This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa
File: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (raw, json)
Hash identifier: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=
Subject key identifier: 16:EB:51:D4:09:F0:8D:FD:18:3D:88:23:DB:85:64:3A:79:E9:38:AA
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019B7DCA441535DCE11649CB3BB9FB71E673
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa
Signing time: Fri 02 Jan 2026 08:19:26 +0000
ROA not before: Fri 02 Jan 2026 08:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52223
IP address blocks: 91.245.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:44:15:35:dc:e1:16:49:cb:3b:b9:fb:71:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 2 08:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16eb51d409f08dfd183d8823db85643a79e938aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:4b:e4:79:49:dd:81:5a:61:b5:cb:65:49:
c7:02:74:e6:65:1d:7d:a3:51:87:a8:1e:ab:7b:88:
85:cf:47:48:2a:7b:53:2a:d7:e6:4f:d0:39:30:6c:
84:47:64:23:c4:56:df:71:b8:df:9e:d1:3a:94:86:
d9:16:59:3e:1f:31:d4:99:20:28:d5:ee:75:5d:e0:
85:54:f5:c5:e6:7e:fd:c4:cd:bb:45:30:6c:30:66:
c8:82:b2:bb:67:6e:78:4c:c5:31:a5:c7:26:b1:24:
25:d1:97:f5:96:1f:32:46:94:01:0c:3f:52:d4:3e:
a6:1b:93:a6:e5:d7:f1:71:67:e4:ba:49:c4:1c:28:
52:b8:28:b0:3f:14:c7:01:f9:38:55:6b:93:bb:a6:
d3:27:2a:5a:d5:29:e3:61:b5:e7:67:35:42:e0:4f:
d5:f7:02:78:d4:68:fa:a0:dd:07:42:8d:c5:63:d7:
96:6e:b0:9d:9e:85:02:0f:19:de:42:67:f8:5e:5e:
e6:d8:7c:c2:c9:9f:10:5e:1c:fb:ee:78:67:a5:8b:
c3:4e:30:e3:f0:b4:7a:f2:e6:e5:b5:11:a0:f2:77:
73:46:4c:71:1d:88:cf:f6:3f:20:d5:01:21:41:d3:
81:5d:52:e4:47:c2:32:d1:7a:15:6d:ed:5d:84:de:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:51:D4:09:F0:8D:FD:18:3D:88:23:DB:85:64:3A:79:E9:38:AA
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.233.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b3:d8:5e:71:df:8f:0f:34:d8:f7:62:23:73:d3:df:e3:52:
d5:12:9b:75:e2:c1:3e:9b:40:66:2b:7d:1c:1e:50:06:49:9e:
0a:bb:55:ed:b8:67:0c:d8:b7:36:a4:c2:c1:1b:cb:59:eb:4f:
06:bb:e3:07:71:fa:3a:5a:c0:10:b4:38:45:d6:b9:a8:7b:d6:
59:f9:99:c3:e3:d9:36:37:74:27:62:bb:bb:bf:cd:6d:54:63:
66:8f:02:1a:90:28:b8:a5:a7:2e:e1:c7:67:59:44:67:96:72:
17:00:70:01:91:61:59:f9:ae:e4:dd:68:4f:b7:ff:d0:c6:b8:
ee:76:bc:21:45:b6:33:49:75:70:b4:34:cb:74:1b:4c:2f:cc:
d6:fe:bc:3f:5c:23:c7:ff:3e:15:c4:29:3d:5f:67:37:d8:80:
93:a0:f2:a0:81:ef:8b:da:b9:08:93:67:ac:3b:69:07:87:71:
a0:e7:ce:49:d1:a0:0d:de:0b:57:45:6c:82:62:98:55:fd:74:
cb:b4:5b:5f:eb:71:cb:6f:66:93:a9:c9:22:16:d8:d3:f3:7c:
08:fa:35:fd:f6:84:e9:a7:4c:cd:e0:b7:ce:5f:99:a2:ab:cc:
78:58:f4:7c:48:d6:a7:b2:0d:cb:50:e1:54:cf:7e:4f:2b:1c:
5c:2b:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:45:05 2026 by rpki-client