This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/mfv_sdF7JkrnlQLBP04nKDAckMY.roa
File: mfv_sdF7JkrnlQLBP04nKDAckMY.roa (raw, json)
Hash identifier: buDLKj8SbGldH/UZVSAAKpuobU5YXqMLtN+FcDKjF3E=
Subject key identifier: 99:FB:FF:B1:D1:7B:26:4A:E7:95:02:C1:3F:4E:27:28:30:1C:90:C6
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 019B7AC7D4CC1041F51677980D86BC317EA0
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/mfv_sdF7JkrnlQLBP04nKDAckMY.roa
Signing time: Thu 01 Jan 2026 18:17:54 +0000
ROA not before: Thu 01 Jan 2026 18:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 213.134.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:d4:cc:10:41:f5:16:77:98:0d:86:bc:31:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Jan 1 18:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99fbffb1d17b264ae79502c13f4e2728301c90c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:6f:9a:a1:d6:7b:b7:30:dd:05:78:d5:42:
98:c2:80:e9:58:2e:74:bc:42:b4:8c:74:5a:1c:00:
8a:c6:4c:12:0c:7d:c8:d2:0f:79:dc:30:4e:4c:04:
81:cf:67:c8:3a:33:d8:73:ed:37:da:ad:d8:50:bd:
7a:6c:28:ab:42:4d:5d:49:80:9c:6b:e5:9e:97:7e:
02:1e:39:e1:d9:82:b9:fe:a2:4d:b4:b6:46:d7:27:
5d:66:f3:5b:29:3e:e0:74:6c:94:26:8b:be:c3:6a:
23:95:1d:37:e6:ba:6c:10:20:49:11:9f:20:4c:e4:
73:e9:18:01:2c:49:d5:22:67:fe:8a:a1:cc:ef:78:
75:93:2e:02:18:da:cd:c3:c4:34:66:44:5c:d9:e0:
db:65:dd:ea:c9:27:49:74:b4:e3:00:ac:7a:f8:c8:
77:eb:e6:04:dd:5f:cb:65:2b:4c:3a:10:cc:4b:19:
51:a8:7f:51:9b:76:fc:8c:ee:d9:ac:6c:5c:77:e3:
24:12:07:43:d2:e6:bc:6a:cf:02:24:10:d5:b3:a4:
87:03:80:71:4a:14:14:17:b3:8b:46:05:52:88:20:
d8:2d:ec:39:09:43:51:b3:39:72:b2:a0:98:15:41:
8d:00:bb:9b:e7:f9:59:49:5c:94:a4:15:29:f8:9d:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:FF:B1:D1:7B:26:4A:E7:95:02:C1:3F:4E:27:28:30:1C:90:C6
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/mfv_sdF7JkrnlQLBP04nKDAckMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.12.0/24
Signature Algorithm: sha256WithRSAEncryption
94:00:80:92:fc:29:bb:31:c1:8b:c2:08:d8:4c:22:2f:da:a6:
3c:32:1c:48:2e:7b:fd:74:96:a7:9c:4a:5b:fa:b0:07:c1:4e:
10:a7:28:8c:c3:2f:2d:86:af:b6:88:b6:b7:e9:b7:b1:4e:b0:
5f:0d:e8:56:a0:44:63:33:60:00:66:5b:95:07:ad:dd:f2:73:
52:29:83:4a:ee:3b:65:e0:ac:75:de:a5:30:1a:0d:ff:de:35:
ff:82:3a:dc:95:08:76:ce:6a:ca:1b:31:55:9b:45:25:90:83:
e4:0d:51:1c:0a:97:95:d4:ca:af:ff:bf:3b:64:04:14:d1:83:
50:15:63:4c:ec:39:88:ca:e3:69:06:00:17:31:9d:a9:7c:01:
9e:73:9f:68:2d:6e:b8:9d:4a:6b:d9:3f:26:60:ef:4e:81:19:
8c:6a:46:6a:8a:2b:fe:1e:c3:56:0d:c4:e6:bf:6c:e3:83:a6:
da:f7:be:6c:3f:7b:61:8a:ee:e4:51:06:21:31:b5:4b:e7:e9:
19:d1:7b:f0:8e:46:bd:5c:23:d5:03:4f:93:5a:ef:8c:d4:a3:
e6:a0:bb:11:4e:76:92:0f:ca:4e:5b:51:ec:20:b2:e6:66:be:
d9:d2:e6:1e:99:bc:7a:c7:c7:f4:80:c3:6d:73:a9:62:7d:b9:
b5:a0:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:50 2026 by rpki-client