This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K1et99aGlCbRN0atD8laA6wCpoM.roa
File: K1et99aGlCbRN0atD8laA6wCpoM.roa (raw, json)
Hash identifier: zDYkdcuk3KHX/NDKK5idsi3lunUsicUNCHCkjJQM/Ec=
Subject key identifier: 2B:57:AD:F7:D6:86:94:26:D1:37:46:AD:0F:C9:5A:03:AC:02:A6:83
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019B7D5A9C4C683B1B37CEACB2310E6651CE
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K1et99aGlCbRN0atD8laA6wCpoM.roa
Signing time: Fri 02 Jan 2026 06:17:28 +0000
ROA not before: Fri 02 Jan 2026 06:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137951
IP address blocks: 213.176.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:9c:4c:68:3b:1b:37:ce:ac:b2:31:0e:66:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 06:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b57adf7d6869426d13746ad0fc95a03ac02a683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:9a:47:46:82:94:80:21:06:e0:fe:7a:59:
fa:da:7e:90:46:78:48:41:79:46:c7:61:0b:66:59:
66:75:bf:e1:a1:e1:2c:5c:c0:06:01:66:05:58:bc:
e1:6a:6e:2b:e8:86:bf:a6:90:0d:f6:7d:8c:96:82:
51:84:69:8a:a1:dc:1f:56:a6:69:5d:83:03:7a:13:
69:e3:2c:b5:4b:cc:e9:bc:d2:62:97:86:19:32:47:
00:2d:91:58:40:08:d7:8f:a2:75:69:5b:81:be:09:
b3:1a:05:da:5d:0a:d7:61:24:8f:d8:78:ae:4a:ca:
a5:13:76:b1:dd:a8:4a:5e:f4:6c:a1:b2:6b:51:6e:
5c:ee:be:2f:46:ae:f3:e4:e6:96:c6:bf:8f:7a:7b:
43:43:14:9a:30:ed:bc:ef:7f:2f:e7:99:85:99:97:
9d:3e:06:49:63:7f:ed:83:b7:96:a8:12:5a:80:8e:
7d:45:e0:46:e2:1e:83:a8:f1:25:d2:b8:84:56:8b:
27:15:3a:96:1e:16:fe:28:75:de:f9:b7:75:63:38:
3a:ce:11:b2:43:fd:91:7e:e3:ee:a3:8c:fd:99:9c:
ac:dd:b1:3f:88:9f:e7:f6:58:5d:70:8a:09:d3:0f:
88:8b:41:73:e3:77:3f:3c:8d:f9:ad:97:03:15:3f:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:AD:F7:D6:86:94:26:D1:37:46:AD:0F:C9:5A:03:AC:02:A6:83
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/K1et99aGlCbRN0atD8laA6wCpoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a0:f4:3b:85:71:22:54:34:71:4c:ef:6a:f1:38:4f:a0:65:
7f:ab:c5:d3:57:75:98:e9:e7:bb:0e:2b:cd:2a:9d:d1:31:4b:
f3:26:fd:37:18:8e:69:cc:73:06:73:86:09:9b:c0:00:79:d5:
21:2b:e2:7e:19:ed:09:1f:b6:39:2f:43:12:22:d4:85:8b:e6:
28:bc:c5:61:03:4d:f4:04:2f:99:5c:bc:4a:35:1d:01:d5:48:
a8:d8:14:50:89:9c:6c:de:49:49:be:0a:a8:bb:c0:5d:ac:71:
7d:aa:df:f8:b4:81:6e:bb:6d:ba:7e:5a:78:cd:94:4a:78:d1:
f8:cc:77:88:bf:2d:cd:bf:33:3f:1d:1d:ef:26:c2:b2:f3:fa:
23:bf:59:ee:44:34:f0:fa:83:95:b9:cf:07:c5:20:34:5d:5a:
72:57:aa:32:6e:f5:b8:1a:3f:e5:62:9a:d6:92:22:d9:df:b5:
61:41:e9:18:f6:87:9c:91:fc:93:72:98:86:6f:7c:f4:59:ce:
17:ad:93:78:21:7e:87:4f:09:4b:92:66:8d:ca:b3:f0:d0:6a:
a8:2f:8f:af:d2:80:c0:44:fe:13:72:f3:d1:e9:2e:95:dd:61:
5e:8e:43:34:c0:21:21:9c:29:5b:4e:4b:90:96:14:63:3d:23:
d7:1d:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:27 2026 by rpki-client