This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa
File: fWenl3kqzuOILIVKIdWwg1EHblE.roa (raw, json)
Hash identifier: SyW/75QuUgvbvHODz4azAnY4VnHqw/B+sNi/eNwJluA=
Subject key identifier: 7D:67:A7:97:79:2A:CE:E3:88:2C:85:4A:21:D5:B0:83:51:07:6E:51
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019B76EAD001B7E7284E36375D8450A831A5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa
Signing time: Thu 01 Jan 2026 00:17:38 +0000
ROA not before: Thu 01 Jan 2026 00:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207633
IP address blocks: 5.180.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:d0:01:b7:e7:28:4e:36:37:5d:84:50:a8:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 00:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d67a797792acee3882c854a21d5b08351076e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:92:08:83:9a:70:76:78:c8:95:da:af:9a:
03:29:45:6e:b4:9d:51:54:56:9f:5e:25:96:d7:45:
17:65:c3:64:98:2d:07:77:0d:4f:26:1c:64:b7:87:
68:be:42:e0:26:8f:c9:4e:b7:32:f7:63:a1:90:45:
46:b3:6c:9c:c4:9e:59:b2:cc:6a:8c:87:93:d8:b7:
3d:ec:37:40:f9:93:c5:fa:1a:33:23:7d:17:2a:47:
ed:56:1d:20:57:96:bc:69:c4:85:53:1f:00:11:9a:
ba:5d:f5:93:63:91:77:b9:92:5e:1f:74:95:c2:0f:
04:b6:9a:e7:15:5b:35:30:e7:6d:a2:e8:a1:32:1f:
19:2b:87:3b:96:44:5d:59:e6:9e:e6:79:68:b2:71:
d9:0a:6a:01:b1:c5:2a:07:32:8c:6f:1b:57:3b:a6:
99:22:e2:a9:e0:cb:7a:39:c1:1f:17:8b:ad:92:21:
1a:a5:aa:fe:9e:69:d4:6a:b8:1f:33:4b:61:a5:cc:
64:4f:73:cf:86:df:cd:6b:3d:5c:95:69:c3:90:d7:
fd:3c:79:3c:14:b6:a8:51:8c:e1:a4:89:bf:ea:03:
3d:2b:c6:f0:8d:c2:4a:55:c5:72:0e:ec:3c:d6:2c:
52:40:ce:c9:df:50:b9:fd:77:15:11:50:94:0f:a7:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:A7:97:79:2A:CE:E3:88:2C:85:4A:21:D5:B0:83:51:07:6E:51
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c9:c9:4e:71:80:49:ed:6c:71:05:e6:92:3d:8c:83:35:32:
ee:48:51:1b:e8:92:5c:21:18:20:44:8c:01:f7:ad:25:08:22:
14:a1:48:00:c2:cb:7a:9e:fb:64:b7:fc:45:a9:08:10:50:f6:
aa:d6:be:2e:3e:49:21:0d:53:22:fe:3a:ac:26:4d:b9:dd:46:
43:5f:0f:18:10:33:91:40:d1:b8:85:b3:03:93:38:2f:2b:89:
99:69:f0:a9:72:5d:4a:9a:45:c3:2c:4c:57:c2:cd:28:5f:89:
bb:9d:87:ad:d2:c8:b4:2d:e3:19:d5:ad:d8:25:6a:d5:71:f2:
46:c9:03:b4:85:c6:0d:b4:74:80:af:dc:c7:a6:95:0c:77:20:
18:30:b1:d2:e8:f1:f1:81:a2:6e:89:fb:35:9b:09:94:54:88:
a3:ce:66:ca:fa:5b:d0:5c:d4:3d:73:70:a8:d8:75:da:ff:12:
3f:38:8b:f0:5b:97:57:55:14:32:d6:1c:3a:42:3a:9f:57:5e:
06:db:f5:69:68:bf:05:93:6b:0c:d6:65:4d:c6:fc:92:fb:e1:
bc:f2:ab:b8:b8:57:7d:0b:3c:40:43:73:ad:db:c2:12:7e:1a:
9f:11:14:3f:23:03:d0:f0:e9:23:ad:96:5e:18:14:dd:9d:0a:
a9:59:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:40 2026 by rpki-client