This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa
File: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (raw, json)
Hash identifier: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=
Subject key identifier: 15:ED:7F:3B:A9:6A:A5:9E:30:53:9D:4F:4B:22:51:97:9A:51:C6:0B
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019B7FF218D3363FD2E2FD7AB72E522E3404
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa
Signing time: Fri 02 Jan 2026 18:22:11 +0000
ROA not before: Fri 02 Jan 2026 18:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209115
IP address blocks: 94.247.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:18:d3:36:3f:d2:e2:fd:7a:b7:2e:52:2e:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 2 18:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15ed7f3ba96aa59e30539d4f4b2251979a51c60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:5b:92:9a:b9:47:51:25:06:1e:4f:f7:3a:
63:bd:2e:c4:08:41:c1:5b:e1:e5:17:69:0b:a8:cc:
0f:36:12:5e:1c:61:39:d0:9e:f5:31:02:a2:43:70:
b0:06:a2:42:c8:cb:48:91:98:2e:2a:3c:c4:42:7a:
5f:6f:cd:71:7e:ab:58:47:ee:e6:42:74:30:41:d3:
3b:9f:c7:b9:a7:ab:55:29:64:f3:f2:ea:00:db:69:
82:ff:d8:45:30:b2:33:26:5f:ec:c1:01:cf:61:98:
9a:3c:0b:d1:b4:1e:07:79:35:68:9f:b5:7c:34:36:
59:5f:52:5e:cd:bf:30:f0:63:c8:d9:ae:cb:89:ed:
ba:62:f9:19:73:63:9a:b1:b7:a0:4e:7f:a1:c7:21:
2c:3c:05:f1:05:23:67:e7:cf:85:16:61:3d:71:dc:
cb:7c:54:a8:1f:ae:e9:cb:bd:92:c2:a5:51:b3:3f:
e7:11:f8:ed:76:9b:e8:0e:f4:3f:43:da:4a:f6:be:
b4:0c:64:ab:09:f8:18:03:04:a1:02:a5:7f:f4:a3:
99:4a:c7:d2:87:7d:18:74:94:b0:ed:65:d4:12:10:
b0:ee:d7:51:33:b2:48:87:48:2d:32:ac:3b:6a:d9:
dc:68:c9:89:2e:2c:a1:eb:67:39:c4:9c:99:ce:c7:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:7F:3B:A9:6A:A5:9E:30:53:9D:4F:4B:22:51:97:9A:51:C6:0B
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.228.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:18:f1:c6:4b:c3:21:b7:aa:29:c2:3c:a1:4a:54:5b:02:f9:
28:a5:30:1c:2a:6d:7c:1c:40:e2:97:53:59:11:39:b5:92:e5:
3b:7b:ed:51:86:8b:f8:b5:ac:d0:c5:e0:81:a9:2e:ef:b4:2a:
ac:44:1f:44:be:a8:2c:5a:21:a9:8d:24:70:cc:fc:68:38:89:
4e:0c:60:05:50:ad:55:c6:1a:9c:da:2f:e6:e6:90:9c:77:53:
3c:fd:e6:1d:92:04:8d:c4:be:ab:f6:8b:13:bf:af:77:3d:ad:
80:09:ce:04:e7:f6:ee:f3:ae:e6:69:0b:d5:ea:00:e2:ce:1b:
5f:39:5b:a9:58:6d:82:02:03:9f:06:61:1f:f7:4f:ce:b6:ae:
03:82:c9:44:91:21:6f:44:2c:0d:a3:da:55:3f:1f:8c:f9:c1:
ae:aa:19:89:f1:11:d9:66:4e:0f:23:d0:e3:1f:b0:9d:7f:53:
34:72:7e:08:16:8a:09:72:12:95:79:aa:d0:15:1d:35:31:17:
20:8d:c3:cc:c0:3d:4f:1c:7d:22:2f:1d:d1:ea:32:e8:dd:d6:
ff:cc:3e:8c:ec:7f:04:71:72:85:08:84:58:7f:5e:ad:3f:b7:
0c:03:62:0b:12:ad:1d:80:6b:73:69:a2:20:22:ba:c0:33:e7:
ed:0d:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:43:48 2026 by rpki-client