This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa
File: ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (raw, json)
Hash identifier: JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=
Subject key identifier: 6A:8E:75:4A:13:7F:86:C2:C8:60:8E:66:F2:78:A0:EC:2B:38:A3:7B
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019B7BA33FFC220851DEB617C7FF8A6598EC
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa
Signing time: Thu 01 Jan 2026 22:17:34 +0000
ROA not before: Thu 01 Jan 2026 22:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50912
IP address blocks: 91.216.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:3f:fc:22:08:51:de:b6:17:c7:ff:8a:65:98:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jan 1 22:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a8e754a137f86c2c8608e66f278a0ec2b38a37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:00:3c:58:75:92:b6:e3:26:d8:b1:3c:37:
49:2a:eb:4c:6c:ee:a7:e9:50:af:88:0c:fc:fe:c8:
fd:14:ae:b4:60:34:2e:f4:ea:de:c0:c1:42:ca:1c:
6d:87:c0:2b:61:8b:6b:1e:b4:1b:2e:ad:ae:20:fa:
f4:cc:dc:a8:55:45:5c:c9:0f:8a:98:f5:fd:2e:ed:
07:20:1a:cb:50:25:9e:85:40:fd:bb:6a:17:17:61:
25:f3:c3:6f:ed:9c:29:0b:7b:cf:02:73:df:74:58:
14:bb:23:50:66:02:a3:99:27:58:1d:2a:ba:fd:fb:
a5:7b:44:49:43:9b:b2:90:60:65:7e:5d:d7:a1:40:
a4:71:97:a8:89:d4:a6:c4:05:f0:d5:68:84:fb:5f:
b0:cc:f9:b7:9f:ef:85:97:99:8d:fb:6c:4a:e5:2e:
4a:e7:d9:e9:98:bc:90:ee:41:6d:7f:de:f7:c9:46:
2f:68:08:b4:d8:17:f8:28:a6:9f:d2:c6:74:76:01:
ef:81:21:4f:7c:6d:c3:f8:9f:b5:c3:11:f0:f5:c0:
c4:0a:53:52:b0:da:87:54:0c:8c:b0:ec:f1:f4:a0:
f7:ab:cd:c7:71:5d:29:68:a9:17:94:03:cb:e9:0b:
5f:11:62:4f:48:3c:99:6d:38:2a:e7:3d:13:11:6c:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:75:4A:13:7F:86:C2:C8:60:8E:66:F2:78:A0:EC:2B:38:A3:7B
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.27.0/24
Signature Algorithm: sha256WithRSAEncryption
70:61:bd:38:c7:63:be:5a:b4:4a:b8:d8:a1:b5:4a:30:73:7c:
91:ec:92:00:d2:57:2e:bb:c3:dc:18:be:2f:30:a2:4a:60:89:
43:d1:07:1a:26:3f:c3:e4:01:9d:5a:00:21:44:69:96:c7:fb:
cd:03:5d:88:c7:25:c5:6c:a0:08:85:5f:b9:09:7c:98:0c:f1:
c2:40:f3:25:da:85:bf:bb:82:80:e1:2e:96:53:02:b2:c4:c6:
78:97:7d:cc:02:e7:18:2d:d2:31:58:7a:65:36:18:07:c9:a9:
db:fc:77:fa:a3:c9:6a:15:77:7d:74:29:f6:5f:89:88:76:6f:
37:5f:b5:7d:e5:2f:65:de:43:22:3a:aa:18:8f:6c:d7:25:da:
33:cc:d2:3c:f0:0c:16:b6:fd:2b:52:ff:60:48:0f:9c:a7:06:
16:44:27:b8:fe:d0:25:64:4e:10:04:6d:50:44:17:c7:a6:b2:
39:d9:15:f0:5a:b9:74:f1:23:3c:6b:9d:35:35:2a:d6:e6:b2:
19:2f:55:eb:2f:10:eb:90:92:8d:6e:1a:e8:48:f1:62:39:2b:
9e:62:53:57:23:39:8f:3a:85:4f:87:09:22:a9:f4:26:e7:94:
b9:34:34:e2:e6:b9:de:05:ff:94:d9:f2:63:3d:dc:ec:b0:10:
31:49:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:22 2026 by rpki-client