This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FA8yybCBJF7CB4PUftWmNuHfMJo.roa
File: FA8yybCBJF7CB4PUftWmNuHfMJo.roa (raw, json)
Hash identifier: GILRgQVDCBqUApp5T5UYfmSqm55HPKkfjTyN4DKVizE=
Subject key identifier: 14:0F:32:C9:B0:81:24:5E:C2:07:83:D4:7E:D5:A6:36:E1:DF:30:9A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019B0DAE5D53EF9AEDF684D14FFBCE5A34E3
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FA8yybCBJF7CB4PUftWmNuHfMJo.roa
Signing time: Thu 11 Dec 2025 13:51:29 +0000
ROA not before: Thu 11 Dec 2025 13:51:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204765
IP address blocks: 153.51.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:ae:5d:53:ef:9a:ed:f6:84:d1:4f:fb:ce:5a:34:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Dec 11 13:51:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140f32c9b081245ec20783d47ed5a636e1df309a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:0f:7d:0d:b7:5b:74:b4:ed:5e:f1:13:52:
4b:6d:98:35:e0:a2:d3:db:a9:50:da:97:9c:c1:9e:
b6:25:b9:e1:2b:05:97:f9:e3:26:93:6c:33:1e:db:
b0:75:f9:c5:51:8c:8e:64:a0:3e:c6:37:76:98:08:
50:61:8f:9a:d5:f0:fb:18:56:4f:8c:0a:0d:4e:d4:
08:8e:b4:bf:fe:9b:f1:a6:8c:ce:50:88:0c:0c:83:
ca:be:df:2c:71:19:81:88:5b:f1:c8:c9:de:64:d9:
a8:5f:ad:34:64:65:57:51:d3:e6:32:16:cf:94:12:
a6:1e:27:9b:fa:19:5d:7f:8d:7c:4c:f9:3a:e3:25:
e3:08:40:1d:5a:65:3b:ed:fb:6b:e8:ee:12:8c:22:
f3:c5:87:75:61:9c:d9:67:a4:85:69:82:7d:62:d9:
7e:f1:a0:12:39:03:70:6a:c4:fd:15:81:f8:a4:f5:
66:90:4e:ad:80:65:92:93:9d:3b:9f:26:af:64:fd:
1d:74:0a:c2:11:39:ea:bd:bf:f5:65:62:99:22:31:
c7:45:3b:d1:d0:1b:8e:02:97:55:d7:18:57:82:5a:
80:70:02:e5:50:f2:b8:8c:43:83:16:df:c7:6e:f0:
e0:dc:da:3e:94:01:e0:d9:8e:c0:87:0b:f2:b4:f3:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:32:C9:B0:81:24:5E:C2:07:83:D4:7E:D5:A6:36:E1:DF:30:9A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/FA8yybCBJF7CB4PUftWmNuHfMJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:0c:42:e9:41:11:e6:91:74:4b:b2:55:52:5b:84:6f:2a:dc:
db:95:b3:e5:42:81:8a:47:ce:92:00:47:d9:32:38:53:9f:6f:
b5:c4:74:bb:20:ec:db:be:05:98:02:6d:82:02:67:09:d3:1d:
b8:bb:01:25:60:28:f7:db:75:1b:93:49:52:f4:9f:a6:aa:13:
56:8e:97:e6:37:f6:08:78:74:a0:21:bf:d0:8b:c5:73:4c:6b:
4f:64:f7:ef:ee:93:0b:30:f4:d4:2e:02:4e:e3:23:9c:ec:aa:
42:ca:37:1c:81:0e:a6:38:bc:64:56:df:dc:33:7c:00:00:9e:
f9:1b:67:6e:59:42:ba:e1:b3:58:fc:0d:c6:11:f8:39:35:32:
4a:9a:dc:f3:2c:5f:65:93:6e:96:00:a4:f4:3e:6c:00:b9:c2:
5c:29:3f:89:a4:01:12:d2:41:a1:1b:f2:81:74:87:02:32:c6:
c8:22:dd:c4:84:8f:89:06:77:56:1a:ea:5b:eb:01:e3:6f:c8:
77:0b:4f:2b:84:a3:3c:f3:e5:a6:e5:89:0c:49:5a:06:8e:32:
eb:a6:4b:48:d7:08:fa:2d:92:93:ad:19:00:58:6b:ab:fd:bd:
07:69:cb:84:a1:33:b7:e7:2f:c7:7b:55:bd:c4:4a:89:44:29:
c7:0e:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:17:45 2025 by rpki-client