This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/FR8YlQ6nec8oc21l54pVTo8tdmM.roa
File: FR8YlQ6nec8oc21l54pVTo8tdmM.roa (raw, json)
Hash identifier: dDbfyickuD+EwuOxXP8exdyMfoH6qoYVsdfxRcmpAmA=
Subject key identifier: 15:1F:18:95:0E:A7:79:CF:28:73:6D:65:E7:8A:55:4E:8F:2D:76:63
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019B7CECBF7A1F0242B10AAE4ED0563F23BF
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/FR8YlQ6nec8oc21l54pVTo8tdmM.roa
Signing time: Fri 02 Jan 2026 04:17:28 +0000
ROA not before: Fri 02 Jan 2026 04:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 146.247.104.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.118.0/23 maxlen: 23
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:bf:7a:1f:02:42:b1:0a:ae:4e:d0:56:3f:23:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 04:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=151f18950ea779cf28736d65e78a554e8f2d7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:8f:ac:ea:61:33:81:69:ba:a7:f4:fd:9c:
da:ce:b2:24:63:f6:6f:dd:e1:26:7b:8e:a1:85:77:
10:1a:27:a2:25:4f:13:bd:10:ca:9b:13:22:af:15:
c9:dd:f1:f9:78:58:fa:8f:c3:ad:be:3a:74:be:fc:
11:df:cf:ac:3e:4d:7d:93:3b:25:69:d9:46:64:9b:
b7:1a:f2:f1:37:4f:be:15:39:6b:e7:0b:56:29:ca:
d7:7d:3b:6e:21:12:6b:de:5c:88:ab:cf:02:7a:25:
62:7f:7c:a0:f4:43:0e:84:de:a5:e2:5c:ea:49:f6:
d0:42:26:71:6e:63:4f:bc:4b:9c:5e:24:32:c2:82:
d6:b8:9b:7c:be:ee:52:b0:7f:d7:c2:3f:cc:c1:5c:
e7:75:92:5b:17:8b:46:5a:a0:95:ce:3a:02:b4:d3:
0f:d1:8c:61:86:0b:b0:11:0e:c2:c9:88:6b:82:cc:
56:c8:75:0e:35:58:63:44:f8:6a:53:28:9b:16:bb:
8f:f6:28:71:19:fb:00:49:8a:2e:d0:26:4d:e0:0b:
c1:98:1b:50:cb:1e:c2:fb:d6:30:22:0c:f4:e3:ff:
9d:38:6a:49:a7:3f:e7:fa:b6:c7:0f:10:7d:5c:51:
0f:8e:37:3d:a6:be:18:73:c6:03:e8:92:25:94:43:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:18:95:0E:A7:79:CF:28:73:6D:65:E7:8A:55:4E:8F:2D:76:63
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/FR8YlQ6nec8oc21l54pVTo8tdmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
146.247.115.0-146.247.120.255
146.247.122.0/24
146.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
35:d4:23:e0:72:0d:55:29:25:b3:51:2d:cd:d0:02:97:52:06:
1f:03:60:64:4d:15:43:23:a0:87:51:8d:e3:9d:68:a4:56:c2:
fc:29:3c:ae:de:6b:1a:54:10:52:2a:a0:1b:b5:95:84:36:ac:
a7:4c:e5:8e:55:ed:30:b9:ca:d2:3e:db:bb:77:69:00:59:8b:
71:ee:8d:3c:1c:ab:34:a2:ac:68:29:a1:8d:de:5a:3f:72:63:
c5:9d:ae:90:7f:62:09:b5:1c:67:40:39:7f:b5:58:57:8e:5f:
2a:52:ff:da:fb:37:8e:c4:29:ac:65:5a:75:92:4b:8f:6f:2e:
cb:5b:72:84:d9:d4:ec:0c:94:08:79:a1:ce:cd:15:6e:17:3b:
b5:5c:47:e1:32:61:5b:62:3a:c5:46:21:1a:22:5f:f3:5b:39:
7f:87:a0:41:28:96:15:5f:0e:0e:52:cf:8c:3f:f5:8f:50:da:
85:f6:74:aa:1b:7e:7c:29:51:a6:8f:5a:9a:60:6a:e9:71:f8:
e3:28:db:bb:f5:91:49:93:e7:3b:a7:b9:0f:7d:76:f4:74:17:
f0:de:44:4d:76:e0:1e:5c:7f:7e:17:09:19:e7:48:5d:a3:2e:
5a:0e:8b:65:58:6c:45:82:a2:52:23:f2:2d:7a:58:66:f2:19:
4c:47:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:11 2026 by rpki-client