This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/a_bPKr_BRW7-uV28J0kW18UUGgI.roa
File: a_bPKr_BRW7-uV28J0kW18UUGgI.roa (raw, json)
Hash identifier: ujNW2fJdpnTVC1FhgJD/6p6WEXThSSTIszSadQyIDQQ=
Subject key identifier: 6B:F6:CF:2A:BF:C1:45:6E:FE:B9:5D:BC:27:49:16:D7:C5:14:1A:02
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 019B7FF26ABEA381ABAB8A13224A31176AFD
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/a_bPKr_BRW7-uV28J0kW18UUGgI.roa
Signing time: Fri 02 Jan 2026 18:22:32 +0000
ROA not before: Fri 02 Jan 2026 18:22:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57813
IP address blocks: 91.235.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:6a:be:a3:81:ab:ab:8a:13:22:4a:31:17:6a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Jan 2 18:22:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf6cf2abfc1456efeb95dbc274916d7c5141a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:52:64:f4:87:b7:9c:26:bc:e4:f8:28:92:
51:c1:13:22:bf:43:29:56:97:94:51:46:22:ef:75:
bc:82:aa:b5:1e:0f:04:0a:bc:35:2d:56:7d:99:eb:
c9:b9:69:a4:4f:8a:b7:cb:b5:e6:d0:22:24:4c:a8:
62:35:a2:54:5a:1f:64:0e:bd:77:80:04:28:0d:f6:
fc:71:57:9d:1a:27:93:d2:69:4d:64:1e:e2:61:20:
61:53:df:3b:d4:70:b5:6f:a2:bb:dd:d7:60:da:6e:
5e:da:6f:6f:20:c1:83:97:27:4b:28:82:b4:6f:8a:
13:34:34:45:07:00:f4:f1:3b:00:df:c5:b2:ec:34:
18:bd:0f:6e:a5:7a:a9:b2:19:df:09:8b:6a:e2:29:
74:f7:c0:bb:d0:af:0b:e5:2a:ad:72:97:b8:86:20:
ff:3a:9b:24:8d:5f:99:aa:be:07:ce:03:bf:ac:76:
70:36:cf:38:a1:3e:a6:9e:78:c8:a7:77:a7:fa:c4:
3c:de:f9:f7:55:04:df:98:77:34:fe:57:63:34:df:
ad:38:88:0b:e6:7b:3f:cb:46:a6:d1:8f:1e:ca:23:
f5:03:27:ff:74:0b:aa:4a:df:1d:a1:b9:f2:b0:12:
8a:38:2b:b9:0c:0e:11:df:1e:0a:e2:21:a9:75:b6:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:CF:2A:BF:C1:45:6E:FE:B9:5D:BC:27:49:16:D7:C5:14:1A:02
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/a_bPKr_BRW7-uV28J0kW18UUGgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4c:58:b6:dc:39:f6:15:3a:4e:e2:2c:6d:0f:cd:a7:28:fb:
60:ef:df:dc:7d:e1:0b:81:cc:bd:c5:0f:a5:cb:30:45:92:b8:
2c:e2:59:32:d6:90:8e:89:85:5e:84:6e:75:c2:42:cf:e5:e0:
d7:db:4d:ce:b4:f3:9c:d1:7d:47:f2:9f:0e:cf:b5:de:ef:07:
30:40:20:85:0a:04:3e:c4:8f:7a:01:00:30:13:01:64:c6:b6:
38:e0:60:14:91:0a:9e:97:45:b5:1c:72:46:1e:48:82:46:ea:
21:34:24:16:7a:69:7a:d5:c3:3c:b7:46:42:8e:2e:35:ec:3d:
68:3e:34:80:57:77:75:7a:cd:e5:86:a0:92:fb:9e:cc:66:68:
d8:f3:08:d6:45:dc:12:e9:e0:8b:d8:41:e9:4f:69:2e:10:83:
ec:0f:12:28:b1:af:ec:75:58:08:41:fc:51:62:00:ff:b3:5f:
71:b7:c9:45:c2:dd:7f:ee:8a:3d:ff:9b:9a:84:36:39:b9:d5:
05:e2:b0:3b:46:eb:a8:1b:ad:e4:89:c7:a4:72:44:3b:0b:dd:
f0:c2:e2:e7:67:7c:b7:54:81:fa:d0:4b:c0:52:53:83:56:20:
d3:8c:3e:4b:2d:7e:ac:09:ad:83:d2:fb:d2:af:ff:b7:58:c7:
82:b3:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:20 2026 by rpki-client