This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa
File: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (raw, json)
Hash identifier: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=
Subject key identifier: 17:59:D4:2C:CF:F9:38:0A:79:B2:79:49:D3:05:33:4D:57:BF:F0:F9
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 019B7B369BE1241FB91B83CFFBFCF4B9CE44
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa
Signing time: Thu 01 Jan 2026 20:18:55 +0000
ROA not before: Thu 01 Jan 2026 20:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57694
IP address blocks: 31.172.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:9b:e1:24:1f:b9:1b:83:cf:fb:fc:f4:b9:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 20:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1759d42ccff9380a79b27949d305334d57bff0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:f6:6c:66:22:6c:14:f5:97:f5:8e:da:d4:
6b:86:8d:69:b2:e4:9b:b4:01:72:8e:1e:57:b4:ac:
47:73:61:e8:5d:ae:ba:05:b3:fa:10:ed:52:69:6d:
76:95:8c:ff:67:ed:8e:fc:a6:74:ba:e4:f5:c5:df:
14:ca:2f:c3:bd:b3:bb:c5:dc:1c:45:9c:f0:17:64:
27:ba:20:18:09:a0:cd:f0:4f:40:cc:63:88:10:1c:
7c:83:34:11:90:01:61:04:7f:55:b6:ae:53:1c:7c:
24:9e:18:32:1c:9f:bb:8b:d6:98:bc:5e:ea:9d:ea:
e8:54:02:b2:88:00:62:98:e0:a7:37:bd:90:66:56:
17:da:8c:dd:a9:7c:65:9a:b5:0a:a7:02:31:e4:b2:
d0:42:11:03:77:5c:cd:51:3a:ee:cc:7c:8f:0e:ad:
7f:2a:70:c2:97:81:a8:41:30:0a:ad:12:34:20:3b:
04:5b:2d:ee:4e:af:bc:8a:19:69:ee:98:22:30:8f:
02:d5:5c:a4:7a:4b:57:46:dd:16:90:b9:fb:4b:8f:
38:0b:96:af:14:fb:7a:e8:00:62:46:2b:bd:76:e9:
a9:88:bc:42:d9:df:6b:c5:a1:6e:94:01:2b:4f:f9:
a7:ab:f5:95:02:fc:91:c5:e6:29:e5:ec:af:9a:44:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:D4:2C:CF:F9:38:0A:79:B2:79:49:D3:05:33:4D:57:BF:F0:F9
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.239.0/24
Signature Algorithm: sha256WithRSAEncryption
60:43:c7:5c:81:ff:37:59:7b:d4:ce:48:5f:42:67:5f:ed:46:
24:5a:23:c1:32:a5:ef:fe:77:63:eb:7a:62:af:0d:26:d1:84:
7c:47:45:39:56:8b:bb:d9:69:8f:c2:2f:e6:64:fc:86:e4:dd:
42:5f:94:35:ab:6d:70:c4:c2:58:db:08:62:7d:a2:8f:bd:69:
58:13:c0:7f:37:31:05:81:f1:90:1b:5c:4c:fc:80:9d:ec:bc:
ef:1f:4e:bf:ee:46:98:82:a4:2c:d7:7f:6b:ba:e7:2f:9e:f7:
9b:3d:7f:a4:69:62:b7:ce:2d:d8:94:9d:65:5d:0c:11:b6:4b:
d2:c2:86:d1:de:df:58:bb:a4:11:d6:84:d0:72:08:8a:85:0f:
d5:7f:18:21:56:12:81:50:e4:f9:c0:25:49:79:54:d5:5e:9a:
71:17:a6:46:3d:36:e7:95:d0:85:ab:b6:f4:26:e4:15:75:ec:
25:36:eb:e3:48:c0:1e:85:65:02:3b:fd:da:3f:27:39:0f:48:
2a:c6:c7:e7:20:b3:92:a8:1c:ca:b8:86:83:d5:bc:13:1c:a5:
f4:28:fb:4b:ed:82:6a:d5:e2:86:7c:cc:cf:c5:82:17:38:98:
df:18:12:60:5c:5e:e2:67:0d:bf:72:76:f0:4b:f1:11:41:86:
da:af:ab:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:40 2026 by rpki-client