This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa
File: yYkIK7iiHzx2jAmuALfuoXQn_Is.roa (raw, json)
Hash identifier: gxk/AWSXI5drD+6qtBL8cwOZXbNZIUQAyoeMR1t9KzA=
Subject key identifier: C9:89:08:2B:B8:A2:1F:3C:76:8C:09:AE:00:B7:EE:A1:74:27:FC:8B
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 019B77C68246688B81E4A0CDF73834CD10F5
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa
Signing time: Thu 01 Jan 2026 04:17:36 +0000
ROA not before: Thu 01 Jan 2026 04:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29608
IP address blocks: 193.227.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:82:46:68:8b:81:e4:a0:cd:f7:38:34:cd:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jan 1 04:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c989082bb8a21f3c768c09ae00b7eea17427fc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:ef:6e:e6:76:b0:3e:c4:fd:b9:d8:25:ea:
2d:9a:c9:4b:d3:08:84:ed:e8:16:0e:ba:01:9d:d7:
24:2c:dd:b5:15:f1:34:7c:eb:75:7d:66:17:6d:f8:
04:3e:3d:26:0f:8c:53:a2:51:12:de:ba:ed:e6:1f:
f1:df:81:30:3b:db:13:be:95:f3:43:68:c0:c7:1f:
b5:ff:1e:61:1f:db:8b:6b:8c:ff:5b:a9:2a:f6:34:
1b:d6:f9:b6:cc:5d:52:a8:3c:64:ca:6a:cb:49:da:
d5:c5:ef:3c:73:a0:0e:6f:a6:fc:57:44:fb:a8:f4:
fe:d2:0e:a9:38:99:45:d8:2a:83:42:a5:5a:2a:d8:
43:fa:68:4b:8f:27:3f:e7:6b:83:38:3a:66:33:e6:
15:38:cc:e4:6c:2d:70:48:55:51:c9:d7:82:4a:01:
d6:59:52:54:54:15:d8:e4:23:e4:77:2e:a7:c3:15:
87:d9:34:a1:d5:00:d8:a2:30:84:66:c8:04:93:c4:
f3:e8:e5:9a:94:b3:53:26:ac:c7:98:0d:d6:47:88:
25:2a:ab:66:55:1a:51:59:e4:e9:74:b7:1b:b4:d2:
ef:fc:1f:7a:ce:08:7b:91:b6:16:cc:1b:e5:0b:16:
af:19:57:ef:a0:e3:9a:aa:b5:13:53:83:8e:ad:4c:
db:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:89:08:2B:B8:A2:1F:3C:76:8C:09:AE:00:B7:EE:A1:74:27:FC:8B
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/yYkIK7iiHzx2jAmuALfuoXQn_Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.228.0/23
Signature Algorithm: sha256WithRSAEncryption
69:9e:14:d9:b5:99:4e:17:1c:19:be:90:ca:ca:5b:db:fc:52:
1d:12:d1:4c:c4:b6:55:10:dd:31:3d:a5:34:17:78:19:b4:10:
1f:7d:ed:10:55:98:22:ce:3f:16:b8:43:03:4a:ba:46:8c:3e:
98:cc:f7:46:1a:3e:1b:0d:88:7d:72:02:07:8f:ed:86:d2:ae:
b9:f5:dd:62:e6:64:1a:33:1f:94:2d:b3:d0:01:ee:43:e7:63:
f1:fc:39:01:f0:c1:cb:b8:29:40:c2:b0:86:7d:7c:a8:2d:3a:
6b:23:9f:31:cd:cb:af:55:36:35:f5:64:10:72:0b:90:15:33:
a9:cf:53:5a:2b:87:9f:61:63:2f:7a:a1:b2:ef:40:c3:8d:39:
39:d8:ba:26:cb:72:66:8b:a5:1c:a7:1b:b8:f3:99:1c:14:8c:
72:dc:48:ea:3b:84:e1:64:98:c4:0c:2e:35:8a:1a:74:f0:fe:
8e:6b:31:13:16:05:38:e5:c5:4c:a4:38:f0:3a:a0:ed:ba:58:
33:6f:98:dc:44:c1:6a:02:22:e1:f3:28:db:da:93:2b:bb:e1:
2f:07:69:e0:eb:9b:a6:97:00:0e:61:04:df:aa:ad:37:12:36:
6b:70:90:04:41:aa:29:e6:2f:58:5e:44:0d:31:80:c1:27:6f:
e1:56:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:07 2026 by rpki-client