This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fERV_JWJtZ06djuribfR-EanimI.roa
File: fERV_JWJtZ06djuribfR-EanimI.roa (raw, json)
Hash identifier: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=
Subject key identifier: 7C:44:55:FC:95:89:B5:9D:3A:76:3B:AB:89:B7:D1:F8:46:A7:8A:62
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019B7E37ED2D2A2E6083A793CB60FFB64EE1
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fERV_JWJtZ06djuribfR-EanimI.roa
Signing time: Fri 02 Jan 2026 10:19:12 +0000
ROA not before: Fri 02 Jan 2026 10:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60134
IP address blocks: 45.147.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:ed:2d:2a:2e:60:83:a7:93:cb:60:ff:b6:4e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 2 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c4455fc9589b59d3a763bab89b7d1f846a78a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:7d:74:b7:34:3f:23:2f:ee:9a:03:8d:94:
36:96:e5:ae:37:eb:3b:d8:8b:26:56:ba:a5:dc:c9:
60:a3:54:52:a5:68:fd:d1:a1:7e:82:87:f9:d4:b1:
27:f8:c6:5e:53:3b:35:c7:8e:08:33:59:10:ce:ce:
93:ec:f3:36:62:2e:e3:95:f6:12:ed:7e:d7:02:21:
a7:38:f9:39:ac:33:0a:16:bf:22:86:eb:ec:cc:b1:
6e:a6:c8:ea:06:91:36:a4:8c:c9:3e:4b:5a:8f:70:
15:42:8a:d0:e8:5c:69:59:72:d1:5e:ca:bd:9d:33:
b3:4d:db:64:1d:89:14:d7:99:17:4d:5f:8f:d4:33:
4d:f1:bd:d7:2f:60:2c:b8:27:fe:32:c4:c4:ca:dd:
c5:55:b4:40:c0:a8:e3:57:21:25:06:66:1a:1c:aa:
ed:05:f5:77:8e:f1:23:01:7c:09:7e:50:6e:2b:b5:
9c:83:c1:ca:fc:eb:ac:99:91:3a:79:9d:49:44:ae:
de:85:32:4c:bc:df:4c:af:b9:a2:7c:61:f7:32:ae:
ba:90:b0:98:91:fa:0d:19:ad:46:80:90:c2:a5:8a:
6b:b4:0e:5a:6d:67:6c:fe:96:a0:2a:73:3a:e8:53:
22:ed:7a:0e:5f:32:41:c1:2c:99:82:00:75:fa:ee:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:55:FC:95:89:B5:9D:3A:76:3B:AB:89:B7:D1:F8:46:A7:8A:62
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/fERV_JWJtZ06djuribfR-EanimI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:36:b5:8d:42:7f:8b:3c:71:aa:d5:17:91:4e:ea:40:55:b4:
9a:fd:05:73:73:be:51:2e:da:4e:3d:83:88:1f:ab:e8:99:25:
45:3a:7e:f6:59:aa:5e:df:29:c8:96:c9:72:c5:00:f7:51:39:
d8:10:cc:55:17:e7:59:6b:06:a7:c8:68:bb:5c:56:3e:cc:d8:
2e:cc:a4:f7:ff:cb:d3:32:34:94:b5:ca:db:c3:2d:8e:8c:c5:
b7:de:dd:de:ab:3b:f4:d2:66:69:63:93:f2:f6:51:8a:a9:26:
16:a2:c4:1f:b8:5c:3d:5c:5d:68:fc:e1:28:69:fd:dc:40:11:
b6:2b:16:73:cf:fd:37:63:97:5e:d8:9f:bd:dd:c1:09:0b:55:
5b:21:63:a6:21:97:77:50:97:f3:bf:4f:a0:82:3f:39:ca:24:
df:89:09:bc:e9:e4:76:15:a2:7b:89:0b:96:dc:d7:cd:4a:4f:
86:89:7d:06:96:15:fe:d8:9a:99:42:e6:29:ef:6a:69:ba:66:
cc:cf:69:80:f6:b8:77:ad:e8:e8:73:e1:71:9f:3c:5c:e1:9d:
44:58:bf:51:fe:40:2e:d2:9d:42:21:cd:8a:19:b8:31:ad:48:
05:aa:0f:c1:27:bd:e1:35:66:4b:77:07:58:32:75:29:48:d5:
c1:0d:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:28:43 2026 by rpki-client