This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/fyr3l71yXyZa0qJKX752horsWVs.roa
File: fyr3l71yXyZa0qJKX752horsWVs.roa (raw, json)
Hash identifier: 6QW7nNjpNR48gxgLwjjO7J9nPbB82YNsVN3+Wky6unk=
Subject key identifier: 7F:2A:F7:97:BD:72:5F:26:5A:D2:A2:4A:5F:BE:76:86:8A:EC:59:5B
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 019B7F81ECE5659414B2D85D0ED559279C69
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/fyr3l71yXyZa0qJKX752horsWVs.roa
Signing time: Fri 02 Jan 2026 16:19:39 +0000
ROA not before: Fri 02 Jan 2026 16:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198244
IP address blocks: 91.232.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:ec:e5:65:94:14:b2:d8:5d:0e:d5:59:27:9c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: Jan 2 16:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f2af797bd725f265ad2a24a5fbe76868aec595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:ce:77:86:d3:6e:50:42:5f:33:48:93:79:
27:3d:b1:73:cb:14:6b:21:b3:76:ec:64:86:dd:44:
44:6d:69:23:ac:58:04:39:97:c8:e8:ac:2d:f5:b8:
2b:38:b5:b5:5b:42:31:cc:cb:59:c8:2e:40:46:0e:
ce:54:17:72:3c:b5:80:ad:a7:6d:19:0e:eb:ce:b5:
e3:b0:fd:33:94:2e:e9:d1:80:9c:2e:a7:58:e5:b8:
f3:fb:7e:33:3b:fe:bb:26:f2:fd:8b:ac:0f:99:78:
6f:3e:61:31:53:52:15:76:73:6f:2a:cd:77:c5:87:
41:5b:a2:5d:dc:a3:e3:6c:dc:47:28:8e:d0:d3:0f:
98:3b:fc:a5:e1:e9:cf:c3:43:95:af:56:54:d1:05:
a9:a2:7b:27:7f:16:84:57:ec:28:69:20:d8:4e:93:
7d:93:71:12:3e:0b:5d:00:ab:2c:2b:d4:b9:e4:cc:
ba:6a:aa:b6:98:34:14:50:2e:3f:72:8f:4f:1b:5d:
da:eb:2f:7c:7f:8a:cf:8b:4e:5f:8d:9d:2c:e8:f4:
1f:f0:af:58:35:61:ee:d8:92:aa:02:fc:02:96:06:
aa:65:4d:62:60:d5:44:f1:75:c2:5e:94:e6:e9:35:
7a:36:4b:4e:63:ed:8d:00:3a:b1:75:70:10:7c:30:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2A:F7:97:BD:72:5F:26:5A:D2:A2:4A:5F:BE:76:86:8A:EC:59:5B
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/fyr3l71yXyZa0qJKX752horsWVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.232.0/23
Signature Algorithm: sha256WithRSAEncryption
33:24:57:fd:2f:dc:7a:9e:f9:43:a1:02:62:d7:39:ea:69:af:
89:17:ae:7f:12:44:9c:4f:69:7e:c8:57:2d:75:39:af:1a:df:
13:16:90:5f:13:18:9e:4b:76:6a:52:a8:37:af:1d:6f:5a:a1:
7b:34:8a:16:37:71:d5:97:1e:5b:df:f5:0e:8d:98:ea:c1:b9:
40:bf:09:f6:df:d9:ac:7a:d6:42:aa:c9:c5:90:6a:13:90:d0:
9f:6f:4a:d4:ab:d9:42:1b:9d:c4:d4:7d:a6:29:30:b6:16:0e:
6a:93:ce:a2:a5:ff:06:28:4a:7f:c6:53:1f:9f:52:09:ae:ae:
16:2d:40:c2:44:1a:11:42:d6:21:61:7f:a6:1f:cb:af:7f:da:
c6:bb:a9:a7:f5:3c:b4:a5:ea:db:15:77:a5:fe:3b:e5:8b:b1:
da:9f:46:40:b1:42:39:42:29:68:d1:1d:eb:7a:49:b7:f2:08:
41:f5:fa:49:de:29:2a:d4:4b:8c:b4:25:9f:8e:d7:2d:b7:00:
34:f3:cf:8c:18:87:dd:91:0a:a9:cb:db:e9:cb:b4:30:3c:1b:
20:72:a0:e2:29:59:36:f6:cb:06:8e:55:f3:87:49:b3:23:50:
34:5d:58:f4:e9:6d:c2:a0:e4:c2:95:cd:8c:db:3d:4d:48:34:
c9:3f:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:39 2026 by rpki-client