This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvYLhToBGqRx24g9RHDfd_1byJg.roa
File: FvYLhToBGqRx24g9RHDfd_1byJg.roa (raw, json)
Hash identifier: 9fvvOA3t5/ORA3Zkd8eXiNhB5NKBpaWrn2NDCauigx0=
Subject key identifier: 16:F6:0B:85:3A:01:1A:A4:71:DB:88:3D:44:70:DF:77:FD:5B:C8:98
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F850C1BDE0B0AEE5ED1184973B6639F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvYLhToBGqRx24g9RHDfd_1byJg.roa
Signing time: Fri 02 Jan 2026 16:23:04 +0000
ROA not before: Fri 02 Jan 2026 16:23:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210442
IP address blocks: 95.46.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:0c:1b:de:0b:0a:ee:5e:d1:18:49:73:b6:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:23:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16f60b853a011aa471db883d4470df77fd5bc898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:72:c5:7c:e4:06:8d:99:3f:cb:84:f0:9d:
db:2d:d3:f7:d2:ef:a1:b9:3c:1e:70:47:b7:02:5d:
c4:7b:9b:d7:1c:26:8e:cb:7a:ad:e2:c1:05:7d:06:
47:6d:35:0f:37:71:52:75:b1:72:1b:be:0e:68:ac:
f1:f2:d2:5c:b4:30:d4:ab:3f:56:32:3a:f0:17:fa:
30:45:02:eb:e1:b0:03:d4:83:66:77:60:77:c1:4f:
91:16:35:e2:a5:4f:97:99:ba:02:6e:72:5a:00:5e:
e1:86:cc:32:a3:ea:97:d3:6a:cc:41:ae:e0:70:05:
7e:1d:d1:fb:bb:53:7f:a3:a6:bf:d5:39:0b:f7:a8:
4c:42:24:f9:84:6d:8a:b8:d7:77:36:a6:49:db:c5:
d3:87:5d:4a:2e:81:fa:59:84:e1:a5:19:95:f4:d9:
0c:67:ee:73:98:8d:71:78:69:27:4f:37:e0:0c:29:
0e:10:33:f8:47:0d:d3:7f:d5:0c:76:f9:ce:05:e6:
7d:e0:33:29:bc:f7:4a:65:cc:68:a6:69:6f:08:0e:
d1:56:47:e1:e3:e8:ac:9e:d7:d1:b9:c4:87:b8:d5:
4c:89:8a:f7:34:fa:04:9c:9b:0e:f3:38:21:a8:18:
2e:02:5b:41:28:f2:4d:d5:d1:d7:49:a5:fb:70:ef:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:0B:85:3A:01:1A:A4:71:DB:88:3D:44:70:DF:77:FD:5B:C8:98
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvYLhToBGqRx24g9RHDfd_1byJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:68:bf:27:c7:bc:65:14:53:60:f1:09:3e:0b:e4:1a:0b:b4:
cd:fb:39:b3:f8:4f:ac:1f:89:c9:88:84:be:07:06:bd:cc:4f:
b5:0b:01:cd:2b:af:f4:df:84:ce:02:0c:02:a7:e7:58:8d:26:
28:2e:1b:33:5f:42:8c:17:8d:c9:4b:e1:49:34:c3:61:ca:1a:
5e:c1:47:6c:36:b6:82:1a:d5:9d:2e:66:e3:8c:bb:ae:dd:63:
85:a6:27:94:b0:87:35:a1:ed:dd:77:54:3d:f5:4c:44:aa:95:
2e:af:0a:3a:b0:1b:a3:40:58:04:b1:6e:65:ec:b2:3c:9b:88:
11:34:81:e1:c8:e0:97:08:f2:7e:d7:cb:2a:d7:8b:11:d8:0d:
5a:2a:76:5a:42:22:d3:f2:26:22:b4:15:8f:20:39:7e:2d:61:
1c:94:9c:4e:d9:c3:0f:d4:64:2a:66:f9:02:b2:22:fb:10:4f:
88:9d:fd:14:77:c0:ae:5c:eb:a6:dc:a1:58:c1:e4:d4:f9:d5:
d3:83:f2:66:d0:25:6b:04:de:71:e8:f8:5b:7e:96:e9:4f:32:
db:1d:56:a9:d8:3b:d6:4d:7b:16:ed:fd:15:37:ca:fa:75:4d:
69:07:8e:a2:f0:57:ac:fc:42:0b:bf:53:60:56:21:b6:2c:8d:
14:8f:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:07 2026 by rpki-client