This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa
File: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (raw, json)
Hash identifier: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=
Subject key identifier: EA:A5:82:A6:E7:93:1F:5E:73:79:DF:F5:BB:82:51:69:FD:9A:ED:04
Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial: 019C2F405BE111181BC4F04BAA56C3DD18FC
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa
Signing time: Thu 05 Feb 2026 19:21:12 +0000
ROA not before: Thu 05 Feb 2026 19:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15992
IP address blocks: 91.207.192.0/24 maxlen: 24
91.207.192.0/25 maxlen: 25
91.207.192.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:40:5b:e1:11:18:1b:c4:f0:4b:aa:56:c3:dd:18:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Validity
Not Before: Feb 5 19:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaa582a6e7931f5e7379dff5bb825169fd9aed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:36:28:ae:ba:0e:f5:03:f5:e0:44:4c:0d:
b9:2b:4c:89:84:31:ad:5d:31:94:23:bc:66:f9:70:
0d:e9:6c:28:84:5c:b7:f0:99:5b:dc:76:d6:b3:08:
04:e7:5b:cd:42:9f:1a:6f:5c:b0:79:f9:31:c9:74:
f9:00:63:3e:ae:d6:fb:13:e3:09:d1:ab:5a:c8:86:
bb:4a:a2:a8:e6:de:d4:4f:2d:ec:a6:da:74:9d:d7:
c0:ef:e3:7f:71:c6:f6:dc:03:2a:d8:b0:98:58:4c:
bd:1d:e7:32:b2:15:a1:2b:fe:ea:55:a0:7b:ce:c6:
d9:0d:3a:e4:b0:0f:b8:af:d6:6d:6e:fc:1c:4d:3c:
3b:0e:fb:48:a9:73:0b:80:ea:f4:47:ca:54:da:6d:
30:b2:73:86:25:c4:9a:c9:8c:a4:21:7c:73:21:2e:
42:cf:e2:5c:61:92:a4:0c:db:95:f5:4e:93:ac:d5:
dc:0b:77:43:4e:12:df:db:44:81:51:ec:fd:b5:83:
a8:fd:43:df:b6:14:5e:c6:ee:b1:06:a4:d2:2d:55:
6b:24:ae:0f:c4:23:34:85:b3:96:2c:94:3a:91:23:
d2:e8:42:15:62:0a:0f:ae:f5:f7:91:f0:1c:47:ce:
a9:a7:94:a9:a6:a2:b5:29:15:08:d5:f6:9c:57:ee:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:82:A6:E7:93:1F:5E:73:79:DF:F5:BB:82:51:69:FD:9A:ED:04
X509v3 Authority Key Identifier:
keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.192.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cb:8d:16:55:c4:2f:ec:65:0a:f7:eb:f6:68:d1:7a:3a:65:
58:9c:48:53:b0:13:0d:79:01:e7:9c:c7:4e:59:62:1a:b9:74:
29:ff:48:dd:a4:16:02:e5:5b:6a:ba:f9:c4:bc:09:a0:c7:89:
97:fb:7c:bc:1b:3c:f1:29:9a:89:a7:6e:77:71:f8:41:af:7d:
6a:c1:27:b1:cf:01:e6:7c:77:d3:05:96:b7:9b:f1:bf:75:cd:
54:6b:a4:12:b4:60:cd:18:fc:6c:85:66:79:09:3e:4b:4d:66:
f3:b2:4b:6b:dd:74:fa:a8:0e:55:02:15:dc:f9:08:ea:f7:b0:
59:5e:2e:24:4b:dc:79:14:c1:99:43:6b:99:39:4c:44:cd:9b:
e6:d4:1a:c6:a7:97:49:b7:09:dd:2f:67:ab:ba:14:8b:97:b3:
fa:f2:eb:69:d3:80:e7:3c:2d:6b:c3:55:c9:ba:86:b5:2c:ef:
dd:5a:64:5c:55:70:ca:ca:fd:4d:40:e9:e7:90:c3:7b:a6:71:
02:31:c0:26:13:27:61:d9:91:df:6a:23:78:e7:5e:f5:e9:20:
eb:fb:e3:19:18:83:1f:ea:7a:03:cd:5a:5e:99:b0:78:bd:9b:
f7:eb:c4:cf:19:99:bd:9a:84:de:a1:ae:36:69:56:3b:c9:fb:
9d:55:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:33 2026 by rpki-client