This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/fmHmQj_X4OHvN_8PimpHxojzpV0.roa
File: fmHmQj_X4OHvN_8PimpHxojzpV0.roa (raw, json)
Hash identifier: eS9ppZZmO2TIgCAS2V6bNk7YbtOdQ3Bv62jIi3WaUeg=
Subject key identifier: 7E:61:E6:42:3F:D7:E0:E1:EF:37:FF:0F:8A:6A:47:C6:88:F3:A5:5D
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 019B7EA4EE7D958024FD2480DC35998CE6A8
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/fmHmQj_X4OHvN_8PimpHxojzpV0.roa
Signing time: Fri 02 Jan 2026 12:18:16 +0000
ROA not before: Fri 02 Jan 2026 12:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55195
IP address blocks: 185.159.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:ee:7d:95:80:24:fd:24:80:dc:35:99:8c:e6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 2 12:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e61e6423fd7e0e1ef37ff0f8a6a47c688f3a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:dd:6f:c8:fc:e0:55:9d:32:6b:67:bf:e0:
c4:c5:30:be:0d:55:89:8f:81:c6:53:0d:c7:39:f6:
9d:62:b6:05:4e:7d:8e:ed:97:38:de:11:71:62:72:
08:51:9c:1a:a9:92:26:3f:f2:30:43:6e:71:38:ab:
8d:96:27:d3:62:25:c4:d2:e6:87:0f:a0:61:e8:05:
16:87:e7:05:29:24:79:9d:90:34:a3:b4:8b:3e:3b:
2a:93:a8:ca:68:de:7c:1c:84:69:31:85:87:6e:27:
22:cf:d1:f5:b3:8d:44:e4:ef:14:fc:87:87:07:a5:
92:66:7d:56:6b:c8:5d:d6:9d:d6:ed:84:97:72:25:
5a:f1:8f:94:30:0c:80:eb:f9:c2:34:35:b0:03:3d:
c0:60:a6:98:7b:bb:76:74:13:d4:aa:3b:9e:33:dd:
63:1a:ec:01:2c:f4:17:3c:25:6e:d7:b1:56:9f:d8:
e0:47:a9:6f:fc:cf:2e:8a:92:3d:90:4b:f6:ec:94:
6f:be:d3:38:7a:e7:6a:00:9b:a4:9f:99:56:09:05:
df:53:df:90:3c:19:eb:9a:4a:ce:c3:57:c4:e0:8c:
65:1c:f1:cb:9e:37:80:84:8e:5b:5e:83:1b:15:0f:
cd:77:96:72:95:73:3e:35:6e:5e:19:64:7b:b4:15:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:61:E6:42:3F:D7:E0:E1:EF:37:FF:0F:8A:6A:47:C6:88:F3:A5:5D
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/fmHmQj_X4OHvN_8PimpHxojzpV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c7:41:9d:84:60:ed:2b:db:ee:b1:bd:13:10:27:b6:6b:c0:
30:a0:7b:17:ac:54:16:88:23:4f:02:4f:d5:d3:e0:7f:8d:57:
98:a6:8f:48:84:22:68:dd:8c:b9:65:1f:6d:71:ff:a5:a8:12:
82:04:54:7e:54:f6:96:d9:e2:35:43:3b:df:8f:2b:bb:f9:6f:
1b:73:35:e0:91:e6:ee:e1:f7:d0:c8:7a:d1:66:a1:3e:71:13:
86:34:33:63:95:cd:96:f6:4c:15:20:aa:7e:1b:1e:91:89:c3:
72:fe:22:94:ee:54:98:61:d9:17:23:f1:08:8b:bf:41:2a:83:
9a:b2:c2:56:e0:ba:6a:8e:a0:e3:0f:23:9d:d2:d8:2e:0f:f0:
4b:e5:db:2e:19:c8:3f:91:9d:16:fb:72:ad:a8:0c:86:c7:72:
1e:7b:29:f7:e4:9b:12:66:f3:77:dc:60:03:88:63:24:2e:67:
7a:f9:05:22:f1:44:12:53:21:80:4e:32:15:d7:d5:f2:99:55:
e7:9e:36:ff:56:88:c8:31:72:93:e7:75:9c:59:73:60:71:64:
d1:04:aa:d9:3a:a3:5e:75:a4:30:c7:d6:09:9b:c3:98:99:18:
e1:51:ef:1e:50:cb:30:4b:94:5c:0a:74:82:6f:54:6e:4f:29:
38:ba:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:34:32 2026 by rpki-client