This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1nVHIu-5n51i9XhRUguwo5Agsgg.roa
File: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (raw, json)
Hash identifier: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=
Subject key identifier: D6:75:47:22:EF:B9:9F:9D:62:F5:78:51:52:0B:B0:A3:90:20:B2:08
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 019B7E376B51D2BDA51855266AC71C7C561D
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1nVHIu-5n51i9XhRUguwo5Agsgg.roa
Signing time: Fri 02 Jan 2026 10:18:39 +0000
ROA not before: Fri 02 Jan 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42649
IP address blocks: 45.86.104.0/24 maxlen: 24
45.86.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:6b:51:d2:bd:a5:18:55:26:6a:c7:1c:7c:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 2 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6754722efb99f9d62f57851520bb0a39020b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:2a:b8:77:4e:27:a2:19:25:75:b6:58:a0:
6e:15:a4:26:19:af:9e:53:f1:7f:9d:e8:b4:55:ce:
15:b2:99:c3:d9:15:88:9e:7d:20:6d:e1:4d:0e:fe:
d7:cd:45:38:80:0d:77:14:8f:84:54:ff:4f:41:d4:
9a:f0:37:6d:ec:56:17:44:75:0b:d8:1b:f4:c6:6f:
7b:71:3e:26:ed:77:e9:93:7b:85:fd:5e:02:92:20:
3d:fd:33:62:13:01:b3:f8:4a:01:04:65:f7:e0:1f:
11:82:24:72:9f:df:2d:a0:54:fc:0f:19:59:f5:8a:
2e:e6:2c:2b:fd:aa:84:1d:e2:3f:3b:7a:64:62:d8:
4c:a1:e1:af:d3:aa:e2:61:01:14:85:5f:75:f8:4a:
32:8c:e7:f6:cd:5d:df:8e:08:11:35:08:ad:13:c7:
c4:40:c4:75:cc:8a:05:ef:84:db:95:6c:80:0d:65:
8e:19:3a:25:1f:5b:5d:ea:b2:3a:90:26:72:cd:65:
d4:6f:ac:f0:cc:8d:d9:13:d4:6b:bc:c5:cc:d6:8a:
bb:8c:b7:8d:43:97:7f:ea:2d:0a:0b:45:c1:82:4f:
8a:0f:cd:f9:94:36:7d:ed:7e:23:17:cd:ab:c5:21:
ee:f3:83:5f:d7:45:1d:b6:22:c6:5f:05:a8:ee:99:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:75:47:22:EF:B9:9F:9D:62:F5:78:51:52:0B:B0:A3:90:20:B2:08
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1nVHIu-5n51i9XhRUguwo5Agsgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
21:71:ca:38:13:e1:fa:ff:78:45:cb:45:6d:74:99:17:18:b9:
4f:ed:1a:8c:79:0f:ee:bd:55:9e:2a:9e:8c:fd:9f:1e:f1:28:
69:88:11:85:b2:5e:c5:cc:f2:ec:61:a6:8a:1a:84:40:37:c5:
7c:fa:f2:9e:98:80:bf:c3:34:62:df:a4:5e:c0:ab:ed:47:be:
23:4b:6c:68:b3:84:6c:55:fa:7e:49:f4:32:1e:4c:af:cd:1f:
c2:c2:05:91:84:02:cf:4f:a5:4c:d1:98:6a:88:40:89:2b:97:
22:8a:2d:f0:44:d7:2d:2b:30:01:83:95:d8:f6:75:31:14:6f:
22:d4:8a:31:57:a9:87:3a:82:c2:cb:d8:75:2d:21:06:ff:c6:
6b:1f:1b:15:3e:17:19:b9:ec:93:83:a9:69:18:1b:1b:78:1b:
8e:59:82:b2:07:1d:4d:0f:24:12:73:ce:d0:0c:2a:02:54:e7:
cc:db:f3:dd:c8:1e:45:a3:e8:8a:01:d2:4b:21:84:e1:72:87:
4a:0b:9f:fb:a8:7f:36:fc:b5:b1:83:06:84:76:25:79:4d:0d:
6c:b9:4d:fd:56:d3:4a:d3:48:47:bf:e1:2b:d0:85:5f:7f:ef:
ee:f9:8f:31:8a:a9:ed:b4:45:9f:24:b0:35:ba:90:bf:38:6c:
31:1d:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:00 2026 by rpki-client