This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/MaRtt04jowFFk86_uuutN8hcKss.roa
File: MaRtt04jowFFk86_uuutN8hcKss.roa (raw, json)
Hash identifier: fZU76DAwqdxnrxuVOqFEOQy5RWDLvAlUDG+K/0ngLTA=
Subject key identifier: 31:A4:6D:B7:4E:23:A3:01:45:93:CE:BF:BA:EB:AD:37:C8:5C:2A:CB
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 019B7FF1FA27CD65700B68678FFC35A41DEF
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/MaRtt04jowFFk86_uuutN8hcKss.roa
Signing time: Fri 02 Jan 2026 18:22:02 +0000
ROA not before: Fri 02 Jan 2026 18:22:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44427
IP address blocks: 91.199.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:fa:27:cd:65:70:0b:68:67:8f:fc:35:a4:1d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Jan 2 18:22:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31a46db74e23a3014593cebfbaebad37c85c2acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9b:e0:7d:f1:96:1c:d8:c5:64:36:16:e8:38:
62:27:61:1a:a0:e6:a3:26:68:e2:60:11:26:46:57:
c8:36:9c:8e:04:af:f3:a2:8c:32:af:d9:b5:ae:77:
60:1c:c7:c3:75:b3:6c:6b:9e:6d:a9:69:09:0b:88:
bc:e0:c9:d6:94:0c:e2:2d:87:b6:97:30:a7:6a:10:
dd:97:ff:4d:b3:07:2e:9f:0e:b2:ca:45:cf:6a:0f:
9c:e8:79:68:d7:38:0c:63:0d:78:6d:8b:d6:82:44:
d1:57:20:9d:50:9d:13:13:84:dc:29:d4:71:ab:31:
d5:2d:c1:09:5d:5e:7a:a8:8f:5e:54:7c:bb:9d:8c:
7e:7d:5c:51:c3:87:8b:f0:0f:ed:d6:9c:53:1c:1a:
37:84:55:b1:32:7a:f1:9f:1a:3c:3d:08:56:0b:53:
47:03:ff:7f:af:14:68:52:54:a6:58:c2:15:fd:5e:
07:86:50:7e:5a:4b:ea:14:f6:da:d8:e4:10:d3:96:
c0:d6:07:69:05:fe:f2:a3:1d:14:8a:0f:21:51:bf:
08:b8:9e:a7:84:5f:b2:93:12:80:8f:4f:6d:b3:3f:
53:89:e4:de:84:5f:8a:af:1f:c9:2e:e8:e7:98:89:
b8:1c:00:2a:f5:56:8e:db:64:39:c9:e9:46:0c:80:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:6D:B7:4E:23:A3:01:45:93:CE:BF:BA:EB:AD:37:C8:5C:2A:CB
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/MaRtt04jowFFk86_uuutN8hcKss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:b7:f7:40:d4:cb:3e:1c:99:35:b8:00:12:56:19:5e:52:b8:
b5:a4:fa:e3:45:c0:6b:d8:9e:0c:f6:eb:97:a7:d3:27:a4:97:
31:d9:a2:44:34:0a:dd:99:dc:05:a9:7a:fa:be:e5:e5:e1:49:
99:ef:75:b2:9d:6b:db:23:78:d6:46:e4:91:34:7b:41:9d:78:
fc:dc:45:16:6a:1f:ee:0e:c2:1a:67:c7:d8:33:f9:6b:76:76:
f8:fc:82:dc:ef:b1:08:f0:c0:7e:d4:00:97:4a:a0:05:86:3d:
0a:43:09:3f:c6:fe:73:ba:45:ae:43:21:24:11:b5:4f:4d:d2:
7c:2c:28:2b:91:17:07:05:fc:57:62:45:b4:3b:73:f2:96:d3:
1b:43:93:d8:67:7c:55:d0:e8:76:6d:3b:e2:e3:e5:6c:e2:6a:
75:66:a1:a9:2d:f6:99:c6:6b:a2:bb:12:64:02:fe:ab:c3:86:
57:4f:33:c3:c0:42:05:4b:1c:95:63:39:26:09:b3:ce:6b:49:
ad:c1:59:a7:3d:79:60:fb:42:69:d5:fa:0c:3c:85:21:a0:71:
d0:f0:5b:ba:4d:78:c4:fc:4a:21:18:7e:52:0d:ea:db:3d:a8:
b0:72:cd:f9:70:d3:bf:c3:24:f1:37:c8:b4:e4:df:49:c6:71:
2a:dd:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:44 2026 by rpki-client