This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa
File: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (raw, json)
Hash identifier: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=
Subject key identifier: 7C:D0:11:FC:93:E4:90:2E:3D:D5:85:3E:91:3F:C1:C9:36:08:12:6E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019B7C134F014D17A1E969833566367D7DD5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa
Signing time: Fri 02 Jan 2026 00:19:58 +0000
ROA not before: Fri 02 Jan 2026 00:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 46.34.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:4f:01:4d:17:a1:e9:69:83:35:66:36:7d:7d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 00:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cd011fc93e4902e3dd5853e913fc1c93608126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:51:21:d2:e6:4f:bd:18:ed:1a:28:8c:3d:
55:cc:17:7e:6e:ea:1b:12:e9:66:30:38:29:d6:55:
13:b3:2f:04:d7:2f:9e:de:72:c0:32:cf:9e:05:da:
d3:73:75:f0:ee:d2:97:2a:13:6e:26:d7:4b:a5:2c:
88:e3:3d:57:86:99:7a:5d:bd:19:d4:d2:69:83:fa:
4d:58:0b:97:0b:0b:ac:67:de:72:e8:14:e6:39:7d:
2c:f6:08:d1:da:8b:c6:ac:07:37:47:95:dd:25:31:
4a:07:09:3d:54:ed:32:3e:ad:bc:5c:79:0d:5f:d8:
38:f7:a7:e3:7b:68:6b:1e:1e:af:f0:91:07:9c:fb:
a4:c6:21:1f:0c:e3:f3:5c:76:47:39:73:ba:a4:6d:
f7:a9:68:74:2a:78:09:d5:9c:20:9b:3a:35:18:e4:
f9:d2:a7:09:72:d3:89:d1:18:6f:c2:d0:c4:d1:77:
17:0b:b4:31:5a:a1:63:43:f1:06:fa:25:6c:24:eb:
7f:3f:82:aa:6f:11:da:09:bb:5c:68:f8:29:26:f4:
d4:a7:e0:0f:59:aa:5f:b0:e8:50:4a:bf:ea:1b:90:
11:17:a6:cf:8d:b1:31:bc:7f:16:ea:84:f5:b1:b7:
02:de:ed:e8:68:5b:7b:e8:70:a0:be:81:52:57:4b:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D0:11:FC:93:E4:90:2E:3D:D5:85:3E:91:3F:C1:C9:36:08:12:6E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fNAR_JPkkC491YU-kT_ByTYIEm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.52.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8f:79:47:cc:03:2a:c6:9f:ca:71:e1:f0:4b:ca:26:6c:76:
aa:a0:23:b5:ad:89:ed:b9:82:ba:89:d5:8e:70:94:32:fe:15:
3f:d1:6f:26:b6:70:ff:99:78:92:9c:1c:74:b2:e0:38:7f:df:
3e:43:09:60:57:cc:05:41:7d:7d:02:b0:ba:3f:f3:ae:d8:05:
8f:a9:9d:bc:4b:10:07:91:2c:9a:ee:e7:af:27:d3:d2:87:47:
54:79:7c:5a:5f:9f:8f:38:c2:7b:31:ed:35:a3:b2:8e:1d:aa:
89:63:c2:17:f0:7d:e0:6b:a6:b0:9f:e5:6d:fa:56:69:0f:65:
74:04:49:b0:c6:84:68:de:8f:a7:ee:0f:fb:9b:2c:e7:42:b6:
7b:6b:e5:f1:72:06:06:f4:c8:55:44:36:f2:72:95:39:9d:da:
f8:84:a0:20:56:9d:f2:0f:0e:64:7a:7d:c6:b6:4b:97:5e:66:
b2:09:ff:ac:7d:f2:e1:43:7c:ad:77:fb:41:58:c0:c7:53:f8:
14:61:e1:1f:93:44:da:ec:4e:c8:5d:08:1a:b8:4f:7d:19:19:
ff:8e:d2:1f:c4:1b:66:a5:56:5d:e2:ca:8c:64:c4:9b:9a:b4:
13:67:19:a7:63:4e:9f:52:7d:2b:3e:c3:45:a7:1a:4b:d6:87:
93:07:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:52 2026 by rpki-client