This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/mwJT56lh20lnnPNb2evS5T-qWow.roa
File: mwJT56lh20lnnPNb2evS5T-qWow.roa (raw, json)
Hash identifier: JKi1qoZgs72wB/QUa1LelaEM2vIQZNp7ROnLWSEumqo=
Subject key identifier: 9B:02:53:E7:A9:61:DB:49:67:9C:F3:5B:D9:EB:D2:E5:3F:AA:5A:8C
Certificate issuer: /CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Certificate serial: 019BB01DFE0A605F5E5214F460E27814AAE7
Authority key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/mwJT56lh20lnnPNb2evS5T-qWow.roa
Signing time: Mon 12 Jan 2026 02:51:54 +0000
ROA not before: Mon 12 Jan 2026 02:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48507
IP address blocks: 91.211.56.0/22 maxlen: 24
185.193.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b0:1d:fe:0a:60:5f:5e:52:14:f4:60:e2:78:14:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9
Validity
Not Before: Jan 12 02:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b0253e7a961db49679cf35bd9ebd2e53faa5a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:3c:28:dc:d7:8c:77:17:30:a8:4f:92:66:
ab:01:0f:0b:d1:3a:b3:02:5b:6a:47:dd:28:57:82:
25:0a:f4:79:c6:2f:27:8d:bc:84:f1:b0:8e:a7:68:
7f:9a:5f:77:eb:0c:4d:c5:57:72:55:84:32:59:88:
8d:54:a0:59:40:25:07:de:cc:d9:5b:3c:5a:16:d2:
a1:4d:8c:82:f7:54:c0:5e:fc:75:1f:64:52:51:2c:
64:35:d4:ed:15:8b:cc:2b:d7:1e:ba:7e:77:c7:35:
92:fb:b9:8f:4c:e5:f7:a2:dd:42:23:38:e5:b8:42:
d3:53:19:35:c2:24:7c:5f:32:09:eb:84:a5:e0:88:
85:b4:83:6d:85:78:59:d1:65:67:c0:30:25:10:b1:
32:fa:95:a7:74:1e:fd:04:40:a5:5e:28:5b:14:d3:
93:7d:7b:ab:92:66:89:9d:87:57:f6:f8:59:85:9d:
f7:c3:8b:19:5d:fe:9d:6a:68:65:5a:94:6d:a9:31:
69:5a:6c:ad:d4:6e:a4:30:41:a1:71:48:ff:f8:1f:
32:14:7e:22:34:20:89:77:8e:2c:22:3e:a2:a9:92:
ff:cd:aa:ea:2a:fa:eb:6b:7b:0f:f5:15:38:2f:c8:
4c:11:ac:f2:9b:be:f8:4e:3c:cf:99:6c:35:9c:c6:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:02:53:E7:A9:61:DB:49:67:9C:F3:5B:D9:EB:D2:E5:3F:AA:5A:8C
X509v3 Authority Key Identifier:
keyid:01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/mwJT56lh20lnnPNb2evS5T-qWow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.56.0/22
185.193.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:6c:3e:c1:72:ba:be:d8:24:2c:1e:e3:87:6d:44:ae:df:cd:
bb:83:f8:53:6e:b4:4f:50:3b:c6:6d:82:ed:0c:4f:b3:9d:05:
5c:f6:ac:07:9d:9f:64:e7:f5:c1:05:ba:13:ea:b9:f0:87:11:
87:3d:48:88:f2:2a:e7:66:54:3a:3c:da:36:93:c7:52:10:5b:
40:57:f2:28:50:77:4c:f4:3d:af:42:39:60:56:a5:08:43:4e:
0c:9f:b4:2c:a9:02:36:df:6e:e8:15:36:af:85:e6:cd:05:8a:
70:e0:97:71:1b:b7:6e:2f:12:66:b8:34:ac:f8:a2:2d:a9:e1:
d7:d5:7c:b3:8a:9a:fc:08:7d:2e:c0:2e:38:35:74:ea:c0:47:
24:1a:06:3c:84:5d:6d:7d:30:44:18:e8:c9:ea:46:c9:6c:5f:
8a:51:0d:0a:fd:ff:5c:97:e0:96:40:57:b0:ab:f2:4d:8b:ec:
96:8a:ae:b8:d0:74:19:97:6c:26:e5:40:e7:c4:80:5c:55:3b:
33:5c:60:11:fe:88:20:32:57:ff:14:0d:1c:fb:ab:c0:ba:1e:
3d:72:91:b7:01:31:6e:c9:79:e2:68:c7:51:81:bf:cc:a4:e7:
96:81:72:d9:82:e1:88:92:d6:3a:ff:47:1b:00:7d:9f:8f:35:
06:9a:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:37 2026 by rpki-client