This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa
File: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (raw, json)
Hash identifier: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=
Subject key identifier: FC:AD:B8:E8:EF:A9:6E:FD:CB:22:64:7F:35:B1:A5:D1:4B:A4:D2:6B
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019B7C11F8E07B9B56ED4E07BBF0A5A826B3
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa
Signing time: Fri 02 Jan 2026 00:18:30 +0000
ROA not before: Fri 02 Jan 2026 00:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54128
IP address blocks: 213.86.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:f8:e0:7b:9b:56:ed:4e:07:bb:f0:a5:a8:26:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 00:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcadb8e8efa96efdcb22647f35b1a5d14ba4d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:b6:15:1c:21:1b:6c:39:7e:48:8d:45:3c:
ae:a8:25:f0:60:1f:6a:d2:29:40:e9:5f:62:aa:01:
d8:cd:fb:ee:91:84:cc:23:82:f4:a8:3d:2e:8c:d1:
1c:9c:f0:b5:f8:44:8d:34:6f:50:73:19:64:87:1b:
12:cb:3b:98:34:5f:ae:1c:33:d2:82:50:1c:79:49:
3b:c9:26:c0:57:2e:b1:a4:2e:1c:7e:47:73:52:12:
ca:a5:ed:98:92:a4:d6:3b:6a:b5:f1:21:e2:5b:e5:
07:41:89:20:e1:02:e3:6a:fa:37:cd:1f:94:ed:93:
f7:fd:0a:65:d6:05:6c:78:fa:e8:dc:cc:6b:04:62:
71:35:26:ae:e4:b3:b3:17:c9:db:75:2e:95:13:a8:
0c:96:3e:3d:a5:68:6b:83:60:6e:09:a5:df:05:e0:
19:2c:f0:3d:f4:a9:6a:b6:a1:d4:5a:d6:3b:df:b3:
a4:0b:00:8c:1e:ce:79:40:dc:cf:6e:3e:c7:0a:b2:
69:70:fc:46:97:99:54:3a:37:6b:91:77:d8:0d:f7:
9e:2f:eb:03:fd:48:1c:ab:60:37:79:59:1c:f6:04:
1e:19:cb:2b:bd:b7:2d:6e:70:da:ec:9f:d3:40:62:
0e:0f:ed:5e:aa:7b:8c:41:b2:e8:e0:5e:f6:ab:10:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:B8:E8:EF:A9:6E:FD:CB:22:64:7F:35:B1:A5:D1:4B:A4:D2:6B
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.86.124.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c4:4b:d1:83:7a:18:3a:2a:8d:5a:bd:6e:97:54:7f:e6:cc:
67:0d:27:af:f5:d1:ba:34:98:55:df:b6:ed:f8:ea:22:29:46:
d0:03:3a:0b:61:49:f4:97:a3:48:92:fc:1d:60:db:76:93:b5:
08:d3:4f:12:73:95:20:28:f3:ab:75:53:29:0a:d4:53:92:10:
63:93:86:58:94:71:f7:e7:f3:58:0c:4c:9b:3b:4a:4d:20:f2:
1e:ca:bf:cc:f8:92:ac:26:98:7e:1b:1c:23:93:7d:3c:74:86:
2a:1c:87:cd:30:40:2b:24:c1:f2:1f:f9:61:1f:82:28:85:09:
22:72:2d:d4:36:5c:d0:f0:57:e1:25:82:bc:55:2c:bb:76:67:
46:7f:b7:94:cd:90:84:07:2c:05:32:bf:ea:dd:08:8a:bf:7d:
c4:ea:d4:92:48:80:75:60:13:a6:b9:28:17:ca:09:c7:37:61:
05:5a:3b:39:4e:42:73:a0:75:fe:98:2c:6c:1b:59:04:3c:68:
b0:67:b0:78:42:5d:a0:df:3a:dd:d4:cc:bd:0a:3a:08:5a:6c:
7d:1b:ef:32:09:0d:b2:ed:1b:cd:35:35:9f:25:26:30:6a:7e:
f2:37:bd:0d:79:b0:37:91:15:2d:d6:cd:9e:3b:cb:5c:52:c8:
ed:0d:15:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Efjge5tW7U4Hu/ClqCazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjYwMTAyMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2FkYjhlOGVmYTk2ZWZkY2IyMjY0N2YzNWIxYTVkMTRiYTRkMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztS2FRwhG2w5fkiNRTyuqCXwYB9q
0ilA6V9iqgHYzfvukYTMI4L0qD0ujNEcnPC1+ESNNG9QcxlkhxsSyzuYNF+uHDPS
glAceUk7ySbAVy6xpC4cfkdzUhLKpe2YkqTWO2q18SHiW+UHQYkg4QLjavo3zR+U
7ZP3/Qpl1gVsePro3MxrBGJxNSau5LOzF8nbdS6VE6gMlj49pWhrg2BuCaXfBeAZ
LPA99KlqtqHUWtY737OkCwCMHs55QNzPbj7HCrJpcPxGl5lUOjdrkXfYDfeeL+sD
/Ugcq2A3eVkc9gQeGcsrvbctbnDa7J/TQGIOD+1eqnuMQbLo4F72qxCNywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPytuOjvqW79yyJkfzWxpdFLpNJrMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvX0syNDZPLXBidjNMSW1SX05iR2wwVXVrMG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VZ8MA0G
CSqGSIb3DQEBCwUAA4IBAQCUxEvRg3oYOiqNWr1ul1R/5sxnDSev9dG6NJhV37bt
+OoiKUbQAzoLYUn0l6NIkvwdYNt2k7UI008Sc5UgKPOrdVMpCtRTkhBjk4ZYlHH3
5/NYDEybO0pNIPIeyr/M+JKsJph+Gxwjk308dIYqHIfNMEArJMHyH/lhH4IohQki
ci3UNlzQ8FfhJYK8VSy7dmdGf7eUzZCEBywFMr/q3QiKv33E6tSSSIB1YBOmuSgX
ygnHN2EFWjs5TkJzoHX+mCxsG1kEPGiwZ7B4Ql2g3zrd1My9CjoIWmx9G+8yCQ2y
7RvNNTWfJSYwan7yN70NebA3kRUt1s2eO8tcUsjtDRWF
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:17 2026 by rpki-client