This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa
File: fyLOdege7rISvKwS6nzptMD3TJw.roa (raw, json)
Hash identifier: XupWMossyhFCVMRDOrwvQeOId6GsqZ/55zk7+a6M/A4=
Subject key identifier: 7F:22:CE:75:E8:1E:EE:B2:12:BC:AC:12:EA:7C:E9:B4:C0:F7:4C:9C
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 019B79108E18B9C57D01E072596BCA377A8E
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa
Signing time: Thu 01 Jan 2026 10:18:06 +0000
ROA not before: Thu 01 Jan 2026 10:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51469
IP address blocks: 31.171.216.0/23 maxlen: 23
31.171.218.0/23 maxlen: 23
31.171.220.0/23 maxlen: 23
31.171.222.0/23 maxlen: 23
185.16.232.0/23 maxlen: 23
185.16.234.0/23 maxlen: 23
217.170.240.0/23 maxlen: 23
217.170.242.0/23 maxlen: 23
217.170.244.0/23 maxlen: 23
217.170.244.0/24 maxlen: 24
217.170.245.0/24 maxlen: 24
217.170.246.0/23 maxlen: 23
217.170.248.0/23 maxlen: 23
217.170.250.0/23 maxlen: 23
217.170.252.0/23 maxlen: 23
217.170.254.0/23 maxlen: 23
2a00:6380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:8e:18:b9:c5:7d:01:e0:72:59:6b:ca:37:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Jan 1 10:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f22ce75e81eeeb212bcac12ea7ce9b4c0f74c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:c8:4b:ed:97:35:07:96:34:07:6b:44:8b:
2d:b1:bf:38:d3:a3:d4:e2:05:3b:33:09:c8:af:8e:
80:1f:b0:e3:fd:8b:80:f1:af:79:f0:f4:ee:04:99:
49:49:0b:6e:a3:01:8d:8f:5b:f3:4d:e7:54:3a:6b:
6a:da:38:25:26:02:6a:31:b6:6f:95:f5:2a:6d:32:
cf:b1:41:e0:0e:cc:50:6f:46:d5:66:ab:34:bf:2a:
02:bb:d9:8c:60:77:98:a6:cb:aa:54:5f:b6:e4:e2:
39:31:91:28:75:61:35:08:c4:71:7a:68:2d:38:02:
5f:ba:75:d1:c8:cf:80:48:87:b6:45:f6:4b:df:a0:
18:d8:0a:e0:85:66:6b:b8:a2:eb:fd:a3:74:99:35:
84:34:75:f3:17:41:14:96:4b:10:da:15:8d:52:a6:
9c:fb:6f:26:33:52:b1:b0:ad:3a:05:1f:44:fc:e2:
e8:e5:74:c0:fd:6d:1c:68:d5:68:70:29:bc:e1:3e:
7c:03:57:98:1f:81:55:f6:e9:44:39:00:f6:6b:1c:
d3:ca:29:b9:96:49:de:2b:96:5b:a9:0f:b5:bc:12:
b5:f4:30:fe:3b:a6:a2:b4:8e:9c:49:78:6a:ee:34:
c5:68:6f:ed:15:c1:db:ab:3c:af:83:0c:45:e3:2d:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:CE:75:E8:1E:EE:B2:12:BC:AC:12:EA:7C:E9:B4:C0:F7:4C:9C
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/fyLOdege7rISvKwS6nzptMD3TJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.216.0/21
185.16.232.0/22
217.170.240.0/20
IPv6:
2a00:6380::/32
Signature Algorithm: sha256WithRSAEncryption
72:fa:72:41:44:2a:94:f6:48:2e:02:eb:96:95:f2:76:07:1f:
8d:f2:04:af:11:af:f3:d8:36:7d:32:c5:45:93:a5:af:9c:22:
55:bc:b0:7f:ce:3e:70:c0:32:d7:cc:1c:d3:03:f0:5f:4d:90:
bf:bb:c9:07:f6:0c:eb:55:c5:e2:1e:ff:b9:ad:04:1e:4e:de:
c9:1c:98:e0:4d:74:88:0b:1d:7d:c8:9b:b5:bd:ce:21:5b:8f:
97:5e:60:23:bb:b5:0c:80:38:d6:11:32:9d:84:b7:4b:7d:29:
cb:ae:a7:21:3c:c6:10:43:27:1c:69:85:2b:a4:f5:ae:27:99:
72:43:6a:67:28:7a:a1:17:30:6c:42:04:87:41:4b:6d:ed:db:
bb:c8:1f:44:96:13:fd:a4:cc:4d:cd:48:6a:e6:bb:1e:27:eb:
56:45:c0:61:da:94:de:03:ac:f7:8f:55:72:83:f8:57:2d:9b:
7a:21:f7:fd:90:df:bb:12:ef:4a:a0:8c:97:c8:05:9e:3b:f0:
c4:a5:aa:bb:8a:96:a9:44:12:b1:ed:e1:e6:dc:3a:24:24:2d:
4a:1d:5a:9d:f0:d2:1c:c5:72:d8:a1:d4:73:63:4f:11:8f:7b:
ee:03:2b:ba:0f:25:5b:e2:b7:aa:a9:c1:09:04:43:39:3c:5a:
78:b7:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:59 2026 by rpki-client