This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa
File: FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa (raw, json)
Hash identifier: peTRcdeTP20Eip2O22kje1Yb5TbeukYoj6gR+Z/N6g0=
Subject key identifier: 14:0C:82:57:FE:40:32:49:B7:0E:1E:DC:7C:28:D7:9A:D5:19:8F:08
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019B7AC94B2E8B47FA610079950154A919F7
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa
Signing time: Thu 01 Jan 2026 18:19:30 +0000
ROA not before: Thu 01 Jan 2026 18:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50083
IP address blocks: 5.59.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:4b:2e:8b:47:fa:61:00:79:95:01:54:a9:19:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 1 18:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=140c8257fe403249b70e1edc7c28d79ad5198f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:de:ab:da:96:ce:93:2e:e5:27:ab:3a:21:
be:1f:ff:8b:e3:ff:31:89:59:70:3a:78:9b:35:ab:
10:7f:80:56:e2:5a:cd:55:0d:cf:82:16:5c:80:9c:
5e:76:de:b8:3f:e0:11:79:80:a3:60:52:c0:f0:64:
73:96:64:65:18:27:e7:f3:69:55:99:d9:30:3d:aa:
86:cd:84:dc:67:86:ab:2a:b6:3c:14:aa:db:9e:a8:
76:8c:20:43:f6:5f:8b:ec:5a:6f:58:4c:50:fc:5f:
cf:fb:1b:5b:a8:b2:66:48:d4:9f:b6:4d:a0:6a:b7:
86:06:a9:2b:be:15:a2:35:66:a3:98:e1:55:e4:47:
ac:8d:f7:a9:6e:69:75:5f:c2:09:01:e5:1c:ab:4f:
5a:9a:53:75:d2:54:e5:f6:9d:15:0f:23:9b:1b:00:
48:ba:fb:9c:b5:a2:4b:0f:72:db:da:23:6b:29:a3:
6b:f8:64:b7:7b:7b:21:83:d7:d4:93:f8:1f:0f:58:
e5:e4:5c:38:b3:32:e4:ac:0b:32:e8:66:8c:b9:ed:
85:6b:a7:00:0e:dc:22:eb:47:23:86:75:25:3a:29:
67:ae:3c:d5:32:65:7b:1f:0b:b1:0a:e6:6b:b4:32:
ef:55:8c:01:7c:a9:c2:5a:aa:68:a5:66:f8:97:4f:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0C:82:57:FE:40:32:49:B7:0E:1E:DC:7C:28:D7:9A:D5:19:8F:08
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/FAyCV_5AMkm3Dh7cfCjXmtUZjwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
05:a7:40:32:2b:02:da:2c:1d:e3:22:8f:5a:b6:77:ac:4f:2e:
d3:ee:c6:41:48:8c:e0:c4:6d:5e:70:88:d5:84:52:e0:d7:54:
5c:1c:72:25:1c:c4:d0:68:8e:8f:e0:6b:6a:c0:51:40:18:78:
13:e7:a3:df:df:97:a5:63:be:7b:29:bf:d1:4f:52:51:97:5e:
fe:bb:01:54:3b:69:09:06:72:6f:6e:46:48:b6:96:ec:14:5e:
a4:ab:82:db:1e:d1:3a:81:cd:65:dc:59:5b:81:c3:24:4c:b0:
d7:98:b5:e5:cd:61:36:66:94:d2:36:f9:4a:c7:3a:23:cc:28:
a1:db:f4:27:cb:07:5f:c8:4d:d8:73:55:6d:46:cd:e1:80:1a:
4a:6b:eb:58:01:c0:e3:e5:93:4e:9e:73:2a:a6:dc:1c:37:ed:
2c:ec:e7:2f:c4:a4:fd:1f:b6:55:1f:1d:cd:99:5d:cd:11:d2:
0b:80:bb:1a:cf:5c:70:6a:ac:d3:46:73:ce:9e:e4:82:0e:cd:
ea:a2:da:21:a7:32:12:09:1a:72:5a:1f:05:46:5e:fa:56:ab:
76:2d:87:15:2f:a8:df:df:3e:43:1c:3f:91:68:0f:85:a9:8c:
a1:8e:5d:fe:4c:7c:4b:fe:2b:9c:92:9b:26:00:82:58:9e:2a:
55:cd:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:44 2026 by rpki-client