This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/FUuTK2fFAsqRcCumhRtIZo91RHY.roa
File: FUuTK2fFAsqRcCumhRtIZo91RHY.roa (raw, json)
Hash identifier: sL7JcIGdywrGzv3v04y8pkGzCLFmkDsGBJu4wKma/MI=
Subject key identifier: 15:4B:93:2B:67:C5:02:CA:91:70:2B:A6:85:1B:48:66:8F:75:44:76
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019B77C6E6279BE90288BDC4330F6EF9EA46
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/FUuTK2fFAsqRcCumhRtIZo91RHY.roa
Signing time: Thu 01 Jan 2026 04:18:02 +0000
ROA not before: Thu 01 Jan 2026 04:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 147.185.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:e6:27:9b:e9:02:88:bd:c4:33:0f:6e:f9:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 1 04:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=154b932b67c502ca91702ba6851b48668f754476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:01:5d:60:66:f2:09:81:f5:90:f2:e6:f0:
d6:13:89:57:15:f3:76:bc:52:f3:e8:2c:93:4d:98:
9c:9c:23:8a:9c:8e:36:90:06:26:33:7b:0c:03:9d:
c6:07:47:6c:2f:ba:c8:8b:d5:9c:b4:9e:9c:f8:8a:
99:1a:e9:b9:c3:a9:d1:6b:41:3d:ab:ec:59:63:09:
a9:a0:67:bf:72:ca:1b:83:57:d8:ea:1e:88:77:65:
95:e5:f8:66:c8:88:cd:0f:17:c3:1b:70:9c:04:c7:
3f:0c:fa:92:92:dc:1b:da:41:25:42:5d:82:5f:ea:
f3:69:ea:8a:b6:ae:8b:f6:cd:6b:5c:01:92:80:63:
3b:35:4d:c7:e9:65:07:b1:9f:4f:9b:07:33:9c:c0:
54:69:32:fe:16:73:c1:57:f8:df:87:ff:79:3d:0f:
57:04:e5:56:06:22:04:3f:9e:9a:77:ed:63:b3:82:
14:ee:56:a1:4f:ea:f5:a4:96:ef:8d:f9:71:43:5d:
fd:cc:68:6e:89:29:36:73:28:7e:bc:8e:60:2c:14:
b6:de:d5:06:4d:44:17:9e:59:58:5e:b8:6b:84:b5:
a9:e4:16:ab:10:74:a9:16:ff:30:28:94:28:d4:ab:
65:6b:2f:89:ea:44:78:e7:4c:2d:2b:78:36:be:bf:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:93:2B:67:C5:02:CA:91:70:2B:A6:85:1B:48:66:8F:75:44:76
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/FUuTK2fFAsqRcCumhRtIZo91RHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.107.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7a:f1:bc:99:90:15:43:7a:c0:b7:c8:a1:8b:8c:30:94:69:
62:e1:c4:13:fa:d2:56:73:75:48:cf:12:39:ed:ff:11:b9:21:
41:aa:76:15:fe:9e:ab:5f:bd:fa:c3:88:ec:d6:46:8d:c9:9a:
96:83:0b:75:cb:2f:40:5a:64:a0:b2:31:3b:58:10:1e:09:2f:
ef:06:71:17:3b:18:4b:e4:61:11:c0:b3:bc:72:cd:d9:62:63:
e5:cd:fb:24:a3:a8:73:c0:6c:10:c4:d0:4b:a3:81:2c:b0:4c:
23:79:25:d6:8f:ba:01:1b:75:a7:4c:6e:01:d7:99:30:82:3b:
44:ee:41:08:fd:ac:a1:33:7d:4e:e9:18:12:e1:d5:d4:5b:2c:
6e:b5:cb:4f:03:36:d9:fb:f6:47:ab:e0:da:cc:6e:15:53:55:
3a:56:53:5c:0b:dc:df:d9:58:5e:72:2d:61:74:e7:8b:18:d4:
72:0d:be:23:1e:53:2c:c4:84:56:a7:b0:ea:6b:25:f3:21:1a:
0e:3a:1b:98:dc:22:7e:55:6b:b3:cd:69:75:49:34:d9:5f:0a:
3b:b4:22:d3:3a:c2:e8:15:cc:79:f4:2d:b0:eb:dd:ee:39:af:
36:d1:37:84:26:0d:c7:95:78:a5:33:83:0f:3a:e9:ef:a9:44:
c1:6c:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:24:42 2026 by rpki-client