This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa
File: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (raw, json)
Hash identifier: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=
Subject key identifier: 7E:C9:37:57:7B:A3:53:53:1E:5C:9B:88:48:36:8C:61:CA:C0:B8:DC
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019B77591831430244DACCE59886EBA69BB7
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa
Signing time: Thu 01 Jan 2026 02:18:06 +0000
ROA not before: Thu 01 Jan 2026 02:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47277
IP address blocks: 193.3.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:18:31:43:02:44:da:cc:e5:98:86:eb:a6:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jan 1 02:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ec937577ba353531e5c9b8848368c61cac0b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:b4:08:ab:4a:b9:e1:69:92:95:fc:fe:2f:
e4:cb:87:bf:51:a7:8b:29:7e:44:71:f0:12:ab:59:
fb:ca:ee:18:97:21:19:6c:99:83:5e:d4:81:00:f4:
71:86:d3:43:6a:3d:be:3b:4b:e2:eb:e7:1c:cf:ad:
7d:d9:ee:13:5a:42:be:f4:1d:f6:fb:92:47:5d:d2:
41:eb:c8:a1:0c:b6:1a:d5:5d:23:1d:ae:5d:de:db:
25:21:19:6f:d5:9c:7d:6c:92:55:84:c2:40:82:03:
ab:de:10:c7:41:be:71:30:f6:eb:ee:ce:f6:61:7b:
a9:83:a4:82:c8:a2:ec:0f:fb:35:a8:10:07:c8:7e:
c3:ca:73:31:4e:bf:35:45:37:84:f4:c3:39:37:99:
43:17:d7:05:c0:b1:f6:fe:7c:e0:e2:ed:50:db:16:
4b:1a:64:6f:b6:b0:8d:70:9c:04:cc:6e:0c:39:1d:
1f:df:d7:43:fd:45:2c:29:e2:8f:36:f8:9a:4a:04:
bd:15:8d:1a:60:17:dd:d9:ba:07:e8:c0:7f:ba:ee:
28:4e:c2:a8:49:a1:36:a9:5b:6a:9a:99:8f:ef:98:
29:bd:fa:cd:1c:06:3e:a4:de:1a:a0:fe:6e:d7:87:
00:d2:48:ea:c9:ee:57:56:73:09:c7:52:a9:cb:80:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:37:57:7B:A3:53:53:1E:5C:9B:88:48:36:8C:61:CA:C0:B8:DC
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.128.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6f:25:e8:e6:b8:7a:7b:d4:a4:af:4a:00:a9:e9:92:f4:59:
d8:1b:dd:2a:02:e7:23:1e:e1:9c:65:d9:45:b5:e2:c6:bc:16:
87:20:62:a9:cb:23:92:81:d1:5e:5a:8d:dc:c3:80:07:8f:62:
b4:b1:0e:36:67:8f:fe:65:60:27:9b:4a:9d:1b:86:b8:5b:27:
68:ad:57:80:74:13:29:26:69:f9:2d:80:f2:62:62:30:51:05:
bf:2b:26:ab:9b:db:4c:76:b0:f1:52:9e:25:40:01:6a:0b:3c:
a9:ae:6d:47:02:95:23:ef:53:06:e0:de:8f:98:80:97:c0:9c:
ee:c7:f8:7d:76:c6:c2:97:0b:85:df:55:55:a8:ad:fa:6a:c1:
d9:e0:9d:b2:81:df:9a:7e:68:c6:af:01:f3:c1:4c:23:6b:7a:
0d:c8:ed:4e:5a:c0:d7:e3:5f:2b:01:c3:2c:42:61:e8:3a:7a:
6d:9c:c3:ef:50:f7:d1:68:f3:a9:07:9b:c6:5f:6b:d3:96:ad:
62:b2:35:2d:b4:31:5b:e0:fc:b8:0d:bb:f0:3d:dd:c3:f0:82:
f1:45:52:4e:8f:cf:1a:65:14:f8:d1:5b:ef:43:0b:d0:3b:f4:
c4:d7:a5:52:15:85:5a:5e:e7:ed:bd:1d:b2:97:40:8c:a1:2a:
e7:a2:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:34 2026 by rpki-client