This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/fVYSa0NF0rKJfH6lUMHroXq_h6I.roa
File: fVYSa0NF0rKJfH6lUMHroXq_h6I.roa (raw, json)
Hash identifier: LEn9pcZ1Tk/Gy+BsS9Rmr/QbWePO9YwcAnrS3Z8AYqs=
Subject key identifier: 7D:56:12:6B:43:45:D2:B2:89:7C:7E:A5:50:C1:EB:A1:7A:BF:87:A2
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 019B78A2C522C647BE8EDD0DAC6483F65729
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/fVYSa0NF0rKJfH6lUMHroXq_h6I.roa
Signing time: Thu 01 Jan 2026 08:18:11 +0000
ROA not before: Thu 01 Jan 2026 08:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204463
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:c5:22:c6:47:be:8e:dd:0d:ac:64:83:f6:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 1 08:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d56126b4345d2b2897c7ea550c1eba17abf87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:10:c5:b1:cf:84:b2:c8:61:bf:8f:aa:b4:
cb:0b:a8:4e:75:eb:0e:6c:a8:e7:91:0a:dc:30:eb:
bd:4e:3f:43:84:4d:b6:db:d5:ac:63:8f:ca:28:46:
ac:c9:23:8d:d1:d1:e5:df:2f:da:84:ea:a9:ff:ea:
95:51:37:6f:53:e8:22:61:3e:7b:9d:20:dd:81:04:
ae:1b:0a:4a:5e:d0:ab:6e:93:73:ed:e5:f4:8d:d1:
42:0c:70:63:37:07:2d:cb:5d:31:4f:f4:e4:da:79:
2e:88:0e:c0:95:5c:60:c3:b0:74:25:3e:2a:9f:05:
f8:57:51:57:fc:5c:12:28:65:81:ec:0e:0e:31:68:
80:41:54:af:28:13:b7:d5:54:b5:63:6c:8f:41:af:
46:55:e1:d3:b6:5e:01:11:16:d7:d0:05:de:04:7c:
5e:21:65:83:2a:59:d4:da:e3:51:28:86:8d:ea:f7:
30:d0:1a:d1:56:b8:57:f8:80:ff:28:ea:f1:d0:5e:
6c:16:bb:98:cb:d6:9d:e3:bd:25:3d:68:f7:77:c8:
2f:2e:00:15:26:70:96:19:4e:9a:9e:0b:be:ac:b4:
d5:f3:da:c5:78:75:e2:17:c3:1f:43:8b:ee:d3:5f:
29:14:ac:28:98:d1:cf:28:8e:61:a2:d5:ba:3b:e1:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:12:6B:43:45:D2:B2:89:7C:7E:A5:50:C1:EB:A1:7A:BF:87:A2
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/fVYSa0NF0rKJfH6lUMHroXq_h6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5f:a4:0a:d1:84:1a:b9:d2:d6:64:b2:4f:2f:5d:78:42:8f:
3c:c5:cf:a7:a3:00:33:70:3f:5a:2a:21:09:9f:3d:59:d8:8b:
3a:fc:13:c3:33:15:46:3f:f0:40:b4:dd:db:31:67:62:13:4e:
47:f4:00:2d:62:73:05:64:e5:73:fb:97:c7:96:e0:99:44:71:
84:57:80:57:89:de:5a:30:55:99:ed:eb:fc:27:b9:e4:1e:df:
9d:c3:1c:d6:ca:f2:2e:5c:b2:db:ed:f0:3b:9d:92:39:32:fb:
fa:e6:0a:91:cb:e6:f5:b4:1f:4c:fd:f1:9c:e1:da:9d:71:99:
50:82:ac:4b:8e:8b:7b:5e:ce:7e:33:c4:5b:8a:3c:4e:39:2d:
76:da:26:94:80:3b:2e:f4:d2:11:9a:09:1a:16:c4:76:f4:cf:
ba:e1:a1:3b:d4:99:b2:e3:0c:db:bd:3b:b8:ce:61:4c:0c:a2:
4e:04:38:b9:62:93:93:cf:0c:6c:77:03:0e:97:c4:de:89:0e:
1e:36:18:50:4b:67:bf:61:84:5e:fa:64:35:3b:d9:37:27:4e:
bb:16:c0:4d:f7:5c:c0:e5:6f:6b:23:9e:e4:c6:73:e8:d4:27:
6d:11:1c:c7:9f:c7:94:09:dd:dc:af:66:c0:b9:ba:29:60:f2:
12:70:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:15:57 2026 by rpki-client