This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa
File: RF-tJIO2NICablpWJ0rxXstB-5E.roa (raw, json)
Hash identifier: B2eozTRe5cg7SctioXDuhV7y1QMBLlq9hEQ1DOOBwlc=
Subject key identifier: 44:5F:AD:24:83:B6:34:80:9A:6E:5A:56:27:4A:F1:5E:CB:41:FB:91
Certificate issuer: /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial: 019B7F1553A2D24F4A7C5189C9D4DA4F7C70
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa
Signing time: Fri 02 Jan 2026 14:21:02 +0000
ROA not before: Fri 02 Jan 2026 14:21:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204896
IP address blocks: 2001:67c:17c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:53:a2:d2:4f:4a:7c:51:89:c9:d4:da:4f:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
Validity
Not Before: Jan 2 14:21:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=445fad2483b634809a6e5a56274af15ecb41fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:9d:44:2b:23:04:aa:16:5a:7e:8c:29:76:
ec:2d:d9:07:55:dc:63:22:70:5e:bc:c5:24:6a:34:
95:a2:07:c2:2b:cd:c3:d3:53:78:4c:58:3b:e9:04:
52:1a:ef:50:52:00:50:5a:18:d7:d0:ba:64:29:f7:
65:dd:59:d3:d6:86:1a:e9:b9:03:4b:96:db:46:f6:
55:92:9c:47:c0:de:61:42:fe:e6:fd:43:f7:a7:ee:
e2:1c:9c:6c:30:40:1b:70:1a:b4:cf:a6:f0:27:d5:
76:e7:ef:d1:ed:d8:65:ef:3d:c0:15:3f:54:4c:17:
f3:8c:92:99:db:12:70:66:e9:04:3f:cd:1b:b7:80:
2b:80:f0:c8:9a:ba:f4:ba:cd:62:0f:b9:fb:48:30:
25:ae:06:f8:36:bb:49:a4:4c:8c:22:aa:1e:39:f9:
fc:fc:f4:0c:69:3c:ed:e3:e9:d8:2b:16:7a:75:d4:
e6:69:ed:02:91:8f:fb:76:94:bb:c3:dc:e0:b7:f1:
3b:e9:e0:83:a2:36:ac:7f:f3:e3:41:37:d3:02:85:
38:c2:0d:9e:d7:6d:12:2c:4f:3a:14:38:84:2f:c7:
7b:7b:6f:d4:30:7b:48:34:b4:28:9e:d9:57:c9:1b:
80:56:75:ab:36:92:01:a0:30:85:46:15:4f:8c:a3:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:AD:24:83:B6:34:80:9A:6E:5A:56:27:4A:F1:5E:CB:41:FB:91
X509v3 Authority Key Identifier:
keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/RF-tJIO2NICablpWJ0rxXstB-5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17c0::/48
Signature Algorithm: sha256WithRSAEncryption
22:29:2e:65:89:90:a5:55:07:90:a0:96:2b:b7:f9:c4:51:b6:
3b:92:fb:66:55:ac:08:71:30:aa:5e:8c:28:ff:e8:00:83:b1:
eb:16:e8:7a:76:ae:07:95:87:5b:b6:57:9e:66:4d:6f:41:35:
d1:50:d0:36:52:74:16:ee:57:40:2d:f9:1a:e3:6b:e6:fc:c0:
04:61:d7:26:42:7a:b5:2b:35:2a:bb:96:62:d9:c9:80:27:a1:
01:f3:56:77:90:0e:d6:52:30:31:0d:66:38:2c:1b:6e:f3:b3:
ef:63:d1:f4:f3:7d:1a:c2:55:06:de:35:4c:5a:64:8c:3f:a7:
5b:11:01:08:c8:cd:d6:49:00:85:33:f1:0b:10:ac:7f:70:0a:
f9:d6:30:37:8c:01:0e:40:95:ca:ee:ae:2a:b1:1d:b8:e7:a4:
b4:41:ea:1f:83:3c:23:1d:f9:38:00:f8:30:3f:08:41:2c:65:
41:09:14:69:63:43:fe:47:c1:be:83:fd:6c:a7:e7:8e:68:a0:
1b:be:9e:6b:03:c5:b0:0a:07:39:13:ed:3a:40:41:0a:b0:12:
4c:f8:50:a6:75:2f:b0:54:d2:a2:45:7d:dd:c2:7a:09:85:36:
c5:c9:ef:0c:2c:9b:b5:c2:53:b8:ea:49:4e:c3:04:a5:18:bb:
70:c1:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:21 2026 by rpki-client