e9:bf:19:2d:3c:41:7b:e2:1a:a8:b3:f7:53:00:ae:f7:c3:
8d:a0:52:3a:b9:68:61:f2:27:55:82:f4:8a:95:99:99:15:4c:
76:76:8d:f4:88:d6:2a:55:db:34:dc:e0:12:6a:6e:d7:53:04:
bf:27:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:38 2026 by rpki-client