This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa
File: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (raw, json)
Hash identifier: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=
Subject key identifier: EE:E9:26:9F:05:DE:A1:A3:1F:6F:78:48:23:F0:A6:D5:B3:3D:26:EC
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019B7C12858CDD69F50C89BE4AD8D056063B
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa
Signing time: Fri 02 Jan 2026 00:19:07 +0000
ROA not before: Fri 02 Jan 2026 00:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48736
IP address blocks: 91.209.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:85:8c:dd:69:f5:0c:89:be:4a:d8:d0:56:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Jan 2 00:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eee9269f05dea1a31f6f784823f0a6d5b33d26ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:03:b9:f2:ad:2c:30:88:25:49:24:ef:71:
d8:8e:bc:34:a7:ca:99:cf:da:73:0c:b9:05:f0:13:
8f:9f:80:5b:fa:68:27:bc:b7:70:fb:9c:71:0a:5e:
11:75:ed:82:eb:85:32:8c:26:99:e9:52:e2:ea:e2:
f1:0d:dc:22:97:d7:8b:2b:5c:47:45:0a:a0:b2:dc:
c6:dd:7d:65:6c:0f:21:ee:f4:6e:a5:30:d1:4f:06:
d2:45:62:79:68:a8:80:31:1a:40:5f:ae:1a:17:ad:
bd:3d:00:a1:1b:cb:dc:c3:5f:9e:98:9f:26:34:6b:
e6:41:0c:26:23:55:28:2e:c7:ec:09:0d:12:69:1b:
87:73:d5:7f:b9:0c:fe:79:d8:c1:40:d7:6e:3c:f4:
c9:63:5b:00:1a:6c:fd:68:c1:f2:0c:4c:36:8d:a8:
ae:12:06:b7:f9:c2:4b:05:13:6f:e3:c3:20:f5:9b:
cb:7c:81:a8:dd:9a:20:84:c0:b8:c1:b6:86:12:17:
3d:c2:63:d0:5b:d6:c1:f3:60:4b:23:bb:55:cb:20:
0e:3a:e8:b4:c9:49:8a:71:23:1c:c7:9a:3e:e9:31:
c3:c6:e5:c0:1a:08:0c:d2:d7:4a:31:5e:0d:f5:8a:
aa:dd:5b:ce:53:5a:0f:06:40:9f:b9:0d:95:2c:94:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:26:9F:05:DE:A1:A3:1F:6F:78:48:23:F0:A6:D5:B3:3D:26:EC
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:aa:f1:78:3d:75:10:dd:94:41:da:26:6f:d6:36:94:27:7d:
a5:14:56:eb:98:f7:4a:1d:e9:92:0e:a1:ed:7d:62:92:4e:03:
84:37:95:88:11:31:15:b0:5c:b1:bb:6c:b7:29:f7:9c:18:50:
d3:b9:ad:63:e5:00:a1:5e:75:27:61:b3:49:34:a8:61:68:4d:
1b:db:0d:30:0e:f9:ae:ee:78:41:2d:3d:52:0b:80:56:74:c1:
92:d6:5f:21:25:8f:53:56:3a:b8:25:0c:ab:ba:52:c0:e5:ef:
03:2e:c2:3a:d0:71:a9:1f:bc:35:cf:59:36:de:58:49:18:02:
7e:b1:00:ff:07:fb:4c:c1:9b:6c:cf:fc:e6:4e:ef:b7:c6:d0:
81:dc:54:f5:39:7a:a3:00:c3:7a:8e:17:bb:3b:0f:99:9a:00:
43:47:d4:ba:d0:77:6f:33:36:42:4d:5d:88:45:60:13:9b:49:
0e:d1:56:f1:97:c7:42:14:0b:95:b6:29:8c:f1:93:c0:05:85:
6e:d0:74:57:2a:b1:bb:9b:8e:51:d8:6f:a2:ff:2b:bc:fb:44:
ae:40:f9:cb:e9:ba:e2:00:c2:39:14:86:3c:f0:c6:30:fc:d7:
71:41:fe:07:82:f3:dc:5c:31:b9:c4:2f:7a:50:16:31:32:cf:
e6:35:99:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EoWM3Wn1DIm+StjQVgY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk
MDg3MWUwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU5MjY5ZjA1ZGVhMWEzMWY2Zjc4NDgyM2YwYTZkNWIzM2QyNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMcDufKtLDCIJUkk73HYjrw0p8qZ
z9pzDLkF8BOPn4Bb+mgnvLdw+5xxCl4Rde2C64UyjCaZ6VLi6uLxDdwil9eLK1xH
RQqgstzG3X1lbA8h7vRupTDRTwbSRWJ5aKiAMRpAX64aF629PQChG8vcw1+emJ8m
NGvmQQwmI1UoLsfsCQ0SaRuHc9V/uQz+edjBQNduPPTJY1sAGmz9aMHyDEw2jaiu
Ega3+cJLBRNv48Mg9ZvLfIGo3ZoghMC4wbaGEhc9wmPQW9bB82BLI7tVyyAOOui0
yUmKcSMcx5o+6THDxuXAGggM0tdKMV4N9Yqq3VvOU1oPBkCfuQ2VLJTlJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7pJp8F3qGjH294SCPwptWzPSbsMB8GA1UdIwQY
MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt
MTkzY2M2MWJjZTYxLzEvN3VrbW53WGVvYU1mYjNoSUlfQ20xYk05SnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx
LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HxMA0G
CSqGSIb3DQEBCwUAA4IBAQAMqvF4PXUQ3ZRB2iZv1jaUJ32lFFbrmPdKHemSDqHt
fWKSTgOEN5WIETEVsFyxu2y3KfecGFDTua1j5QChXnUnYbNJNKhhaE0b2w0wDvmu
7nhBLT1SC4BWdMGS1l8hJY9TVjq4JQyrulLA5e8DLsI60HGpH7w1z1k23lhJGAJ+
sQD/B/tMwZtsz/zmTu+3xtCB3FT1OXqjAMN6jhe7Ow+ZmgBDR9S60HdvMzZCTV2I
RWATm0kO0Vbxl8dCFAuVtimM8ZPABYVu0HRXKrG7m45R2G+i/yu8+0SuQPnL6bri
AMI5FIY88MYw/NdxQf4HgvPcXDG5xC96UBYxMs/mNZlb
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:48 2026 by rpki-client