This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa
File: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (raw, json)
Hash identifier: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=
Subject key identifier: 15:C0:CF:E2:DD:9F:50:DF:DD:4E:B6:32:7F:1B:04:F1:05:B7:13:28
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 019B7C80137085668C732A8E3DFB4D23DEA3
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa
Signing time: Fri 02 Jan 2026 02:18:46 +0000
ROA not before: Fri 02 Jan 2026 02:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25512
IP address blocks: 85.209.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:13:70:85:66:8c:73:2a:8e:3d:fb:4d:23:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jan 2 02:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c0cfe2dd9f50dfdd4eb6327f1b04f105b71328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0b:e3:e8:93:71:a0:30:7c:ba:16:e9:fb:cf:
99:45:cb:c5:29:90:53:4a:ed:21:fa:3a:b9:bb:a6:
d3:d8:91:20:c7:fc:14:23:83:70:19:b4:69:82:39:
5c:69:cd:0a:04:ea:a1:fd:e8:61:15:86:d6:40:34:
b9:ff:16:5a:88:b4:96:73:0b:d8:1f:94:3e:68:14:
74:d5:9e:bd:04:1d:21:da:cd:c7:5a:7a:b4:cc:ef:
b0:bf:1b:1c:e7:06:65:7c:4e:11:e5:67:08:8f:e6:
d9:07:92:f8:b8:87:39:6c:1e:ea:6b:5a:9d:4a:33:
69:35:20:1e:18:45:32:19:78:db:ed:d3:df:5c:7e:
c9:50:29:0e:36:e8:d2:97:33:ec:45:44:0c:5c:55:
02:b7:db:47:93:e5:76:ce:f7:8e:c0:96:e8:01:dc:
33:b8:db:87:e6:ce:f4:8c:9e:5c:a6:86:77:25:4c:
44:e0:8a:c2:bb:dd:74:ed:5b:1f:6a:f2:ae:ca:28:
c0:2f:da:01:08:1d:53:12:15:bb:74:86:2c:c2:8d:
3e:b9:14:10:52:d0:9f:5e:b9:9b:f9:cc:05:93:7c:
77:98:42:49:76:c9:75:71:12:7a:ad:10:9a:a1:ff:
cd:e5:d6:d9:37:58:0b:32:8c:1b:e2:f1:f1:a4:25:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:CF:E2:DD:9F:50:DF:DD:4E:B6:32:7F:1B:04:F1:05:B7:13:28
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.124.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:eb:2d:6c:c4:3f:43:4d:3d:b6:d9:1b:67:97:2f:19:50:b2:
10:5b:56:54:c7:aa:37:2e:25:a4:b4:8f:c9:8c:c2:f0:e7:6c:
f7:fe:8f:fc:62:3e:a6:f9:22:92:98:c8:8e:54:bc:c9:02:87:
e1:7d:5a:ce:49:34:5b:3a:91:24:60:31:d3:e0:57:14:55:35:
c6:e2:91:b0:59:a7:c0:09:ea:0e:b8:e8:9a:8b:ff:e2:64:cc:
c1:63:99:06:48:fe:4d:11:a9:8f:9f:73:97:76:19:61:dd:6e:
cb:43:48:46:80:66:58:8d:b3:2e:06:08:ec:6a:b4:f0:d3:25:
c0:7d:4c:76:21:cc:73:6d:aa:ab:cb:be:16:f3:df:46:0d:59:
2b:c9:11:79:c6:63:78:a9:ed:d9:4e:e5:f5:af:e0:40:6e:d5:
07:bc:47:ff:18:38:9b:e3:4c:61:66:39:92:27:3b:62:10:38:
86:64:8e:7e:90:5c:3b:c0:48:83:ea:aa:d9:ff:c2:e4:19:d7:
ee:93:2c:40:0e:26:7d:50:b1:c4:cf:18:0b:de:51:75:d5:d2:
37:7d:ca:e9:23:b4:03:12:44:06:ef:99:75:02:75:b5:bc:1d:
cb:b3:29:fe:1f:4e:23:df:cb:8e:81:cc:02:8f:a9:3d:05:6d:
52:a8:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:23 2026 by rpki-client