This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FrUnjfKCvGdTklpw5yjishp0Vp0.roa
File: FrUnjfKCvGdTklpw5yjishp0Vp0.roa (raw, json)
Hash identifier: socEogWsYtSV64aAUP7N8mo0FIS+nbU+IRfnzQIfWZ8=
Subject key identifier: 16:B5:27:8D:F2:82:BC:67:53:92:5A:70:E7:28:E2:B2:1A:74:56:9D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019A9E13494268996DB1DA227817EF3DB8A8
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FrUnjfKCvGdTklpw5yjishp0Vp0.roa
Signing time: Wed 19 Nov 2025 21:44:15 +0000
ROA not before: Wed 19 Nov 2025 21:44:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61087
IP address blocks: 194.39.110.0/24 maxlen: 24
2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:9e:13:49:42:68:99:6d:b1:da:22:78:17:ef:3d:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Nov 19 21:44:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b5278df282bc6753925a70e728e2b21a74569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:8c:ac:05:9a:36:07:c2:19:0b:99:6a:ce:
8f:2e:9c:25:e8:5a:a9:1d:f9:c1:54:84:7a:1b:88:
11:8c:17:45:a1:8d:f1:2b:9a:18:1d:76:e6:a9:40:
30:83:34:b9:a8:18:de:67:51:0b:ab:91:13:9b:d8:
38:2b:3b:e4:76:b7:ba:fb:01:b5:e7:f8:b0:0e:08:
7c:d0:c5:83:73:26:6a:9e:a9:7f:e0:eb:ec:1c:f9:
55:de:e1:5f:1d:ef:f4:6b:14:a1:d5:45:b2:f1:6a:
35:60:20:37:dc:8f:f2:73:ed:1b:c2:d9:fc:8e:6e:
d6:82:18:ec:89:7f:5d:09:78:6e:93:93:e0:9c:ce:
94:d6:26:49:9e:98:ce:76:c5:95:c5:63:a2:04:45:
f6:77:ce:35:b4:0d:5c:ac:a4:90:e5:18:07:8c:29:
8d:7a:b7:ae:90:4a:73:aa:f4:f1:71:64:8e:13:1c:
c2:5a:05:1e:5f:21:c4:7b:4e:a8:c5:20:16:a0:51:
f5:65:9d:83:52:e3:a1:dd:0b:3f:d3:4b:95:fe:db:
e6:c8:87:71:94:68:28:d4:89:a6:20:ee:d6:26:9c:
ac:8c:09:c1:44:41:b0:49:77:f3:c0:21:53:12:82:
31:f1:ab:e4:ac:7b:35:5d:32:45:44:d5:b7:aa:eb:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:27:8D:F2:82:BC:67:53:92:5A:70:E7:28:E2:B2:1A:74:56:9D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/FrUnjfKCvGdTklpw5yjishp0Vp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
IPv6:
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
7d:68:f4:53:ca:2e:e2:6c:3b:ac:a3:62:17:75:42:cb:98:23:
2e:af:33:60:89:7f:9d:77:6f:7c:96:50:04:4a:be:04:b7:63:
20:9f:04:5b:d7:cd:c3:0b:6c:8d:d2:22:5c:00:e9:e6:5d:dc:
95:f4:4c:44:5d:f7:ed:b0:f2:5a:ce:59:00:51:01:33:f5:1d:
a7:6e:d6:a4:d2:6e:cf:05:09:7d:40:fc:23:47:d0:ad:79:95:
b6:f9:0e:ed:91:3a:b0:3f:e5:e3:82:91:ff:ca:49:c8:a2:49:
bf:2e:16:ae:b3:cc:e6:55:0e:b5:d6:57:48:eb:e2:11:fd:75:
29:20:89:16:97:e1:21:23:28:5e:cf:e3:a1:c6:dc:03:f8:fa:
2b:57:ca:88:99:5d:2e:7b:1f:09:59:89:da:7e:aa:38:bf:ce:
c0:a6:a0:60:75:54:12:7d:1f:05:e8:51:cd:c9:5f:d8:32:99:
ae:c1:7f:92:4a:96:e8:f2:63:e3:a7:0f:2d:07:71:30:9a:6a:
40:32:92:b5:24:29:43:3f:e8:ec:19:ea:40:ec:f9:26:c9:9d:
5e:59:4e:d5:83:0f:00:ec:e0:aa:bc:f6:d1:3c:02:26:c3:01:
e9:75:8b:79:20:8c:09:8d:28:46:47:86:46:25:f3:76:26:65:
b6:a6:c6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:31:05 2025 by rpki-client