This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa
File: CL722J7xYfTmivJofsZgMUzQplk.roa (raw, json)
Hash identifier: eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=
Subject key identifier: 08:BE:F6:D8:9E:F1:61:F4:E6:8A:F2:68:7E:C6:60:31:4C:D0:A6:59
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 019B797E7D8F155AB4A08EC23124E300EE70
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa
Signing time: Thu 01 Jan 2026 12:18:11 +0000
ROA not before: Thu 01 Jan 2026 12:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198463
IP address blocks: 91.217.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:7d:8f:15:5a:b4:a0:8e:c2:31:24:e3:00:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: Jan 1 12:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08bef6d89ef161f4e68af2687ec660314cd0a659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:0c:32:be:d6:70:f5:78:38:aa:88:ea:be:
23:0c:41:3d:05:06:c3:1f:3c:c3:a2:05:e0:66:89:
a5:b8:78:67:2d:9f:03:91:51:28:df:59:82:81:73:
e5:e9:ee:b0:89:8f:b2:5b:d5:8c:88:6d:5c:f6:a2:
87:ea:d7:05:f0:4a:66:02:2a:20:f1:d2:95:5e:a2:
42:8c:22:a2:c0:c6:a5:cf:cb:0d:08:12:de:34:45:
b3:a0:0e:6a:af:a2:ee:80:c5:7c:2e:37:3f:18:c2:
ff:e9:6e:3f:0f:32:69:4c:fa:77:f5:be:df:3a:98:
7a:60:7d:c7:e1:aa:7d:9a:cb:0e:de:af:6e:81:f4:
a1:13:97:8d:08:25:77:00:cf:f7:30:01:a0:24:9c:
43:58:9e:96:25:20:2c:58:24:ce:28:8f:2a:9c:cd:
3d:13:a8:a5:1f:b5:89:e0:3e:be:ec:d2:96:c7:dc:
bf:07:f0:11:03:25:d6:5b:bb:44:0e:83:c8:85:6d:
9a:39:f3:62:73:62:7d:49:90:40:2b:50:db:04:08:
f1:f2:1d:fc:e7:56:2a:1c:42:27:15:db:c9:a5:1a:
2e:3b:42:96:67:7c:5e:d6:c0:0b:39:c0:07:29:09:
36:86:98:7c:78:1c:bd:06:b3:ef:d6:6a:5d:69:84:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BE:F6:D8:9E:F1:61:F4:E6:8A:F2:68:7E:C6:60:31:4C:D0:A6:59
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.209.0/24
Signature Algorithm: sha256WithRSAEncryption
84:38:f9:68:0f:35:77:17:71:eb:16:c4:aa:f4:42:14:18:47:
21:9f:fa:f9:92:18:c0:52:25:49:5c:d5:dd:41:a3:e8:35:03:
b6:41:de:29:77:8b:b7:5f:38:b0:49:de:21:60:88:97:36:de:
d3:42:1b:00:bd:d1:2b:81:ed:a4:f0:6a:80:5d:5e:d0:83:cc:
88:37:bd:30:69:fc:4c:b7:93:75:8b:ed:77:b8:01:2f:b1:22:
24:93:51:ab:08:01:7a:d7:6e:ee:3a:0b:3a:6f:83:0d:f2:22:
02:88:a0:de:96:9c:30:64:81:78:6d:2a:db:7f:a1:7e:30:47:
09:d2:2e:61:24:20:83:78:2b:d7:e1:4c:96:02:dd:8e:c2:ce:
0f:a5:43:cb:31:1e:b9:d2:c6:22:29:0f:19:85:ed:a9:8f:e9:
5a:f2:05:76:9f:de:6a:77:ff:9d:48:46:a8:07:81:d0:23:c0:
dc:58:bb:f4:0e:8f:88:1c:74:9c:c5:d1:e5:30:7c:b9:d6:f4:
e7:1b:33:b4:88:3f:8f:2c:c9:e7:aa:67:58:0d:48:58:7f:95:
b6:9c:b1:5b:50:9d:c6:f2:5f:26:53:60:00:b1:44:b0:9f:87:
4c:e6:e9:2c:e0:d9:3a:ae:d5:d9:90:40:77:e0:56:77:1f:cf:
60:0d:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:10 2026 by rpki-client