This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa
File: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (raw, json)
Hash identifier: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=
Subject key identifier: 7F:0B:0A:BF:78:05:BA:A8:56:D6:C7:F7:04:43:14:7B:B5:08:1A:8B
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019B7CEE4B817289B710F7DEFB9C920B2ECC
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa
Signing time: Fri 02 Jan 2026 04:19:10 +0000
ROA not before: Fri 02 Jan 2026 04:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206469
IP address blocks: 62.106.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:4b:81:72:89:b7:10:f7:de:fb:9c:92:0b:2e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Jan 2 04:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f0b0abf7805baa856d6c7f70443147bb5081a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:ac:7c:dc:33:96:36:31:44:94:84:7f:30:
99:a6:ce:81:0f:68:de:e5:39:e0:4f:de:5c:f3:cf:
92:d0:d4:13:8d:b7:66:3f:f6:c4:be:72:e2:4a:b6:
21:6d:25:b8:15:20:0f:ff:92:30:5a:20:a4:11:b6:
be:37:04:4f:42:60:6f:2d:3d:b6:a3:42:5a:33:0c:
ca:4b:14:27:0f:69:99:2f:41:ba:68:9e:20:04:42:
30:3f:55:ca:12:78:1f:80:0b:cb:11:c1:5f:99:bd:
a1:be:e0:a4:ad:bf:ed:e9:06:ed:8f:bb:ca:dd:b9:
a9:b2:f5:42:7a:16:84:80:66:aa:9b:e6:40:93:28:
53:9e:e7:06:b8:17:b1:33:c3:79:e2:b2:23:63:fb:
8b:c2:95:24:90:81:f6:4b:ce:7b:bd:28:54:b6:51:
a4:32:24:72:d2:18:5c:f9:5a:de:f1:73:3e:4c:d1:
b4:0a:39:0c:39:65:96:b0:21:f4:ec:f9:fe:78:ce:
b2:a5:c9:01:1a:60:b6:d4:8c:08:56:3d:e1:74:5e:
2b:61:4a:d4:6d:14:1c:02:d0:c1:1f:63:3c:c6:82:
2e:26:7f:c8:03:57:f5:e0:2e:c2:ea:d6:69:15:87:
f4:fc:81:1b:62:b4:2e:ee:e5:66:0b:ed:82:36:11:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:0A:BF:78:05:BA:A8:56:D6:C7:F7:04:43:14:7B:B5:08:1A:8B
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/fwsKv3gFuqhW1sf3BEMUe7UIGos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:51:ff:e3:c1:46:b9:c2:9b:9c:a4:ac:c4:ec:42:a6:c4:5a:
7e:e2:04:81:ea:e2:5e:1a:15:bf:8a:10:9b:d4:3e:e5:91:86:
c7:5e:39:4c:de:da:79:09:45:6e:a5:e0:0f:fe:1d:e8:f4:2f:
29:97:1b:8e:a6:a5:64:39:8d:11:a5:dd:4a:81:5b:2f:82:7e:
06:a3:d5:50:bc:05:3b:4d:f6:30:fc:bc:7c:e7:6a:c2:fb:1e:
94:7a:77:9d:13:25:68:e9:36:2e:1d:6c:31:a0:04:86:03:9a:
44:31:f6:3c:97:cc:60:55:16:4e:ed:ed:af:11:50:b2:f6:34:
ca:fb:84:c6:9d:98:ef:70:cd:84:89:79:36:97:68:80:5f:22:
9d:ba:d9:61:c9:f6:5b:d0:bb:ea:9c:4e:ea:26:f4:9a:c8:ae:
76:90:50:9c:d3:e2:93:f6:8c:07:0f:93:23:10:9a:fd:ce:bb:
cf:e0:79:1c:8b:db:33:23:32:58:2e:fc:3b:81:1d:af:c3:a6:
01:ac:f7:54:2b:0a:fa:08:5f:31:09:85:89:78:a0:45:25:8c:
9a:65:f1:4f:f6:51:6c:5e:87:c9:70:33:69:01:73:62:be:53:
2c:23:ba:4b:99:fc:fe:61:78:83:01:83:63:f9:73:86:0f:39:
95:82:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:56:22 2026 by rpki-client