This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_FkebbGKaHF8h7JXWHcc9fXjYgo.roa
File: _FkebbGKaHF8h7JXWHcc9fXjYgo.roa (raw, json)
Hash identifier: zXDFhFC905F3sZXJVpeT72Ryej9OzusVc0N4BG5TcME=
Subject key identifier: FC:59:1E:6D:B1:8A:68:71:7C:87:B2:57:58:77:1C:F5:F5:E3:62:0A
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019B7E37E8111F2EDAC7E4CF6A93D7D8CEE5
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_FkebbGKaHF8h7JXWHcc9fXjYgo.roa
Signing time: Fri 02 Jan 2026 10:19:11 +0000
ROA not before: Fri 02 Jan 2026 10:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35185
IP address blocks: 46.234.14.0/24 maxlen: 24
84.44.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:e8:11:1f:2e:da:c7:e4:cf:6a:93:d7:d8:ce:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 10:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc591e6db18a68717c87b25758771cf5f5e3620a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:09:6f:e4:b6:a0:90:44:9a:c1:66:eb:b8:
e6:aa:28:be:83:e8:ef:a7:f8:b8:31:83:d0:75:72:
09:3e:e0:90:34:20:0a:34:0d:9f:d5:4e:78:1e:8a:
28:2c:a4:54:ac:18:04:e1:a5:3c:56:b4:af:fb:b4:
92:e5:cb:2d:fd:58:11:dc:ce:26:1c:ab:cf:39:44:
b0:87:19:1f:e3:9e:20:da:13:be:82:e0:71:29:21:
d4:58:d5:85:5b:91:bf:6c:a8:40:43:03:f0:29:57:
c5:7d:a8:31:ff:57:43:11:02:1f:ed:9c:5f:46:06:
5f:86:33:3c:b6:db:b2:b3:04:12:8b:6e:3c:da:29:
22:ed:c1:97:3d:12:8f:1f:30:72:63:06:54:47:bd:
74:62:e6:f7:45:3b:a5:40:4a:82:cc:6e:5e:ba:7b:
f9:61:24:da:ca:d0:a3:63:7d:76:20:1e:8c:2f:21:
21:20:0e:1a:44:48:fc:11:ed:e3:8f:a6:1b:e6:34:
8c:1b:b5:dd:eb:3b:c2:65:81:ef:56:44:7e:59:7b:
c7:7d:1b:78:f2:c4:4a:b2:39:03:ba:51:2c:01:37:
d8:1b:95:e3:39:4e:59:c8:1b:2b:37:84:84:2f:33:
e0:35:62:d8:f1:8d:17:bf:94:b3:e3:72:16:03:af:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:59:1E:6D:B1:8A:68:71:7C:87:B2:57:58:77:1C:F5:F5:E3:62:0A
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/_FkebbGKaHF8h7JXWHcc9fXjYgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.14.0/24
84.44.7.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b9:d7:f5:ac:cb:90:ef:23:ef:a4:4f:0b:f0:d2:29:57:96:
e5:5e:f2:07:8d:50:c8:56:fd:3b:ea:4f:fa:a0:82:c5:f3:ea:
e0:73:61:98:a4:c9:b5:10:84:8a:a9:8f:5d:f3:7f:bf:6b:e8:
d8:0c:67:6e:94:96:76:35:2e:56:5a:5c:92:00:51:8c:8c:71:
89:21:9b:18:f1:3e:98:f2:eb:bb:a4:81:74:d8:dc:0d:db:fd:
14:14:b6:ac:a2:c4:d8:41:31:ba:7a:93:06:57:83:af:14:6f:
d0:49:8d:76:fd:fa:2f:c0:49:c5:32:f3:4e:f4:d1:17:41:7d:
8a:1b:ae:49:19:89:e1:7c:ae:86:c1:17:70:4f:ee:25:de:f0:
04:69:40:2e:9a:ec:92:42:c4:fe:51:c7:39:cb:58:37:6d:90:
ce:15:fb:74:01:38:b1:7e:13:2e:d2:df:3b:60:52:df:4f:8f:
e1:fd:cb:fe:67:e5:30:80:14:6a:fc:57:21:51:45:6c:84:4f:
a7:1f:26:5f:22:01:2b:d7:ae:9b:94:f4:46:5e:28:95:94:91:
02:25:67:f9:bf:f1:a3:e5:ac:b2:ff:ce:43:a6:84:a2:54:97:
b9:40:b7:9b:1c:a5:b1:d7:4b:10:ec:aa:a6:5f:8f:0e:2e:e8:
d7:db:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:48 2026 by rpki-client