This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa
File: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (raw, json)
Hash identifier: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=
Subject key identifier: F8:87:C8:78:01:70:11:86:58:B7:50:1B:01:A2:77:00:D5:E1:EA:E8
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019B7EA535E7798A8625D9E4B2897608A1FB
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa
Signing time: Fri 02 Jan 2026 12:18:34 +0000
ROA not before: Fri 02 Jan 2026 12:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200024
IP address blocks: 87.246.25.0/24 maxlen: 24
87.246.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:35:e7:79:8a:86:25:d9:e4:b2:89:76:08:a1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 12:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f887c8780170118658b7501b01a27700d5e1eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:f6:ba:0b:8b:01:c4:22:56:b6:29:fb:5e:
95:f0:fa:cb:91:8f:94:48:6b:8b:db:fc:57:2a:9e:
88:60:21:46:7f:51:0f:21:62:fa:c5:8e:9d:99:04:
31:0f:5a:df:92:6e:ff:a5:3a:42:a7:fd:36:73:ae:
ca:37:cd:96:02:14:92:c5:03:82:fb:09:11:dc:37:
00:fc:b2:13:c9:0c:10:1a:1f:69:b9:e6:04:cf:5b:
ff:b3:b2:1f:5e:62:87:b6:66:ea:2d:3e:52:c2:4f:
a8:a3:e8:bb:3a:db:4b:81:f3:10:ac:91:c9:25:2e:
0f:16:7f:a6:46:e4:3b:ac:fe:a1:7a:59:ba:ac:48:
78:db:4e:90:f5:1b:cc:d3:c1:21:a4:28:6e:db:02:
21:c2:84:3a:b7:f0:0c:43:b0:fa:7b:01:58:fc:cd:
66:a3:9e:9d:81:bb:cf:5b:88:9f:b4:38:b1:af:57:
ae:07:2e:f0:76:d3:41:2e:c6:02:e7:66:2f:05:45:
91:8b:55:1d:d8:04:1d:cc:59:fb:51:ce:92:62:cf:
52:23:51:65:16:5a:13:61:5a:06:e1:af:95:ea:d9:
db:01:2d:cd:da:eb:3c:a6:f3:5a:33:1e:a0:77:08:
85:3c:4b:a4:61:14:27:30:0e:0e:a4:d2:e2:07:38:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:C8:78:01:70:11:86:58:B7:50:1B:01:A2:77:00:D5:E1:EA:E8
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.25.0-87.246.26.255
Signature Algorithm: sha256WithRSAEncryption
63:40:77:29:fe:33:49:2a:b6:06:14:e1:77:f5:a9:06:8b:bc:
49:8b:2b:eb:87:71:9d:fd:77:8b:07:aa:a7:fa:b3:de:db:d7:
05:f4:2d:83:36:2d:25:16:a0:d9:22:4c:cd:67:d0:d6:c4:ce:
52:30:10:16:d1:2b:fd:43:a1:76:c3:ed:a9:ae:eb:12:2b:d9:
97:87:e2:5c:61:86:79:c6:cb:72:4e:42:55:74:bb:c7:a3:df:
2a:d4:3d:d3:9b:cf:9c:9b:d6:71:07:45:96:9c:63:f7:67:b0:
46:ea:ec:47:75:e2:2f:00:7d:8b:ef:18:58:1d:17:9e:d5:24:
be:aa:57:9e:c6:be:50:0f:11:77:aa:6a:31:b1:62:86:16:b1:
9b:51:85:11:57:39:ce:4f:e7:bf:d6:03:20:a9:e8:db:69:3b:
b7:b0:ab:e4:b1:9e:46:d1:de:71:56:e8:e7:51:2e:6a:0a:19:
52:94:f1:6b:e7:5c:f7:1e:82:10:85:99:2b:ad:7f:8e:f8:0a:
99:05:ee:c8:ca:c8:e5:c8:c8:ee:08:5c:2a:d0:b1:cb:aa:d5:
8a:ce:ff:62:9d:48:03:d7:c2:3a:09:ab:47:7b:27:50:4b:da:
20:b1:43:19:d6:b7:1c:aa:6a:65:c1:30:ea:67:66:b7:65:ea:
e6:20:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:35:13 2026 by rpki-client