This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa
File: SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa (raw, json)
Hash identifier: xpSVlT3wR32cQLvIsOrCb9cQiCB1CYLLjAYhuDSOyVk=
Subject key identifier: 4A:F7:C5:2D:81:5B:76:45:40:7B:9E:04:BF:E5:F6:47:BA:AD:F6:51
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C1E9124D47116D98FBC8398796F6051E0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa
Signing time: Mon 02 Feb 2026 13:35:54 +0000
ROA not before: Mon 02 Feb 2026 13:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14061
IP address blocks: 2a13:18c6:c9a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 15:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:91:24:d4:71:16:d9:8f:bc:83:98:79:6f:60:51:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 2 13:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4af7c52d815b7645407b9e04bfe5f647baadf651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fe:8f:3f:cc:c8:a6:53:88:c9:8c:57:e3:6f:
eb:fe:d3:fe:00:65:26:7f:55:7b:4d:0d:bd:4a:c6:
1e:f2:bc:7c:2c:4d:f9:73:07:fe:c2:0d:ec:ae:31:
66:73:80:92:32:3f:f5:73:f1:87:aa:1d:39:9c:51:
c7:34:59:60:7e:36:b2:a3:3b:b0:27:fd:47:fa:b5:
2b:74:18:d7:54:c8:52:4e:f3:da:1a:4b:8b:d8:49:
7a:f5:33:cb:ff:ea:c3:0f:96:aa:2c:00:b3:74:b7:
25:91:37:0d:4e:a3:b3:43:3e:af:35:98:27:88:fa:
73:91:56:dd:08:a6:71:dc:0a:e6:fd:f0:3d:25:b0:
00:53:f1:33:74:d5:c2:32:8d:2a:34:df:1a:de:8c:
2a:95:89:dc:be:01:bb:62:2e:a8:b6:48:e0:8d:3c:
23:7f:c8:a7:48:19:e7:e4:01:47:0c:9e:2d:02:24:
60:f3:19:f9:ae:f5:16:98:1b:94:1b:2e:4c:11:31:
bf:29:1a:19:3c:20:6b:36:e3:fc:24:d3:33:42:d6:
c1:52:7c:90:3f:10:86:bc:0a:ca:eb:69:ad:2a:f8:
c0:dd:df:4a:47:06:cc:95:cf:2e:6e:0a:4b:f4:1a:
97:61:db:80:0e:83:76:23:2b:d6:05:8a:26:d9:9c:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:C5:2D:81:5B:76:45:40:7B:9E:04:BF:E5:F6:47:BA:AD:F6:51
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SvfFLYFbdkVAe54Ev-X2R7qt9lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:18c6:c9a1::/48
Signature Algorithm: sha256WithRSAEncryption
b4:97:0c:63:ae:9b:74:9a:c2:57:a1:0c:c7:b4:b7:d2:db:84:
e1:b4:69:0f:4d:19:6d:5b:4e:b4:6d:ed:7b:75:34:73:b2:8e:
48:0a:03:0a:4d:5c:31:dc:bc:a3:d3:e8:f1:84:ee:65:83:55:
a4:1a:ff:c3:ce:98:73:20:24:ac:da:5d:67:6f:2b:a7:62:6e:
93:3a:a0:7d:a9:b8:5c:18:0c:20:31:51:9c:fb:d1:7e:2e:78:
ee:19:c4:9e:d9:3b:f0:0d:c2:aa:a6:48:c3:26:e6:70:b9:3f:
ec:0e:27:65:58:d7:25:55:86:45:86:36:10:50:fc:ae:4b:35:
52:00:96:d2:2b:ab:12:e3:a8:18:be:de:3a:ce:f8:d6:01:8e:
15:01:e5:25:55:db:1a:5c:41:d0:98:5e:10:13:bd:17:ed:51:
1a:7b:91:64:83:7d:aa:bb:c9:dd:52:f7:22:96:f8:f3:a8:3f:
bb:99:06:0d:be:9b:89:ff:ad:4b:17:3b:50:8c:f2:7b:f1:b0:
c1:09:2b:4f:0c:64:c9:71:a0:fd:34:f9:58:20:60:ba:af:c4:
4d:a5:a4:28:35:c4:cd:fb:db:78:85:44:57:82:51:4d:d6:c9:
27:d0:01:57:3e:c5:bb:3c:dc:b4:d3:25:d0:72:47:08:c0:16:
90:34:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 21:09:18 2026 by rpki-client