This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/fePebiytxTMuGPH6fSC5E4YL5wc.roa
File: fePebiytxTMuGPH6fSC5E4YL5wc.roa (raw, json)
Hash identifier: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=
Subject key identifier: 7D:E3:DE:6E:2C:AD:C5:33:2E:18:F1:FA:7D:20:B9:13:86:0B:E7:07
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 019B78A33DC71776FD24CD1601583A721352
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/fePebiytxTMuGPH6fSC5E4YL5wc.roa
Signing time: Thu 01 Jan 2026 08:18:42 +0000
ROA not before: Thu 01 Jan 2026 08:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 194.146.244.0/23 maxlen: 23
194.146.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:3d:c7:17:76:fd:24:cd:16:01:58:3a:72:13:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 1 08:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7de3de6e2cadc5332e18f1fa7d20b913860be707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:69:54:86:0b:23:a1:d6:ca:c3:f5:6c:92:
08:1d:ff:ea:b0:59:a9:39:62:e4:1c:50:30:6a:0e:
9f:07:86:05:d2:eb:01:7d:16:6f:a7:78:90:a9:b8:
da:36:88:11:88:55:77:65:cd:b7:1d:af:ac:cd:4e:
f3:36:5d:53:f4:6a:8b:f1:77:1f:d3:0d:9d:4b:22:
1c:87:f7:4a:db:9e:f3:1d:cc:02:cb:cc:d9:8f:d1:
bc:74:23:ea:82:60:a0:3c:13:eb:3f:b6:e8:c6:ef:
8f:4c:74:9b:2c:60:2e:49:01:4e:7d:ca:e7:36:a7:
45:47:15:ee:0b:d7:1f:37:6a:41:9c:6c:3d:f0:b4:
0b:3a:06:57:2a:2e:b5:b1:9f:78:5b:24:db:17:62:
bb:79:7e:37:ec:f1:d9:4e:25:c1:3b:9c:5b:36:3b:
3d:9a:3f:aa:5f:ff:48:0e:62:f5:2a:ea:fd:82:83:
54:f3:fd:c5:03:7d:fb:dc:24:60:ff:e6:a0:b3:ab:
97:02:bc:8c:fa:c4:35:eb:79:63:7f:82:7c:53:60:
02:98:79:44:2d:56:89:17:64:19:83:f6:be:f6:49:
c2:64:f1:f2:fc:89:fd:d6:87:91:dd:c3:5c:d0:54:
db:59:c4:9a:1a:4b:2a:22:4c:aa:58:70:47:47:36:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:DE:6E:2C:AD:C5:33:2E:18:F1:FA:7D:20:B9:13:86:0B:E7:07
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/fePebiytxTMuGPH6fSC5E4YL5wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b1:23:cd:86:ba:38:96:29:6e:27:02:91:22:22:6f:37:5d:
f3:7a:17:22:c1:e9:43:d4:f1:71:1f:2a:77:f7:b9:c0:46:c2:
d0:b0:a1:cc:d7:84:66:b2:7a:16:25:d5:73:36:7a:95:48:4a:
8d:b0:5c:33:20:e9:6f:cd:e1:46:00:d0:55:9f:37:cc:c7:83:
e9:7f:69:f9:08:f9:bb:ae:e5:44:d6:7a:f3:2d:4e:3c:0c:0f:
0b:be:28:66:d2:11:4d:b7:d0:ed:0a:62:8f:f1:95:66:dc:35:
28:a2:cf:c9:a3:7f:b3:e1:4a:04:2f:2f:d2:e3:aa:7c:e4:cf:
a2:49:9b:5e:99:bd:48:d4:1c:dc:c9:e2:7e:f6:29:41:b1:12:
e5:a0:ca:e1:23:a8:a3:78:c8:1f:28:e5:ed:61:84:ae:a1:dc:
25:91:ed:02:ca:de:2c:fc:d2:3f:a8:ec:a1:72:6c:37:0c:06:
93:4a:52:2c:a7:f7:cd:17:05:2f:39:bc:ef:c8:7d:33:8e:63:
28:46:33:55:4d:81:88:88:a4:e3:07:44:e1:b2:37:5c:33:a0:
49:42:4c:73:e3:ad:58:f7:59:3a:ba:94:16:39:9c:54:42:6d:
3c:53:73:06:6f:e2:36:9a:b2:6c:80:e3:0d:62:ce:94:bb:3d:
85:22:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:57:06 2026 by rpki-client