This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa
File: R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (raw, json)
Hash identifier: tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=
Subject key identifier: 47:81:32:41:FA:B8:EE:52:9C:4A:2E:E5:1A:C6:D7:23:81:7C:B4:F2
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 019B7EA6BA4F1BD3494B91681E8EDFE87DC8
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa
Signing time: Fri 02 Jan 2026 12:20:14 +0000
ROA not before: Fri 02 Jan 2026 12:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8839
IP address blocks: 88.151.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:ba:4f:1b:d3:49:4b:91:68:1e:8e:df:e8:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: Jan 2 12:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47813241fab8ee529c4a2ee51ac6d723817cb4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:0e:19:6f:fa:42:e1:57:9a:ac:4e:d5:a7:
b9:e0:a2:54:70:81:19:d0:e1:64:17:e9:1f:de:3b:
d3:38:80:04:93:87:d9:6f:15:ef:c4:02:a4:45:05:
96:9d:c9:de:b8:fd:22:a7:02:04:6c:6a:d5:c0:bd:
e0:5d:ad:52:c9:70:db:2e:62:e6:47:19:e1:8e:65:
c9:40:15:a6:7a:7f:8a:9d:3d:21:1d:3c:79:12:b7:
23:6a:f2:11:dd:4d:91:4a:df:c8:3a:8c:08:08:70:
60:f7:36:4d:82:00:ee:48:65:4c:51:ea:dc:99:85:
9c:b3:14:93:17:8d:c9:5f:c3:9e:1b:4d:5d:5c:45:
e6:96:0e:4a:0c:0c:60:fe:37:e1:9a:34:bc:16:e6:
26:7b:c2:0e:5e:6a:1d:4a:0f:1a:b8:d0:fb:cd:04:
59:5e:b0:79:9c:bf:34:66:6e:1c:a8:5e:0c:23:32:
67:48:f0:ea:74:59:e9:41:62:0d:3e:38:d1:d9:1a:
55:97:b5:12:c3:df:38:30:e6:74:fb:de:31:fc:d4:
04:22:20:c3:e4:f7:70:3c:15:9f:1f:b1:9b:89:0b:
cb:9c:4c:9e:4c:16:41:3d:2b:03:94:33:37:77:39:
f8:0a:dd:25:2f:94:70:18:11:97:30:72:ca:77:1a:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:32:41:FA:B8:EE:52:9C:4A:2E:E5:1A:C6:D7:23:81:7C:B4:F2
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.14.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1a:81:66:ed:d8:24:9c:fc:21:2e:d7:e9:c2:ec:e4:a9:45:
8f:0a:45:30:2f:78:8d:00:ca:35:ca:a5:dd:95:22:b3:10:a5:
b0:c6:a9:ad:6b:fe:39:62:25:1d:58:10:f9:d6:77:b0:22:8c:
a0:ff:16:24:37:c1:d7:18:03:30:e6:80:bb:5a:17:2a:f7:08:
63:66:85:4a:b8:b5:94:3c:11:ad:df:26:16:c4:c2:96:85:8e:
b3:85:87:fb:29:8f:2f:3b:c1:c5:b6:42:ad:f1:f4:86:2d:9e:
44:46:55:f2:dc:5f:04:bb:97:e2:71:ad:17:09:4e:da:ef:b6:
fe:f7:f8:62:d7:ba:6b:7f:38:d0:b4:67:b6:16:11:ef:af:b8:
31:e7:bb:33:4c:ec:5e:29:84:15:93:c3:e5:b8:7a:27:7d:56:
67:31:56:eb:b4:11:98:e6:be:31:3a:9c:80:6e:8c:07:db:49:
06:31:4d:84:41:b8:82:85:4b:1f:ca:42:12:69:bd:4a:2b:c5:
0b:a5:eb:92:65:4d:6b:00:e7:9c:9f:04:e4:42:75:02:c4:6f:
a0:0e:32:45:89:27:26:68:07:0a:2e:8f:be:30:ae:70:86:0b:
68:10:75:4c:34:75:2e:f9:d6:4c:9b:0b:31:cb:13:80:34:4c:
12:7b:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:50 2026 by rpki-client