This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa
File: _KaR4wLwZ7labGWt6arnKIQd96w.roa (raw, json)
Hash identifier: nGupux0rLke8QsDU9pv8mG8OuJgGPA7rc9IB5osDncU=
Subject key identifier: FC:A6:91:E3:02:F0:67:B9:5A:6C:65:AD:E9:AA:E7:28:84:1D:F7:AC
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 019B7B3601840172D90CB869D50FB82420DD
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa
Signing time: Thu 01 Jan 2026 20:18:15 +0000
ROA not before: Thu 01 Jan 2026 20:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9050
IP address blocks: 31.14.20.0/24 maxlen: 24
188.214.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:01:84:01:72:d9:0c:b8:69:d5:0f:b8:24:20:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 20:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca691e302f067b95a6c65ade9aae728841df7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:57:5f:e8:ce:e0:6c:8d:3c:bb:e2:64:8b:
4f:86:93:14:e7:8b:57:c3:ce:fd:2c:26:b3:95:13:
91:92:f0:4f:5d:fa:14:2b:67:47:a2:25:df:d7:6e:
39:28:5b:c2:50:fb:a0:d3:6b:eb:41:d9:32:9f:84:
10:95:34:7d:cb:34:39:31:75:00:46:1e:23:14:bb:
d3:31:e3:44:6d:9d:b2:6a:0e:11:a6:5b:e7:3b:ca:
96:5a:8b:94:f9:65:ac:01:4b:7d:9b:57:75:5d:45:
e1:52:9b:7d:0b:59:74:76:64:77:84:3a:bf:22:11:
78:5d:9b:53:62:44:44:e3:e1:c2:52:7c:8f:42:0a:
b3:e6:27:d1:d8:e1:f7:11:45:b2:33:c3:29:25:1d:
af:7b:15:c8:16:45:71:6e:e0:4a:32:f4:bf:24:b5:
a8:93:c0:7e:77:35:b2:58:37:34:33:5e:3e:8b:86:
f5:cc:cf:29:94:36:03:a3:a1:60:58:0e:7d:76:79:
6e:dd:94:1c:4a:7d:6d:01:ff:6b:00:e8:38:35:27:
4d:97:aa:41:7d:d4:a6:7f:79:9a:d1:9f:36:7c:d0:
4a:9b:7d:bd:46:9e:6a:6c:db:7e:9a:1a:57:1e:91:
7d:ec:40:f3:e7:9d:dc:69:14:4f:15:5b:40:a6:c8:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:91:E3:02:F0:67:B9:5A:6C:65:AD:E9:AA:E7:28:84:1D:F7:AC
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_KaR4wLwZ7labGWt6arnKIQd96w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.20.0/24
188.214.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8d:1e:7c:b3:40:4d:0c:2e:75:6c:62:9b:04:93:40:b3:a0:
8b:10:8c:3e:5c:82:d8:11:c7:82:6f:6d:89:75:c8:c0:e8:b7:
3a:53:18:91:c8:d3:3e:76:b6:6e:96:b5:0f:0a:53:21:12:a2:
86:ac:0c:34:fa:57:73:e2:3f:d3:a0:c8:e8:06:72:fd:b1:b3:
49:7b:5e:b3:0a:4e:6b:72:02:7b:42:b6:c6:c5:ed:50:6a:28:
02:f8:22:22:48:3b:67:00:bc:b3:46:8e:5b:13:33:55:65:f1:
79:99:f3:49:9b:cc:93:8b:a7:a8:ea:1a:77:77:aa:99:d6:30:
07:9e:03:6c:c1:df:d3:00:6e:3e:4c:8b:ca:8a:91:22:75:a0:
ba:d5:3f:23:c2:10:fd:f0:c8:b1:98:63:34:b2:29:43:be:9f:
f3:42:5e:36:44:8e:54:98:d8:37:50:d6:70:50:15:3e:ba:ba:
d8:de:e1:1a:46:ce:c2:0d:c7:66:2b:a4:92:8e:89:6a:82:56:
2f:70:fc:fa:6b:ff:d5:31:59:89:d3:fc:1b:01:5c:0d:69:c8:
68:65:a9:da:5c:af:72:c7:73:07:6b:96:37:06:b0:62:7e:49:
74:23:70:70:b7:b4:7f:e3:ef:6d:97:76:ff:17:be:69:74:fa:
36:10:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:39 2026 by rpki-client