This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Fth4y1JvRliX8sFMPtCTEK0WtuY.roa
File: Fth4y1JvRliX8sFMPtCTEK0WtuY.roa (raw, json)
Hash identifier: TRUfro8+FsZWsLq97jR8ptFIWN1D6HvvZigOs/z3Bvw=
Subject key identifier: 16:D8:78:CB:52:6F:46:58:97:F2:C1:4C:3E:D0:93:10:AD:16:B6:E6
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758ECEB388F55962714917FC6B7EDB9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Fth4y1JvRliX8sFMPtCTEK0WtuY.roa
Signing time: Thu 01 Jan 2026 02:17:55 +0000
ROA not before: Thu 01 Jan 2026 02:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21010
IP address blocks: 62.87.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ec:eb:38:8f:55:96:27:14:91:7f:c6:b7:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d878cb526f465897f2c14c3ed09310ad16b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:d0:f7:33:58:4b:10:d9:2a:96:42:c1:8c:
a8:26:8c:5d:ca:e9:44:a7:79:ad:7b:e9:b7:0d:71:
d9:4c:f1:10:5e:77:48:5d:0f:0f:d8:19:54:0d:22:
e7:a4:69:1d:0f:6f:cf:2b:f9:96:a1:d9:a8:74:b7:
d6:65:4b:f4:f1:f1:93:ba:d1:66:11:52:25:02:d2:
e2:43:56:05:cf:ca:f2:ca:af:2f:7a:28:83:79:66:
17:37:c7:b3:1a:56:ff:ed:c1:97:e4:0b:8f:a1:f1:
47:71:f9:d4:ed:08:b1:0a:7c:83:7c:c4:1a:46:a7:
49:d5:ee:41:94:0f:a0:db:a3:b3:d2:a1:4e:09:ef:
29:01:06:26:7d:0b:c7:f8:22:ab:fc:07:5a:a1:63:
cf:d0:88:03:a9:ff:30:eb:6c:a8:1f:84:6f:bd:00:
f5:22:c5:40:2b:b0:65:01:a3:14:3e:e2:fc:56:d6:
ff:09:33:33:4d:e7:c0:94:d3:c2:db:cc:d4:c4:bd:
d1:3c:30:46:0c:c9:60:ad:66:03:31:c4:2b:88:e0:
db:c7:9c:ae:fb:c7:4c:bd:51:46:3a:cf:6c:07:6a:
9c:c7:1b:bc:7c:fd:b8:5e:97:e5:0b:45:19:09:2d:
ec:c3:43:d0:25:9a:d9:c9:0b:a3:94:b4:72:7e:b5:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:78:CB:52:6F:46:58:97:F2:C1:4C:3E:D0:93:10:AD:16:B6:E6
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Fth4y1JvRliX8sFMPtCTEK0WtuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.87.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ec:be:fb:0b:74:eb:c0:ae:12:49:bf:4d:48:40:35:77:ef:
0b:3f:f3:74:7f:e9:06:d0:02:9e:0e:9b:ab:a9:63:06:73:47:
a5:04:27:43:c1:88:9d:f0:6c:3c:d5:2d:8b:27:87:03:0d:d5:
49:e1:23:37:7a:56:58:e2:18:72:e5:98:0a:ea:23:66:d5:fc:
2a:ce:f6:c6:e5:07:3d:ca:68:a4:e1:45:4e:09:ba:a0:24:72:
29:a5:40:8f:77:91:ca:e6:47:b2:95:68:b3:47:bf:6b:5b:6a:
bd:ce:70:90:06:84:62:33:a6:53:19:0a:c5:5a:10:d3:07:1a:
98:52:47:b5:60:6e:9f:87:e9:06:ae:d5:56:25:13:9c:77:da:
80:aa:dc:1d:00:64:f3:19:15:a9:f0:ad:a1:bd:5a:dd:26:f3:
2a:91:3c:9d:b9:28:82:fe:10:a8:bd:17:ad:d5:3a:0e:3f:1a:
dc:f9:6c:e1:53:62:2d:c5:82:2a:b8:99:a4:bf:f3:6f:eb:1c:
df:63:e8:52:9a:f4:2a:aa:e1:0c:ce:97:21:fd:2c:b4:e7:6e:
1d:fb:dd:fb:fa:f2:91:c7:a6:6b:f5:5b:db:2c:4e:d9:70:7c:
24:65:2a:5c:c0:75:5d:3a:b7:3c:2b:3d:f4:dd:e3:5c:68:29:
67:a8:66:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:43 2026 by rpki-client