This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YqSoAdF6iqyu833zm4BfrIMOBwM.roa
File: YqSoAdF6iqyu833zm4BfrIMOBwM.roa (raw, json)
Hash identifier: jTKv2FDAxa4EBsIxkr3l8kxA1mMBCrCYiLqashreHAg=
Subject key identifier: 62:A4:A8:01:D1:7A:8A:AC:AE:F3:7D:F3:9B:80:5F:AC:83:0E:07:03
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 019B7A5B21FCE3A649E6AA9EDE8F68133085
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YqSoAdF6iqyu833zm4BfrIMOBwM.roa
Signing time: Thu 01 Jan 2026 16:19:11 +0000
ROA not before: Thu 01 Jan 2026 16:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202650
IP address blocks: 91.190.82.48/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:21:fc:e3:a6:49:e6:aa:9e:de:8f:68:13:30:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 16:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a4a801d17a8aacaef37df39b805fac830e0703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:8c:64:69:fd:1e:4e:54:3e:cb:ba:ce:c1:
89:f0:7a:11:2e:94:bb:76:bb:ac:40:02:97:4c:b3:
1f:97:fa:2b:fd:5a:da:38:03:0b:ac:40:eb:78:ba:
bf:bf:f9:b6:b5:ce:bf:23:b8:ad:1b:bf:18:d1:ef:
06:4b:25:b4:f7:85:2c:cd:87:b8:a8:21:3a:a7:94:
94:d3:d1:7f:82:64:47:3a:6e:34:4f:5d:40:ac:cd:
20:4f:a9:ee:fa:3a:2d:90:93:29:8e:69:22:4d:28:
c2:a9:a8:3a:8c:e5:09:09:80:8c:de:d2:19:0b:e0:
2a:74:45:1d:5f:b5:55:6d:a4:32:d5:51:cc:01:2a:
2c:4b:4b:31:e4:8a:a9:24:ea:e6:c4:78:41:a0:2e:
ca:be:15:d9:45:a9:db:88:0f:be:c7:b8:04:b6:dd:
f4:7a:7c:dd:3d:e1:25:53:94:1e:85:e9:b4:a0:3f:
cb:ea:6e:d2:24:0c:52:3f:47:50:b8:84:c5:e5:b3:
32:18:8e:52:4d:8c:d0:67:06:1f:47:d0:96:f3:fa:
25:00:47:19:83:12:20:3a:c1:b8:10:85:81:c1:92:
29:7b:50:86:31:ac:27:6b:3b:a0:d0:d2:e8:9b:87:
7f:59:d8:87:c4:15:a0:f0:e6:b9:f7:77:78:9d:3a:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A4:A8:01:D1:7A:8A:AC:AE:F3:7D:F3:9B:80:5F:AC:83:0E:07:03
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/YqSoAdF6iqyu833zm4BfrIMOBwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.82.48/28
Signature Algorithm: sha256WithRSAEncryption
92:71:96:83:4d:6a:57:c0:cc:ad:b4:e6:ad:1a:3e:28:75:b8:
4e:80:22:36:e3:21:f0:94:86:ba:a0:ad:99:de:d2:a0:2a:a6:
b7:e5:51:67:3f:bf:18:70:c9:43:27:7d:af:6f:b3:63:28:4a:
71:2a:a0:bd:19:65:8c:49:17:47:51:b3:14:cd:f4:f1:e9:52:
25:5e:bd:09:e0:af:e8:11:97:60:d7:e4:96:ad:86:d2:1f:35:
a7:06:ec:0e:88:c2:9f:cf:f4:22:e6:f9:06:f6:32:0e:68:e4:
50:2f:5a:58:c1:df:2a:e2:b5:fd:ce:8b:c2:f3:15:7f:14:06:
e6:4f:c4:e4:9e:b7:e1:78:29:29:38:4a:94:f5:64:33:91:b8:
24:d4:37:d3:d8:b8:0b:0f:dd:fb:88:7a:3f:70:11:f7:dd:86:
2d:b3:c8:6c:bd:37:fb:1f:ab:54:58:ff:e6:32:9e:a8:7a:cd:
c9:ca:7e:e5:f0:35:3f:22:97:1f:b1:9b:b7:42:ac:8b:7d:86:
87:40:e8:c0:08:94:ab:b2:79:62:61:16:9e:45:a1:53:2f:6a:
37:99:3e:a0:ee:29:b1:43:c7:02:0c:c9:78:ee:42:16:fd:93:
ae:9f:c2:b8:40:ee:3c:e6:d8:72:cd:ee:48:10:e0:64:a7:34:
0f:af:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:23:11 2026 by rpki-client