This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa
File: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (raw, json)
Hash identifier: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=
Subject key identifier: FB:C5:DC:E5:48:45:90:59:1E:49:E9:41:23:56:66:1A:C4:ED:7D:CB
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019B79ECF3463F680A9E57B2769F363A3A52
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa
Signing time: Thu 01 Jan 2026 14:18:50 +0000
ROA not before: Thu 01 Jan 2026 14:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204500
IP address blocks: 195.72.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:f3:46:3f:68:0a:9e:57:b2:76:9f:36:3a:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 14:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc5dce5484590591e49e9412356661ac4ed7dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:00:7d:37:be:8b:0b:4e:6f:5d:1b:1f:e7:
c0:4d:27:7e:5e:9b:b8:0e:e2:80:50:6d:64:e2:91:
0a:b7:d4:19:81:43:37:98:25:78:37:18:53:70:96:
7d:a0:14:f2:d4:f8:c1:80:df:91:b2:e5:f5:48:4c:
d4:95:ca:98:f7:4f:b3:ae:1b:64:a9:c8:b4:84:1c:
42:7c:85:58:99:bc:51:06:72:43:3e:3e:cb:0e:49:
af:70:d0:d4:b3:17:90:71:b5:00:ac:a9:ed:d8:27:
4a:d1:36:6d:35:7f:98:c1:bb:ef:88:c4:27:f4:f3:
58:1e:f8:f4:ac:98:52:ea:c1:7f:bd:d9:8e:6e:10:
9c:63:9e:ee:2f:93:09:08:2e:cc:dc:00:59:5b:83:
f9:00:92:3b:00:bb:b4:e2:5e:cc:fb:78:ef:5c:3c:
27:d4:ec:82:f8:15:de:7f:0f:ac:ce:17:f8:57:f0:
89:52:c9:2f:cc:ca:48:90:59:04:cb:c4:09:bb:3e:
43:15:d6:7c:81:51:66:63:7f:0a:fb:7b:7c:66:35:
61:bb:fc:e5:e6:31:96:cc:d0:32:6a:e5:3b:fc:55:
e1:54:70:c9:10:16:e4:9b:75:dd:bd:be:33:2e:bc:
f0:62:59:52:e3:10:a5:e9:5f:77:d5:03:a7:0c:7a:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:DC:E5:48:45:90:59:1E:49:E9:41:23:56:66:1A:C4:ED:7D:CB
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:04:93:21:03:10:2a:88:29:d9:21:e5:9c:ec:0d:a1:10:e1:
d5:3f:7d:9d:f4:0d:f3:c9:fc:71:54:4f:50:dc:b9:e0:a4:8f:
e4:3f:5b:e5:f6:a8:31:92:b4:04:9d:32:b5:a6:51:70:96:7d:
c0:16:99:32:61:a9:0c:96:cc:2f:0b:27:5d:bf:b0:70:65:2a:
fd:95:d5:a9:1a:2e:1a:dc:03:05:2c:ea:2b:85:10:e4:3a:7e:
8e:09:e1:8a:5b:bc:dc:11:10:a0:d8:02:c8:b8:a6:e9:b5:6e:
68:9a:67:51:74:34:79:8e:31:39:dc:fd:8e:b3:bc:63:de:fe:
6d:01:32:68:58:5f:14:35:54:3f:27:49:65:25:46:20:48:6b:
79:4f:54:ef:aa:f9:90:56:1f:b0:8d:d0:97:b9:2e:aa:98:1b:
45:67:31:18:23:7d:78:d0:c6:c6:fe:53:a3:d6:4b:a8:f8:69:
c2:07:b5:d6:18:c3:b0:c9:f6:4f:e9:f1:aa:3a:89:95:76:8e:
8e:24:2a:41:2d:49:8f:bf:7a:d6:3d:e4:62:02:3a:4a:94:66:
9a:a1:bd:94:26:fc:02:04:72:40:d3:bb:49:04:6b:8c:8f:1b:
c0:48:bd:14:13:e6:13:32:28:77:8d:42:02:f7:61:82:80:2b:
e3:c9:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:42 2026 by rpki-client