This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa
File: T-FG9QXYVrOvJD0ZFGx161F8-rE.roa (raw, json)
Hash identifier: fwBMGesT+i5+7hG4n6yFeYoLnMkVAp9abEUuKCI4Q+A=
Subject key identifier: 4F:E1:46:F5:05:D8:56:B3:AF:24:3D:19:14:6C:75:EB:51:7C:FA:B1
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 019B7D5AE281E958D38E31297825D20266C0
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa
Signing time: Fri 02 Jan 2026 06:17:46 +0000
ROA not before: Fri 02 Jan 2026 06:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204393
IP address blocks: 185.187.48.0/24 maxlen: 24
185.187.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:e2:81:e9:58:d3:8e:31:29:78:25:d2:02:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 2 06:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe146f505d856b3af243d19146c75eb517cfab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:74:40:4a:b1:03:04:09:f3:a4:9d:33:2c:
40:03:25:11:75:01:9b:d6:88:fb:59:f4:20:50:01:
85:dd:dd:cd:68:37:9e:d7:01:ab:ec:57:4e:09:f3:
42:23:50:9f:a4:2e:e6:83:7c:ab:ff:19:7f:d7:31:
3f:13:b1:95:6e:dc:95:08:a8:4e:f6:18:b2:6c:de:
84:6c:23:8f:32:1b:f5:cb:88:2e:1d:56:fb:7d:5c:
55:27:43:59:16:aa:6c:31:76:65:fe:0b:dd:61:b3:
09:14:51:76:1a:c6:66:4f:72:53:51:b3:69:9f:93:
c6:a2:1d:46:a3:47:8d:aa:d8:d9:9f:4c:79:70:cf:
61:8c:17:be:dc:20:8d:ef:7e:61:ba:7e:d0:59:58:
98:6b:c8:7a:e3:ab:c7:4e:80:2b:d1:2b:db:af:ba:
a4:4b:35:b0:d5:e6:a4:79:2e:26:45:20:92:02:9b:
3b:77:1c:68:7b:56:a5:90:63:d0:b4:13:c5:b2:03:
15:67:eb:e4:b0:d7:d0:78:b8:6c:19:86:1a:09:c5:
3c:d2:c6:03:70:83:90:16:f6:25:10:7c:40:f7:7a:
12:88:e9:f0:f1:65:14:ce:6f:68:ec:9f:2a:b5:83:
23:35:41:ba:05:cf:4b:c1:a6:eb:c4:c0:a6:11:32:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:46:F5:05:D8:56:B3:AF:24:3D:19:14:6C:75:EB:51:7C:FA:B1
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/T-FG9QXYVrOvJD0ZFGx161F8-rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
11:36:e1:a6:80:5b:2b:c0:65:4b:0f:ce:43:0d:d9:c9:22:eb:
72:9b:98:87:7a:ba:cf:32:67:e5:6a:61:fd:e3:87:97:7f:c9:
7b:d5:76:89:2e:43:1b:40:01:40:1e:71:45:7b:62:45:3e:ff:
34:40:a6:e3:c6:f7:b7:5b:7c:3d:0e:16:c4:ed:e5:83:ff:b3:
c5:7e:5e:93:be:92:7f:34:92:c6:b2:bd:f4:93:2f:a0:bc:ea:
28:20:96:00:ee:9a:2c:55:64:4d:90:36:41:2c:04:d1:1a:bf:
8b:e7:31:22:e3:2d:92:60:fb:5b:65:f0:c4:a3:af:91:10:f4:
f3:c1:3a:d4:91:1d:e3:d2:cc:35:ef:9f:e0:c2:ad:e6:26:41:
59:86:ab:a3:6d:e7:cd:24:79:aa:a9:c7:1f:10:29:18:74:51:
b0:b3:b0:0b:cd:bf:85:c6:39:85:37:40:16:7d:9d:96:ec:44:
dd:a0:9f:2d:c8:29:9f:9a:6d:42:58:80:8c:eb:b1:41:fa:ec:
14:ad:a9:d2:c2:cb:10:fa:d9:e0:62:a8:c0:d8:d9:31:2e:ed:
f2:d2:b6:5e:21:c5:47:26:d2:1d:80:8b:1f:69:23:c5:93:c0:
ea:06:76:85:d5:8b:58:42:bf:71:d0:27:a7:9f:4e:ed:55:5a:
75:6f:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:40:23 2026 by rpki-client