This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/fVaeDUKHaAopAkHomZQbYf4AJtM.roa
File: fVaeDUKHaAopAkHomZQbYf4AJtM.roa (raw, json)
Hash identifier: T2dAAHWB9yxMjJS01ysxnRUtaHL32j7N9lv//iEs+KE=
Subject key identifier: 7D:56:9E:0D:42:87:68:0A:29:02:41:E8:99:94:1B:61:FE:00:26:D3
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019B797E0BFC716A8E34AE6CD6CB46020418
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/fVaeDUKHaAopAkHomZQbYf4AJtM.roa
Signing time: Thu 01 Jan 2026 12:17:42 +0000
ROA not before: Thu 01 Jan 2026 12:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201403
IP address blocks: 185.49.50.0/24 maxlen: 24
185.49.51.0/24 maxlen: 24
2a04:b700:185d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:0b:fc:71:6a:8e:34:ae:6c:d6:cb:46:02:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 1 12:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d569e0d4287680a290241e899941b61fe0026d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:0c:31:27:e7:ee:e4:a9:ce:6a:29:b7:c0:
59:8f:89:36:ca:59:ea:90:4b:2c:8a:fd:cb:44:dc:
7a:6b:93:00:f2:ec:83:7a:27:71:b6:42:24:f1:7b:
50:88:ac:7b:76:4a:11:23:13:51:ac:af:2d:3e:15:
54:21:8f:91:51:7e:01:39:29:48:67:07:4e:92:99:
33:39:d3:d5:69:d6:97:e4:aa:9c:2a:ec:56:b2:3e:
64:10:47:b1:69:a9:fa:6a:66:45:75:91:65:d4:8d:
35:4e:a3:0f:1a:ee:3d:4b:80:d1:47:69:a0:f8:24:
11:b1:b8:3a:ed:77:94:83:e0:42:45:59:75:30:48:
c8:f3:e2:10:7b:ca:fe:43:3e:0d:44:df:5b:89:22:
16:c1:fd:ba:46:4a:07:d3:88:91:27:aa:4c:0e:92:
6c:ad:e8:ae:54:f0:08:aa:44:4b:53:23:d6:de:79:
05:3c:53:09:06:02:3e:25:df:61:78:cd:38:a5:bf:
a9:b1:5c:a6:88:a3:1b:0c:8f:c1:32:57:f6:24:e3:
0b:64:0e:bd:bb:73:13:e7:74:7d:ef:53:9d:b7:16:
85:34:7a:b9:2e:b0:e4:b3:af:27:e4:9d:cf:63:4c:
60:ec:4b:9c:48:78:01:ae:c3:c7:ad:c6:e0:5a:e3:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:9E:0D:42:87:68:0A:29:02:41:E8:99:94:1B:61:FE:00:26:D3
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/fVaeDUKHaAopAkHomZQbYf4AJtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.50.0/23
IPv6:
2a04:b700:185d::/48
Signature Algorithm: sha256WithRSAEncryption
1b:56:2f:9d:89:59:e6:9f:1e:96:68:88:83:38:ab:8f:54:d0:
20:ef:d3:62:83:01:d2:89:94:06:dd:86:ec:06:c0:7d:8b:d5:
80:a4:69:fa:0c:7e:0e:6c:ff:4c:ae:2c:07:48:fb:68:94:40:
27:d7:64:ca:87:fc:67:87:a8:d4:90:e0:af:2b:4e:7b:11:4e:
40:24:2c:3b:3b:10:cd:e6:a1:0b:2c:05:c1:a9:9c:0b:c5:85:
cc:72:72:e5:75:ce:06:fe:c8:a5:21:55:de:1b:2d:d9:02:ab:
a6:a7:99:c2:e4:f2:f9:1d:a5:b1:f8:f4:19:e8:bd:aa:55:d1:
49:d9:8c:68:00:d1:64:57:d8:21:ec:e1:b5:bf:89:8a:98:a7:
c9:fe:ef:b8:22:a0:cf:28:47:f2:d0:1a:05:a6:aa:af:08:ef:
ec:8a:53:03:e1:08:0a:0a:31:3f:53:71:f5:98:b7:a1:be:84:
24:0b:e7:dc:67:f9:e6:f6:b8:14:05:64:1c:a1:f9:a3:7c:15:
4e:b8:1c:b3:04:00:f2:9d:5f:b9:f7:6b:1e:3e:83:54:f1:1d:
1e:bc:f1:d5:9c:91:85:3b:b4:d0:41:1c:40:d7:45:42:b8:44:
a5:37:9b:90:b6:8f:a0:bf:2c:75:8f:a0:7c:25:cc:12:81:31:
f7:9f:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:33 2026 by rpki-client