This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/fyETRmi1CxGmkmyYB5hpA2HK0oo.roa
File: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (raw, json)
Hash identifier: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=
Subject key identifier: 7F:21:13:46:68:B5:0B:11:A6:92:6C:98:07:98:69:03:61:CA:D2:8A
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019B78A321AAC6B370DA9EE93AA91BCEC746
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/fyETRmi1CxGmkmyYB5hpA2HK0oo.roa
Signing time: Thu 01 Jan 2026 08:18:35 +0000
ROA not before: Thu 01 Jan 2026 08:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12757
IP address blocks: 176.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:21:aa:c6:b3:70:da:9e:e9:3a:a9:1b:ce:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jan 1 08:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f21134668b50b11a6926c980798690361cad28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:39:f1:7b:ae:d1:5f:6c:9a:b1:71:41:2c:
48:f2:c8:41:91:86:af:a8:d5:55:70:50:d7:08:17:
c5:a2:3d:61:fd:84:38:17:f6:16:13:be:56:5d:9e:
7f:f4:90:02:b9:54:af:4b:e4:ae:5b:46:28:08:3b:
5e:08:a6:d8:a9:ea:1a:e0:2e:69:c5:51:2e:cc:37:
dc:a2:06:d7:17:a6:cb:c6:2d:58:d5:cc:e3:d5:26:
ea:ae:5e:ed:e7:e5:fb:79:22:67:ac:4c:0b:ef:01:
c2:25:f1:49:96:f8:6c:6e:cc:8f:3b:aa:5c:8e:ce:
47:89:eb:d3:2f:5d:65:05:9d:7d:76:29:ce:13:08:
71:49:2d:df:a8:a3:3c:76:40:7b:98:69:d4:d0:29:
6b:ff:a1:5d:00:a0:55:fa:79:12:59:8f:27:80:b4:
61:16:3f:30:ad:ef:3b:c6:21:77:45:04:5d:5d:65:
e7:de:6a:78:70:55:dc:2b:ca:d8:44:a7:f3:2e:9e:
af:d7:5b:9b:8d:0c:13:16:f0:96:37:b3:ab:e9:d0:
4a:45:3c:9b:d0:ce:06:4a:e7:8c:30:65:d8:ba:1b:
f1:eb:9e:10:87:e6:67:2b:3e:56:0b:49:fb:65:dc:
79:65:98:bd:26:1b:c8:1b:c1:8b:1a:54:1a:3e:28:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:21:13:46:68:B5:0B:11:A6:92:6C:98:07:98:69:03:61:CA:D2:8A
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/fyETRmi1CxGmkmyYB5hpA2HK0oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f0:3c:f1:ab:94:0b:ed:e8:9a:36:eb:8f:a7:71:5a:89:60:
b6:ba:e2:c0:33:e3:09:2f:2b:4d:aa:c4:82:a4:dc:10:d0:11:
40:41:66:d5:19:cf:f7:d1:d1:dc:df:7b:65:d1:56:6f:33:28:
aa:42:25:86:58:6d:61:db:e4:4b:18:7d:24:f2:19:e5:ea:ec:
f1:99:19:24:21:90:29:3c:67:ee:23:76:d4:83:59:09:74:cc:
67:41:df:c7:af:fb:4e:f5:69:6a:e3:cb:77:f6:4a:7f:9f:c1:
4e:4b:fc:05:f8:fa:8c:19:95:6a:c6:ff:75:ea:8f:c0:60:d5:
29:04:5d:94:9a:c7:05:36:d8:12:b0:90:4e:eb:32:b8:49:18:
16:91:f0:df:90:60:6d:b5:48:40:10:35:9d:db:04:f1:a1:d7:
d5:88:83:90:3f:d0:cd:c8:05:45:51:73:bc:f0:b6:8b:b9:9d:
f3:83:39:80:95:45:4d:18:95:3d:1c:7c:14:79:15:40:0f:5d:
b2:9a:b4:36:3d:1f:48:60:12:c5:49:5d:fb:e4:44:51:be:f4:
0f:94:4a:a1:d5:58:28:df:00:0b:fd:02:32:32:5b:1d:df:81:
41:be:e1:23:62:9f:e1:e7:d0:aa:bd:95:b3:5b:7a:9e:7c:51:
91:7a:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:53:51 2026 by rpki-client