This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa
File: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (raw, json)
Hash identifier: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=
Subject key identifier: 4C:FC:01:A2:31:C9:D1:2D:61:99:15:14:03:F0:1C:3D:F8:62:37:46
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 019B7A5AC569399A1B82F7620914BDC9F698
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa
Signing time: Thu 01 Jan 2026 16:18:47 +0000
ROA not before: Thu 01 Jan 2026 16:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48716
IP address blocks: 31.3.209.0/24 maxlen: 24
83.97.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:c5:69:39:9a:1b:82:f7:62:09:14:bd:c9:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Jan 1 16:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cfc01a231c9d12d6199151403f01c3df8623746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:25:42:cb:c8:b3:25:8f:c8:27:3d:77:78:
fd:55:88:e7:0b:da:b2:3a:46:1d:0a:71:dc:6e:7e:
11:3e:be:b7:f8:e7:0e:b2:18:b4:3e:fd:70:a9:23:
94:bf:b5:a3:5b:03:33:0d:e7:ab:3e:d0:55:a9:68:
e6:1c:af:77:c9:43:dd:18:cb:3d:c7:51:46:fe:50:
b7:43:a6:52:de:a7:9d:35:02:23:2c:32:74:14:75:
db:43:9b:cb:59:2c:87:76:bb:86:a1:90:8e:45:93:
64:40:07:c5:51:1a:5f:fd:bb:2f:fd:6a:41:81:fc:
8f:7d:0b:17:61:3a:ad:00:cd:80:8d:27:84:8f:9d:
3a:e0:14:b1:b8:9f:6f:2f:36:6d:a1:4d:7e:9e:ac:
52:0a:19:91:91:a0:1b:89:94:e0:38:a7:90:cf:51:
d0:83:fd:91:23:ea:a8:9b:06:aa:6d:8a:3a:f5:b2:
94:ff:f0:7c:15:6a:98:28:7b:94:dd:b1:e6:5d:66:
6e:d1:06:04:ac:6f:4a:47:a0:05:68:da:87:93:72:
5b:fc:4b:69:31:60:dc:88:cc:37:fe:7d:4e:cb:fb:
fc:61:fd:e3:9f:67:e9:88:50:ea:d8:13:b8:c5:71:
5e:41:78:3d:c7:6b:97:cd:a6:97:67:e2:3c:43:61:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:01:A2:31:C9:D1:2D:61:99:15:14:03:F0:1C:3D:F8:62:37:46
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.209.0/24
83.97.77.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:17:13:32:6b:58:66:f3:a6:6a:14:cf:9b:7e:5b:91:e6:
44:2f:81:a7:65:1e:5f:a6:e5:6e:49:98:21:c9:4f:a6:31:1c:
f2:0c:52:db:ea:97:d4:dc:5a:a0:77:10:51:0c:d7:b4:58:3c:
9b:b5:41:e1:26:11:36:43:d0:31:a0:aa:5b:90:c6:cf:3e:ab:
7f:aa:5a:fb:84:07:fd:ef:c0:e4:a8:f8:1a:ea:da:78:b6:37:
ed:54:0b:fb:bf:3b:07:41:61:26:58:d9:f7:a6:f5:e3:a8:35:
b2:fc:d4:d1:5a:06:37:7d:5a:e9:0b:3f:be:de:45:02:4d:bf:
1c:0b:0e:89:bc:18:ed:aa:c3:96:a3:77:be:b1:9b:d8:75:ae:
1a:9e:14:61:8f:bc:b4:32:f2:44:0d:35:fb:5b:d4:fb:8f:1f:
c8:a7:50:16:91:0a:95:8c:b5:11:d6:f1:ec:37:ef:8b:45:75:
76:59:b1:17:33:0a:e6:fc:77:89:c2:36:1a:fd:ef:a9:35:b8:
73:bf:cc:02:ce:fa:26:74:f3:b6:d5:8c:6c:c5:af:6b:ac:03:
4e:25:40:05:46:97:f5:d5:89:5c:cd:ed:4a:56:df:e3:ff:bc:
4e:28:90:8b:86:b8:f4:9d:c4:2e:5a:f0:db:e5:3e:d1:f3:db:
28:b8:54:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:11 2026 by rpki-client