This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/F7PDvpn2QT60u98U-B9_BniGv6I.roa
File: F7PDvpn2QT60u98U-B9_BniGv6I.roa (raw, json)
Hash identifier: o6+nW99K+UNhSND42qU+AfPD+43WdjVx5KouvSDpigQ=
Subject key identifier: 17:B3:C3:BE:99:F6:41:3E:B4:BB:DF:14:F8:1F:7F:06:78:86:BF:A2
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019B7D5B25CC554DA1C78402521CE0C75408
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/F7PDvpn2QT60u98U-B9_BniGv6I.roa
Signing time: Fri 02 Jan 2026 06:18:03 +0000
ROA not before: Fri 02 Jan 2026 06:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34918
IP address blocks: 89.44.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:25:cc:55:4d:a1:c7:84:02:52:1c:e0:c7:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 2 06:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b3c3be99f6413eb4bbdf14f81f7f067886bfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:44:44:3d:d6:b2:de:63:2b:47:dc:65:5b:
63:f0:5a:be:d6:37:1a:4a:19:65:57:eb:28:a3:b4:
19:43:ff:3b:5c:f9:e7:fe:91:49:c4:49:c4:de:59:
05:1b:e3:67:d1:e4:be:3e:ef:b8:c1:e0:39:66:29:
fd:e7:34:f0:9b:c7:2c:41:62:14:08:ca:35:aa:7d:
38:80:0f:cb:ec:d9:45:e7:a5:8d:ba:69:b9:07:34:
d4:09:47:85:5b:f9:7f:0a:f7:ed:b6:0f:f4:0f:15:
bf:25:68:48:17:62:f1:36:f4:5c:b4:42:3f:e0:98:
e3:b0:a8:05:6e:a6:0b:11:72:41:b8:03:43:4c:d6:
56:a4:35:a4:f0:b0:f6:d2:cd:5e:e7:48:24:3e:46:
08:e4:07:cd:93:68:21:61:00:3c:05:f6:86:65:ee:
4d:7f:b7:c2:62:e0:ba:c6:83:f3:e0:14:d0:ce:3d:
6d:e8:36:7f:24:ca:2c:66:4e:b3:98:8c:e8:86:7a:
86:c4:20:26:c9:ff:97:f9:86:af:bf:f5:c0:83:00:
c6:b2:73:21:ab:79:21:e1:e8:4f:8a:b9:23:83:06:
92:76:7c:4c:9b:ca:f5:a4:87:c1:de:ba:38:78:0e:
86:f1:e0:02:52:b7:e7:94:da:72:a5:e8:3c:e2:af:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:C3:BE:99:F6:41:3E:B4:BB:DF:14:F8:1F:7F:06:78:86:BF:A2
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/F7PDvpn2QT60u98U-B9_BniGv6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:48:a8:be:7f:0b:a4:74:0d:8e:89:56:b0:7e:02:70:32:61:
56:24:69:b0:bd:a4:e6:3f:7c:4d:56:c5:38:f0:74:14:d1:36:
06:b4:62:97:f6:d4:57:42:13:70:ea:fa:d9:66:00:02:f9:93:
3b:7f:8e:ed:56:0a:65:06:71:04:69:67:46:12:68:f5:e0:fe:
f1:4b:0a:db:7e:e1:b9:a4:49:fa:db:45:5a:8c:39:d9:84:b8:
27:50:15:8d:b0:be:7a:13:02:7a:72:2e:11:07:e5:17:c2:88:
bb:85:82:44:b4:90:20:9a:0e:f6:5b:5e:5a:04:76:a3:84:ff:
f7:69:fa:c2:6b:21:e9:ea:5e:da:8b:98:f1:4e:aa:b1:16:26:
f2:ca:ea:af:7b:d2:8d:e4:e3:e2:26:80:31:39:4e:06:bc:8f:
b4:b2:e0:57:dd:d8:a0:1e:f0:7f:5d:75:9c:fd:4d:67:20:34:
a0:73:b9:24:eb:e1:51:61:0a:bd:0b:5f:94:96:d6:1e:32:94:
9e:25:dd:39:fc:b0:c4:8c:dd:50:f2:20:f5:d5:dd:6f:7d:c4:
7b:7c:af:bd:49:c0:63:ee:d3:2c:9e:89:28:1b:e2:7f:bc:6c:
5b:8f:fd:35:47:c4:20:24:53:86:f9:1b:e2:9a:9b:0a:a9:86:
c1:28:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:13 2026 by rpki-client