This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AoMQNeK2mj8zMaGD_UbB0oPnE_k.roa
File: AoMQNeK2mj8zMaGD_UbB0oPnE_k.roa (raw, json)
Hash identifier: +rdZixSq+PUP6RSTwkHT9WGDxVl93j4NeG2pklJdVsg=
Subject key identifier: 02:83:10:35:E2:B6:9A:3F:33:31:A1:83:FD:46:C1:D2:83:E7:13:F9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019C5083B24FDC2531916C35E9DD3BB6D7BB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AoMQNeK2mj8zMaGD_UbB0oPnE_k.roa
Signing time: Thu 12 Feb 2026 06:22:13 +0000
ROA not before: Thu 12 Feb 2026 06:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210006
IP address blocks: 91.92.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Feb 2026 14:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:83:b2:4f:dc:25:31:91:6c:35:e9:dd:3b:b6:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 12 06:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02831035e2b69a3f3331a183fd46c1d283e713f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:22:97:ce:f8:e3:a1:85:e7:87:85:ed:e3:
32:32:91:b0:b7:fb:0d:10:e7:f3:46:68:54:11:74:
07:53:7f:2a:05:cd:69:4a:0b:e7:7c:df:5d:1a:07:
a1:72:df:a8:75:7f:be:2b:66:a1:71:c5:ec:2e:20:
4b:45:f4:8c:e9:fe:c7:4b:d1:55:a2:8a:a2:84:e8:
fa:f4:c3:01:6f:a5:99:cc:11:45:57:a0:a5:af:90:
f4:99:2c:18:d6:5e:52:67:7f:a4:c3:d5:11:53:ec:
5c:5b:94:70:d1:4d:8e:32:77:ac:d2:0a:97:80:c3:
2a:c7:59:55:32:15:59:60:70:8d:bd:67:1e:4e:a0:
25:ed:82:ec:14:33:14:41:60:97:b0:e8:7d:85:52:
41:37:d0:39:75:b5:0c:61:0d:b2:ca:83:02:39:2f:
8a:77:69:04:6c:e0:1b:65:81:79:78:46:af:30:da:
ee:aa:91:be:5e:5e:74:fd:40:0f:4f:9b:14:c6:c4:
8c:ff:a7:39:80:2f:e8:d4:83:c8:e7:bd:5f:d8:42:
ac:29:ed:65:b9:cd:79:a6:3e:4b:14:e6:fa:08:53:
1e:8e:5a:6b:e7:7e:44:63:a4:37:6b:4f:6b:89:08:
d6:7e:5b:4a:d3:50:10:fd:9b:fa:c6:e0:1a:d5:3c:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:10:35:E2:B6:9A:3F:33:31:A1:83:FD:46:C1:D2:83:E7:13:F9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AoMQNeK2mj8zMaGD_UbB0oPnE_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:93:e6:27:68:28:12:63:6b:30:3d:a1:10:68:e4:37:6a:0c:
c2:44:c0:d5:2e:6e:34:92:45:96:35:2c:c3:3c:8b:0e:89:46:
ea:62:cd:5b:39:7c:71:be:54:af:16:d7:aa:08:d2:b9:93:a6:
38:fb:b5:45:09:62:a8:35:14:80:6b:e3:2b:65:f4:e0:2c:dd:
07:66:75:32:3a:b5:ef:5e:41:25:48:72:bc:92:a8:d2:60:ce:
a4:38:4f:80:30:8f:d3:ec:1e:3c:db:1e:dc:36:84:fb:84:3c:
52:b2:4e:57:47:ea:3c:e4:ff:0f:a1:b4:d3:49:0e:72:94:9c:
2d:32:9c:df:d3:9b:5c:39:e7:32:7f:da:b9:7d:f0:ef:00:b8:
24:f6:a6:df:dd:fc:1f:4e:b8:ce:c5:ad:23:bd:39:2d:fb:3e:
4b:ec:fa:a3:30:73:2b:ed:61:64:e4:7c:d6:1b:73:b6:ca:82:
c1:33:41:38:96:e1:7d:d7:57:ad:bd:23:ad:ab:a6:7d:9d:47:
b2:3a:c0:2f:31:23:c5:25:9f:98:1b:c3:66:7e:b5:2d:7c:70:
2d:a1:3d:cd:f1:7c:6e:4e:8d:97:3e:52:d9:f2:09:00:fa:97:
c6:fb:af:8e:6d:d5:a3:0c:4f:f4:94:f1:03:08:66:25:f2:67:
33:d5:c4:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxQg7JP3CUxkWw16d07tte7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMjEyMDYyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjgzMTAzNWUyYjY5YTNmMzMzMWExODNmZDQ2YzFkMjgzZTcxM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim0il87446GF54eF7eMyMpGwt/sN
EOfzRmhUEXQHU38qBc1pSgvnfN9dGgehct+odX++K2ahccXsLiBLRfSM6f7HS9FV
ooqihOj69MMBb6WZzBFFV6Clr5D0mSwY1l5SZ3+kw9URU+xcW5Rw0U2OMnes0gqX
gMMqx1lVMhVZYHCNvWceTqAl7YLsFDMUQWCXsOh9hVJBN9A5dbUMYQ2yyoMCOS+K
d2kEbOAbZYF5eEavMNruqpG+Xl50/UAPT5sUxsSM/6c5gC/o1IPI571f2EKsKe1l
uc15pj5LFOb6CFMejlpr535EY6Q3a09riQjWfltK01AQ/Zv6xuAa1Tyb1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKDEDXitpo/MzGhg/1GwdKD5xP5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQW9NUU5lSzJtajh6TWFHRF9VYkIwb1BuRV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1wVMA0G
CSqGSIb3DQEBCwUAA4IBAQBuk+YnaCgSY2swPaEQaOQ3agzCRMDVLm40kkWWNSzD
PIsOiUbqYs1bOXxxvlSvFteqCNK5k6Y4+7VFCWKoNRSAa+MrZfTgLN0HZnUyOrXv
XkElSHK8kqjSYM6kOE+AMI/T7B482x7cNoT7hDxSsk5XR+o85P8PobTTSQ5ylJwt
Mpzf05tcOecyf9q5ffDvALgk9qbf3fwfTrjOxa0jvTkt+z5L7PqjMHMr7WFk5HzW
G3O2yoLBM0E4luF911etvSOtq6Z9nUeyOsAvMSPFJZ+YG8NmfrUtfHAtoT3N8Xxu
To2XPlLZ8gkA+pfG+6+ObdWjDE/0lPEDCGYl8mcz1cQX
-----END CERTIFICATE-----
Generated at Thu Feb 12 19:50:31 2026 by rpki-client