This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa
File: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (raw, json)
Hash identifier: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=
Subject key identifier: 16:D2:FC:24:04:79:2F:74:2E:89:68:EF:79:06:18:AB:1E:55:CA:C7
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019B79ED45CA7D9F644D920102ACC89E07EB
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa
Signing time: Thu 01 Jan 2026 14:19:11 +0000
ROA not before: Thu 01 Jan 2026 14:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47713
IP address blocks: 95.140.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:45:ca:7d:9f:64:4d:92:01:02:ac:c8:9e:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 14:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16d2fc2404792f742e8968ef790618ab1e55cac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:e2:b8:9f:42:31:5a:b6:d9:40:76:77:ca:
4a:6b:a0:60:70:61:61:06:de:c9:f3:58:94:55:7e:
ec:18:31:51:a5:aa:26:27:ab:03:07:75:d0:85:f3:
16:80:67:04:c3:14:40:f2:50:9a:c0:0c:aa:38:52:
3c:df:0a:86:18:d8:4a:5e:eb:e5:a6:2c:ac:cf:87:
30:05:1c:49:27:cd:24:7d:13:94:be:f8:c9:43:8f:
2e:87:da:94:bc:26:33:a2:cd:ab:c8:6c:70:18:b8:
11:91:a5:50:e7:aa:81:8c:f5:53:ad:4e:6c:54:c2:
26:02:63:f1:fd:0a:94:d0:26:4f:66:0a:c8:66:ec:
7b:a7:2e:94:8b:fb:e7:2f:ef:d1:70:51:10:b6:01:
5e:85:db:73:99:f1:a1:1e:03:65:bd:e9:01:cf:ec:
75:b6:e7:d1:e2:be:21:b5:69:07:64:6d:ac:cb:e7:
2f:c9:08:2f:8b:9d:5e:84:96:35:95:56:7c:7f:bd:
1b:7c:d4:6f:f2:cb:70:8d:ce:55:82:11:4b:3e:2f:
cc:3b:75:54:bb:50:b9:5b:7c:07:dc:c5:48:6b:f1:
68:3c:c9:35:6a:d8:8a:58:69:b8:3d:f9:e1:8f:66:
fb:98:fa:06:8d:68:5f:19:1f:a3:87:46:b1:5b:21:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:FC:24:04:79:2F:74:2E:89:68:EF:79:06:18:AB:1E:55:CA:C7
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/FtL8JAR5L3QuiWjveQYYqx5Vysc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f2:b9:6b:2b:32:7e:20:0c:aa:18:82:d2:cb:1c:5a:98:6e:
a2:dc:b4:0a:a0:b4:51:40:31:32:c3:71:6b:e0:9c:f0:74:c2:
f8:84:da:e9:2b:7f:f2:a2:86:1d:45:af:5d:94:37:29:cb:f2:
5f:a6:ef:27:dc:f2:be:be:31:d7:82:a1:ae:8c:22:d4:ad:a5:
ed:9f:60:88:2d:80:3c:2a:b0:ff:15:cb:ed:77:c1:57:eb:d0:
c2:f4:b6:c8:a0:c7:e0:a8:db:d0:22:a3:d9:17:c9:63:15:a2:
5b:7b:c0:da:04:82:3c:53:95:95:02:ad:9e:ba:d4:0e:ab:73:
62:77:b7:b4:6a:fd:af:bb:e0:c5:38:23:7e:e4:5e:a8:8b:e5:
bd:53:86:80:bc:7d:36:37:69:33:2e:f3:45:ad:f2:00:2e:d0:
07:97:2e:50:bc:8b:6f:30:76:72:5a:54:fb:36:91:90:5a:b1:
f5:4d:59:11:93:09:64:16:49:ae:66:88:01:f4:ac:66:18:11:
1b:5b:65:b8:89:47:39:7c:0f:bf:7c:65:d4:ef:c2:95:54:39:
d4:f8:ab:36:00:40:d0:48:9e:38:8a:a8:1c:82:9d:64:dd:5d:
b1:5a:c0:9c:52:bf:f1:3d:83:81:27:b6:79:d8:53:21:1f:49:
f3:15:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:31 2026 by rpki-client