This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/sIZQ5tszAsQWV3tSj16L1GSVX6c.roa
File: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (raw, json)
Hash identifier: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=
Subject key identifier: B0:86:50:E6:DB:33:02:C4:16:57:7B:52:8F:5E:8B:D4:64:95:5F:A7
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019B77591BE7C25B2D75A5778CB64AFEAA07
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/sIZQ5tszAsQWV3tSj16L1GSVX6c.roa
Signing time: Thu 01 Jan 2026 02:18:07 +0000
ROA not before: Thu 01 Jan 2026 02:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56750
IP address blocks: 91.227.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:1b:e7:c2:5b:2d:75:a5:77:8c:b6:4a:fe:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jan 1 02:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b08650e6db3302c416577b528f5e8bd464955fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:e6:14:47:b1:86:40:65:7b:bf:78:52:9a:
af:4a:65:62:17:e7:b0:84:a1:13:0b:7b:dc:e1:1e:
13:5c:69:58:38:fa:c7:53:90:ff:05:f3:19:e6:a7:
ea:2f:2a:df:7a:f1:2b:70:17:4a:ae:73:76:81:7f:
98:dd:0c:ce:96:0c:ea:7a:dc:57:0d:23:c5:36:fe:
4c:1e:6a:ca:c9:50:39:9e:a8:9b:02:0b:6c:70:90:
73:82:98:ed:d4:85:21:55:55:50:ab:c7:1f:ae:46:
d5:09:d9:5a:63:7f:05:d5:42:e5:ce:db:60:1d:ae:
93:6f:bf:af:b1:f2:d2:ee:2b:19:62:6d:0d:9e:c7:
e6:72:ab:e0:74:20:a6:ab:6c:4c:27:0a:54:51:7c:
7c:83:a7:42:f0:57:f3:2b:a1:bb:59:cc:44:7a:3b:
25:bc:34:6a:e8:5f:74:d7:97:67:92:98:40:41:8a:
f6:c3:5c:81:64:3e:df:f0:30:d5:f9:d1:1d:34:5e:
c1:b4:af:c5:e4:4d:70:af:46:b7:a4:58:ea:71:6e:
2f:0a:06:b2:dd:08:0b:96:90:7e:f3:49:27:71:bf:
fb:ce:44:60:58:68:8d:6a:02:dc:a5:34:45:0f:aa:
bc:d4:88:ec:e7:33:36:93:5f:29:fc:75:2e:d3:55:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:50:E6:DB:33:02:C4:16:57:7B:52:8F:5E:8B:D4:64:95:5F:A7
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/sIZQ5tszAsQWV3tSj16L1GSVX6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.90.0/24
Signature Algorithm: sha256WithRSAEncryption
53:eb:40:94:bd:99:ef:88:1e:9c:a7:c5:27:56:ea:1e:51:e9:
33:33:82:15:cd:53:ef:ec:88:d4:b3:fb:1c:20:b1:d2:a5:98:
54:a8:52:8a:4c:6a:0b:89:cd:83:f8:bd:d9:84:97:a4:a2:79:
09:d0:f6:5c:95:c1:1e:e9:1d:0a:8e:97:d0:78:52:3c:26:e7:
f2:1c:29:af:99:cd:f6:9d:b8:d5:97:dc:fc:21:ac:01:fa:0f:
64:8e:f8:1d:a2:cf:8d:52:35:de:1a:f9:c7:9a:cd:28:2d:45:
cb:6c:26:cd:d0:a7:53:a3:2f:46:f8:ed:78:28:cb:ec:c9:ba:
c0:bc:d4:53:63:01:ab:c7:16:4f:96:7c:b9:63:89:28:b9:1e:
26:6e:f9:c9:b3:01:a2:d5:d8:32:a8:53:72:b8:60:31:5d:13:
01:f1:8c:db:dd:20:71:8e:21:63:dc:53:d8:79:a1:32:23:5c:
68:45:d0:fe:15:26:62:9a:ed:7c:39:1a:ba:4b:e7:20:28:e6:
b3:7c:0c:10:cf:a2:9e:5c:7f:e9:ba:d4:ab:24:ab:12:95:a5:
ea:2d:6d:18:10:9a:ac:7f:75:bd:7a:4d:ed:f9:c9:c1:c1:fe:
57:12:39:e6:85:f4:32:72:2b:d2:1f:5a:2e:bb:8b:a4:db:aa:
16:ee:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:00 2026 by rpki-client