This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/FApYjE878gTQjnR6VxM2QnFzIxE.roa
File: FApYjE878gTQjnR6VxM2QnFzIxE.roa (raw, json)
Hash identifier: VNJOfYtDuAPjExn4P6G0DeQAutPtIF8Xz9lKtPfTGNc=
Subject key identifier: 14:0A:58:8C:4F:3B:F2:04:D0:8E:74:7A:57:13:36:42:71:73:23:11
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 019B77C75144DDC33EE1B4214F3632F32291
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/FApYjE878gTQjnR6VxM2QnFzIxE.roa
Signing time: Thu 01 Jan 2026 04:18:29 +0000
ROA not before: Thu 01 Jan 2026 04:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 91.194.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:51:44:dd:c3:3e:e1:b4:21:4f:36:32:f3:22:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Jan 1 04:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140a588c4f3bf204d08e747a5713364271732311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:6c:ce:01:20:5e:30:7f:07:bc:7b:39:93:
f2:77:67:97:9e:44:49:7d:d6:ee:4d:47:e9:67:8d:
88:f1:2d:6d:de:a5:5a:89:43:01:35:09:ec:ac:ca:
69:79:10:a6:94:b4:c1:07:76:17:59:d4:b7:dd:ab:
a9:fe:71:11:b9:5e:6e:b7:43:08:9e:0c:3e:73:39:
1f:20:a0:f7:c3:39:9b:de:0b:7a:8d:50:d8:90:db:
7a:02:60:fe:2f:6a:75:91:9b:20:9d:b7:78:88:f6:
bb:6d:71:f5:10:fb:8d:05:a2:b4:2a:d6:86:9c:92:
54:c8:48:31:8d:ae:f3:20:33:92:0f:85:26:21:0d:
0f:cc:1e:3a:49:90:09:01:4d:bb:69:ea:36:98:ab:
e6:3b:ec:6d:ea:20:86:38:97:61:a9:b6:9b:cd:af:
6e:f7:c8:f2:49:0a:da:12:99:d9:0c:f6:20:0a:41:
87:01:4b:e0:a6:4f:0d:04:c5:a3:fe:e7:3d:4c:f4:
69:a0:6d:1f:86:21:dd:20:8d:75:69:b2:7c:58:91:
fa:4e:e8:45:ba:64:49:21:34:8e:3f:50:1b:ad:b9:
e1:dc:e2:17:de:4a:37:ef:a3:3e:09:0e:8c:4e:6f:
36:f7:95:74:03:3c:31:09:28:99:6e:64:fb:0e:04:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:58:8C:4F:3B:F2:04:D0:8E:74:7A:57:13:36:42:71:73:23:11
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/FApYjE878gTQjnR6VxM2QnFzIxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.48.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:37:c8:ba:9c:27:d7:59:aa:58:0e:c7:39:39:f6:4d:bc:83:
4f:e6:03:36:3a:e5:59:83:fd:6e:ce:95:6f:58:7b:fc:46:6b:
65:cb:27:05:95:41:18:bb:03:9b:37:69:51:7c:e5:f2:b2:93:
93:bd:85:f6:7e:18:03:91:f8:84:c0:f3:6b:02:42:6b:95:d4:
f8:f4:f2:a7:5b:82:b6:1e:5d:0a:87:5a:61:0e:be:a6:e5:5e:
33:6d:41:16:ec:37:5a:4a:79:7a:07:45:8c:44:1e:71:b0:4c:
83:4b:01:a3:0c:08:37:0e:6f:b7:60:25:18:2c:20:ce:65:e0:
4d:5a:02:f5:81:e5:7f:f5:e6:29:2a:d3:ef:d2:db:3b:7e:4f:
ee:15:bc:ab:ef:e1:83:7b:50:7a:55:15:9c:69:e7:e6:9b:17:
0c:0e:e4:2a:f5:d1:f3:f2:81:a0:f6:2f:8d:c8:f7:f1:a2:77:
ee:51:74:5e:55:96:1d:97:04:c0:33:45:32:93:38:57:98:a1:
35:2d:0e:e1:b3:db:93:56:04:84:e2:3f:3f:47:a6:85:79:8c:
2b:d4:75:17:85:34:cf:3d:13:68:bc:60:d8:5f:7c:86:58:4d:
1e:80:5f:6c:ad:fd:ed:6b:6f:f0:e0:9e:8e:72:81:04:17:25:
ce:84:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:29 2026 by rpki-client