This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa
File: J-fPqsN-bTywutCgBgm0oMsMZn4.roa (raw, json)
Hash identifier: GwWRnUTMSKlctTV12vVbv4ww0CbgnMjaJS61PVU8Qu8=
Subject key identifier: 27:E7:CF:AA:C3:7E:6D:3C:B0:BA:D0:A0:06:09:B4:A0:CB:0C:66:7E
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019B7B36DAFE5CF3F44DF298D77D3144CE10
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa
Signing time: Thu 01 Jan 2026 20:19:11 +0000
ROA not before: Thu 01 Jan 2026 20:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 213.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:da:fe:5c:f3:f4:4d:f2:98:d7:7d:31:44:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 20:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27e7cfaac37e6d3cb0bad0a00609b4a0cb0c667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:b0:1b:66:e2:6f:1d:76:bc:aa:fe:ef:6a:
e2:b3:cd:f6:45:90:a1:f9:4d:3f:df:30:21:0d:6c:
88:52:5b:08:8a:ae:8f:ba:93:6c:05:40:6a:c6:2b:
ac:06:01:00:80:33:90:02:be:0b:7a:9b:fa:58:36:
d8:ce:fb:d6:cc:ff:5f:39:3f:1c:60:28:a5:d5:d4:
df:f3:28:51:f5:74:00:33:3b:a1:ee:03:f8:ab:b7:
a3:3b:3a:2b:05:ae:76:60:64:64:d8:50:1a:aa:3c:
cc:04:d2:e3:6a:40:1c:02:fe:11:aa:e8:76:d5:45:
48:47:69:04:75:82:00:20:15:e7:e3:91:30:80:f1:
5b:a0:26:4a:91:25:88:eb:44:fe:6e:35:20:d4:b0:
92:1d:da:64:f0:2d:f3:99:76:26:e2:cc:91:5c:1f:
4f:dd:82:ae:84:fa:bb:e7:92:4a:ef:81:16:e2:c6:
c1:c3:41:c2:e4:1f:88:ae:08:8a:60:a4:be:5e:e2:
5f:af:ad:cb:d4:0e:74:a0:d5:4f:fa:6e:b7:21:1d:
61:a7:b0:a2:bf:5c:89:49:66:dc:fe:4c:51:03:dc:
50:1b:3a:b3:d7:fd:c7:20:63:f0:7b:b1:81:ad:a9:
19:b9:26:2f:ee:27:f1:09:72:ba:f9:2d:c8:1c:a4:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:CF:AA:C3:7E:6D:3C:B0:BA:D0:A0:06:09:B4:A0:CB:0C:66:7E
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/J-fPqsN-bTywutCgBgm0oMsMZn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
58:0f:61:a3:4e:47:e4:86:d4:b7:e3:ee:d3:df:01:6b:cc:af:
cc:79:c5:9a:8b:6d:33:f0:64:9c:e7:11:7e:63:cb:5a:19:f7:
17:5b:ec:6e:32:78:8e:db:e3:18:83:ce:37:20:c5:5c:1c:85:
f1:63:22:b2:eb:1a:9e:4b:dd:c0:f3:90:c7:22:33:c7:1d:b5:
40:87:fa:d8:cc:8c:20:29:0c:47:34:dc:63:6b:fa:9d:fe:a9:
40:b4:ba:13:46:81:d4:88:82:c6:7a:99:d4:3e:f5:63:11:5f:
bc:4b:16:1c:23:c9:0f:10:53:f6:e7:6a:ea:e0:99:34:8e:71:
8c:02:93:33:53:63:76:15:4c:9c:04:05:f6:02:a2:f7:e0:db:
40:8f:4b:9c:b7:47:e7:39:31:8a:7c:c5:2e:b9:1c:02:a4:b5:
a6:d1:e7:53:a9:cc:8d:9e:d1:ef:b3:74:0d:f8:68:d6:ee:e9:
fe:fc:33:5b:69:35:48:fa:6f:f9:c6:cd:0b:82:18:e4:84:01:
2b:59:fe:45:89:22:b0:e4:cc:9c:f9:41:5f:fc:a6:7b:37:cd:
75:4f:67:82:0f:ac:17:ec:c2:50:09:eb:af:6e:ce:36:b6:16:
0e:09:5d:24:62:af:6f:f8:e6:fe:fd:51:78:a3:ec:00:00:11:
db:1c:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:16:41 2026 by rpki-client