This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa
File: 1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa (raw, json)
Hash identifier: dnBqijSF+YPKk6kM0CwG5Q01pI1bTPaR1o5KUYqbpck=
Subject key identifier: FB:ED:6F:8B:F6:21:9B:08:12:87:E2:D4:0C:9B:39:CA:B7:64:E1:05
Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Certificate serial: 019B79ED4BFC58BA3E31FF67836AD5ADB1D6
Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa
Signing time: Thu 01 Jan 2026 14:19:13 +0000
ROA not before: Thu 01 Jan 2026 14:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31032
IP address blocks: 194.246.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:4b:fc:58:ba:3e:31:ff:67:83:6a:d5:ad:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6
Validity
Not Before: Jan 1 14:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbed6f8bf6219b081287e2d40c9b39cab764e105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:04:89:f1:87:dc:3b:8c:72:57:3c:51:d0:
5b:be:94:32:c2:1c:9d:b0:72:b5:b6:85:e7:ec:32:
6b:f2:64:bb:e4:04:b4:9a:0b:c6:6b:ca:92:ab:7e:
3e:8a:3e:42:83:6d:b8:7b:dd:96:36:81:45:d7:c6:
7e:22:3f:26:0a:8e:69:b2:78:bc:31:d1:d5:74:7d:
7c:12:80:1b:91:02:01:19:45:34:dc:a5:92:3c:58:
77:3f:84:34:ad:4c:ac:9f:c4:fc:e2:5b:cd:9c:ff:
e0:c7:49:1a:3c:ab:ef:9f:dc:bf:8e:39:cf:5e:c6:
6b:df:ae:a5:4c:31:f0:80:7b:52:59:d6:00:b0:e7:
d1:a5:49:33:4e:1c:e1:d7:4e:3d:51:7a:9c:8a:1a:
62:d6:90:fa:41:e7:2c:ee:f6:c9:37:1d:75:9a:d4:
01:91:0d:f9:bf:19:c9:e9:df:a3:f9:e2:19:e8:41:
33:ce:05:cb:2b:02:c1:d8:d9:e2:4d:80:d5:a2:e4:
af:d5:6e:e1:6a:ba:23:d7:fd:46:fb:3d:bf:d1:0d:
0b:91:70:c1:2c:ee:de:fd:8e:ca:ec:36:83:a6:31:
fd:69:97:82:54:74:07:b1:f4:4e:2d:cc:ec:24:c6:
73:01:1b:0f:ca:68:8b:60:ab:42:3c:dc:0a:47:ed:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:ED:6F:8B:F6:21:9B:08:12:87:E2:D4:0C:9B:39:CA:B7:64:E1:05
X509v3 Authority Key Identifier:
keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.124.0/23
Signature Algorithm: sha256WithRSAEncryption
51:92:40:73:75:11:cc:c9:54:5e:b2:a2:a8:21:36:0c:a9:19:
23:44:84:4b:24:a9:58:c5:02:d1:5f:c7:75:33:2e:5d:69:84:
5e:c0:73:6c:06:51:d7:63:97:7a:1a:c6:d0:44:9e:d2:c0:9e:
77:65:68:5d:08:d3:5e:99:9d:d1:31:35:da:28:0a:0c:ec:26:
a4:d4:e8:31:68:1a:42:a0:a5:9a:c5:a9:0a:f1:d7:74:19:a0:
7b:de:69:d6:f2:4f:97:db:37:e1:d2:b0:48:c4:2d:cc:64:e4:
e5:a8:4e:b8:1b:2a:aa:a0:30:b2:fb:cf:51:f1:57:e9:11:ca:
59:ba:a6:50:64:c9:cd:d4:c1:33:77:2e:6e:7f:38:fe:f8:e1:
74:68:2b:8b:9d:a2:df:9e:20:6f:5f:23:69:86:b8:1d:5d:00:
f7:9e:52:46:d2:5d:c8:8d:90:b3:fc:46:3c:3a:33:5f:be:a7:
a9:6a:36:43:61:d1:df:64:d7:ec:8a:b1:28:17:42:5d:0b:fb:
b6:74:1f:80:d4:3b:0c:94:00:87:3f:3d:d7:47:74:0d:e8:f3:
41:d6:30:7f:51:e5:72:4a:85:c9:d1:4c:54:8d:94:16:64:52:
0c:ee:24:52:b0:b6:fb:76:89:c5:6a:e0:06:57:41:6c:ec:7f:
05:43:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:44 2026 by rpki-client