This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa
File: LKFdqAxekSyGKQc0Md8_7Xelo-E.roa (raw, json)
Hash identifier: hzROPb2XKPcBYg2mXSPUmlxSomnvcQdFm4oNZy6YiVs=
Subject key identifier: 2C:A1:5D:A8:0C:5E:91:2C:86:29:07:34:31:DF:3F:ED:77:A5:A3:E1
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 019B7AC7A6DC0AB33A772A77F3BD7BEF6518
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa
Signing time: Thu 01 Jan 2026 18:17:43 +0000
ROA not before: Thu 01 Jan 2026 18:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50572
IP address blocks: 91.223.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:a6:dc:0a:b3:3a:77:2a:77:f3:bd:7b:ef:65:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jan 1 18:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ca15da80c5e912c8629073431df3fed77a5a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:8f:af:6a:60:9e:63:04:0c:77:3d:9d:d3:
98:98:cf:d5:65:e1:75:d0:4e:3e:12:d9:e4:42:3a:
f5:60:99:6f:27:62:df:78:2e:84:2a:ae:de:09:6b:
81:0f:40:0a:d9:cf:f8:22:d2:5d:b5:c1:cb:a5:ae:
ef:ba:43:c2:16:c0:71:a6:3e:8a:de:b0:22:d6:e5:
af:ae:ad:04:f9:cc:5f:6f:13:04:7a:c6:01:94:16:
f9:8a:24:da:0f:25:43:c2:ce:13:02:45:f8:b2:3a:
20:34:8b:1c:12:14:43:c6:6d:be:db:c5:ee:a3:91:
7a:f5:8b:a5:2d:27:c1:5b:e8:64:fb:78:8c:a2:d2:
1a:2c:18:d5:35:ca:3a:6e:37:2e:a3:03:4f:ac:ff:
8f:72:a8:42:0d:43:68:88:da:e5:d5:bf:b7:8d:c0:
ad:35:4f:72:19:ac:c6:c0:b5:f7:7e:5d:a1:44:44:
aa:82:59:5b:d9:f5:6b:fc:77:47:ae:8d:7a:2e:cd:
eb:f3:70:11:54:e2:c6:68:2c:98:c9:dd:a1:5f:dc:
d9:d7:08:bf:a5:43:66:b7:74:d6:6d:21:b8:7d:20:
9b:6d:f6:0d:37:6a:d2:67:2e:86:4c:2b:0d:f0:ab:
53:f9:ec:85:19:21:59:54:dd:11:f7:f0:7f:d1:b2:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:5D:A8:0C:5E:91:2C:86:29:07:34:31:DF:3F:ED:77:A5:A3:E1
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/LKFdqAxekSyGKQc0Md8_7Xelo-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4c:c9:43:9d:7f:cc:14:e9:fa:e0:34:7a:94:16:e4:ae:ff:
e8:16:95:94:f9:e0:80:1e:9f:4d:a2:40:d8:7c:26:eb:e3:2b:
42:44:a7:1e:45:9d:71:40:51:90:ad:c1:b0:f8:c1:e4:e5:7b:
92:4c:68:c6:37:a1:3c:28:3b:47:73:41:24:54:20:28:38:39:
0a:1c:94:e5:36:b1:d6:1e:46:c0:c0:ba:77:7b:50:0b:2c:99:
7e:15:f3:2b:4f:b2:0f:cd:21:02:e0:5a:66:3f:c3:d1:d3:29:
1d:66:fe:a1:e0:c5:d0:ce:09:b1:d8:e1:52:30:99:fd:fd:4f:
f5:fb:89:fc:db:43:b5:e3:ee:88:59:56:82:54:91:2a:70:05:
70:c7:c5:1f:2b:57:b6:80:69:b5:4d:7f:a9:c3:b4:bd:94:05:
c7:44:e6:88:14:6f:2f:c9:cf:fc:91:af:9f:65:f6:03:b0:2f:
2a:c6:43:27:1f:53:b1:32:1c:86:b8:e5:be:c6:b0:e8:61:b3:
ba:2a:ef:bc:f0:34:55:81:69:58:c1:d6:9b:dd:11:2a:7a:f6:
7b:14:03:35:52:71:5f:64:fe:a2:1c:f2:a7:c3:ed:d5:d9:c7:
e5:95:a2:fc:c3:4d:68:9d:c5:cb:94:a5:77:90:f7:db:88:77:
29:69:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:30 2026 by rpki-client