This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa
File: deE75SevBPoLBBV-kYApKEjzkBY.roa (raw, json)
Hash identifier: iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=
Subject key identifier: 75:E1:3B:E5:27:AF:04:FA:0B:04:15:7E:91:80:29:28:48:F3:90:16
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 019B7C1249D74018A6E7200657A29614B64A
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa
Signing time: Fri 02 Jan 2026 00:18:51 +0000
ROA not before: Fri 02 Jan 2026 00:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56813
IP address blocks: 91.237.88.0/23 maxlen: 24
2001:67c:299c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:49:d7:40:18:a6:e7:20:06:57:a2:96:14:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jan 2 00:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e13be527af04fa0b04157e9180292848f39016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:b3:5a:1f:9d:29:90:cb:e6:1b:c9:3a:b5:
78:a5:2d:b1:64:13:ea:e5:dc:df:4c:c8:d5:f6:a1:
3c:e4:bd:ca:61:d1:f6:2b:76:fc:1d:20:bb:6b:53:
66:12:18:18:66:63:f7:4d:29:cc:87:f1:2d:14:3b:
28:04:db:5c:0e:58:f5:3c:dc:a0:df:36:de:f7:dc:
07:15:2e:5f:26:e4:c8:95:5e:ee:57:97:65:c6:aa:
de:45:e9:8e:8f:88:b5:ec:28:7d:07:15:9d:4d:d3:
28:9d:c5:b0:33:dc:7e:2e:ec:38:73:bc:bb:9b:8c:
46:2a:f6:2c:b7:7d:ea:c1:b4:f3:13:49:55:87:dc:
c3:c8:e0:9d:1e:39:fc:ee:fc:fb:a8:f9:64:57:c9:
7a:4f:5d:a4:03:98:f6:df:38:e8:fa:60:18:ec:29:
f8:ac:d5:67:b4:7f:ac:35:19:af:95:85:d7:f2:7a:
d7:fd:00:06:47:43:92:c9:23:86:9b:e6:6a:a4:0d:
d0:67:ba:2f:9b:b1:f6:ef:da:e7:76:03:f3:16:95:
a6:1a:12:d1:ee:e3:6e:df:0d:fb:8b:be:5f:37:11:
57:c9:27:09:37:e5:a8:fa:29:4c:36:65:0f:6e:eb:
0b:92:c7:07:82:76:80:b7:a4:70:94:44:67:2c:55:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:3B:E5:27:AF:04:FA:0B:04:15:7E:91:80:29:28:48:F3:90:16
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.88.0/23
IPv6:
2001:67c:299c::/48
Signature Algorithm: sha256WithRSAEncryption
76:0a:48:dd:49:3f:af:bc:63:45:19:fe:16:5c:20:75:ad:ad:
bf:81:cc:d7:ad:a4:cf:5b:3c:26:f2:b3:9f:92:85:71:de:6c:
97:42:99:c5:7a:4c:58:e8:9a:c3:4d:35:7b:65:bb:f5:d0:44:
b8:0c:57:b0:0e:0c:10:36:c5:f0:63:70:86:7a:5a:1b:85:3c:
8b:1b:7d:ae:4d:73:85:3d:b6:be:2a:c7:55:c1:03:af:d8:89:
9b:9c:38:35:e3:5d:a7:7d:4b:29:d1:ad:5f:5b:bf:92:79:b3:
49:8b:9a:cd:a5:ec:87:34:c2:2a:96:83:aa:ae:17:c5:94:54:
5a:94:a8:ae:0f:e4:0f:f3:a6:5a:62:db:6e:57:e3:99:6d:20:
6f:f8:b2:8b:af:ef:2f:6e:e8:4f:48:ae:4c:05:b5:9d:2f:8d:
ef:a1:ff:8f:3d:96:31:5f:e7:6e:74:96:2e:62:19:3d:6a:af:
39:d8:df:4f:e3:54:9c:ff:92:5c:a3:12:ad:60:59:a3:04:c3:
b2:24:64:32:76:5b:04:cf:0e:60:a9:3c:8d:98:2e:aa:44:6a:
f3:73:c8:a6:59:a8:a0:e6:89:60:9d:0c:f7:0c:96:37:cb:bf:
a4:69:30:b0:47:f6:0e:2b:64:89:23:9e:43:15:66:da:76:a5:
79:b1:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:19 2026 by rpki-client