This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa
File: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (raw, json)
Hash identifier: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=
Subject key identifier: 15:B0:5F:99:8F:01:53:C5:62:83:20:E7:ED:88:31:2E:04:A7:95:4B
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019B77C727BC37DCA8E8CF7781971ABEC86C
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa
Signing time: Thu 01 Jan 2026 04:18:19 +0000
ROA not before: Thu 01 Jan 2026 04:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 136.206.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:27:bc:37:dc:a8:e8:cf:77:81:97:1a:be:c8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jan 1 04:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b05f998f0153c5628320e7ed88312e04a7954b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:84:26:43:5f:9f:75:12:cd:48:71:d6:26:
10:38:4c:4e:38:5c:97:7c:7e:83:6a:53:60:b4:78:
d7:ef:8d:0e:23:26:bd:99:90:1a:74:ae:a2:49:70:
79:71:8b:b0:8e:77:4e:c1:36:7c:91:fe:2b:ac:51:
93:34:c8:1c:2f:6a:c2:73:be:80:6c:bb:26:b7:cb:
4a:54:60:82:5c:79:a8:10:68:2f:20:9d:1b:4c:a3:
8f:78:0e:8d:e2:b8:34:c8:35:7a:4e:06:34:05:2c:
2e:7a:b3:9b:0f:51:03:ec:36:3d:95:40:c3:53:fa:
e0:9e:ab:07:54:36:d9:cb:e9:ac:7a:ed:98:5d:6c:
8c:c2:17:14:4a:83:0f:40:dc:5d:df:3d:bd:31:4b:
ac:52:02:ae:51:28:89:c2:99:5a:92:8d:79:2d:d8:
93:fc:eb:ce:8a:5e:20:a0:52:4a:24:70:99:b3:0a:
66:1f:91:fd:a1:de:63:8f:fc:b4:aa:0f:e5:52:24:
5f:b7:7e:3d:3e:b0:bc:5a:94:dc:41:33:c6:83:3c:
a5:12:a7:51:95:27:2a:4a:d4:c9:23:69:61:14:bb:
e3:1c:63:52:16:58:00:c5:ff:fb:22:cf:21:25:1b:
64:85:03:7c:3e:41:ea:6c:ae:e0:63:03:d0:8f:00:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:5F:99:8F:01:53:C5:62:83:20:E7:ED:88:31:2E:04:A7:95:4B
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/FbBfmY8BU8VigyDn7YgxLgSnlUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:fe:97:90:75:76:2d:04:c8:0b:c0:02:48:1e:9b:6f:47:13:
b8:a4:23:ef:ab:86:8d:48:04:8c:ce:62:c0:22:f5:17:c1:6f:
37:4f:80:0c:72:44:ae:86:e4:b2:18:50:65:bf:cf:c0:8a:d8:
cf:c4:ee:c1:58:21:24:96:09:14:ca:89:b5:e8:70:b5:35:f4:
ad:bc:0c:1b:89:8d:3e:06:ab:67:18:96:aa:a9:0c:94:9a:56:
c6:e7:94:4f:e2:52:18:51:df:e3:07:e9:d0:9c:77:d0:61:b0:
07:1d:a9:a0:5d:99:dd:37:70:de:9c:22:31:e1:c4:16:82:70:
fb:be:71:88:6f:7a:0e:e3:60:a7:cb:6f:0b:c8:82:50:f5:e8:
07:5b:81:44:ff:9e:7c:43:75:25:b9:fe:3f:67:e0:da:c6:ed:
d5:54:65:46:3a:6a:51:d2:e3:04:e2:6e:30:0f:0a:44:25:8d:
e9:a9:3a:92:c5:dc:90:b4:a3:3e:30:e5:68:0f:79:7d:4c:83:
63:06:92:8a:13:1b:80:6e:95:1d:92:b2:f9:f8:a0:a0:fe:fc:
ad:78:f5:f5:53:12:79:93:e9:d1:87:0d:9e:a4:bf:e6:de:95:
ee:4d:04:53:9d:6c:bc:ba:3c:6d:0b:c6:16:53:49:30:39:3c:
91:1e:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:22 2026 by rpki-client