This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/6ivdGkU4JpcdJeEUFclfUNispsA.roa
File: 6ivdGkU4JpcdJeEUFclfUNispsA.roa (raw, json)
Hash identifier: pfbQDLdc9UvvbTXv81c/HKOtEm0dsqUfCqMUxvYHjrw=
Subject key identifier: EA:2B:DD:1A:45:38:26:97:1D:25:E1:14:15:C9:5F:50:D8:AC:A6:C0
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 019B7D5CBBED6A25FA6A9F45282BBCEEFE0B
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/6ivdGkU4JpcdJeEUFclfUNispsA.roa
Signing time: Fri 02 Jan 2026 06:19:47 +0000
ROA not before: Fri 02 Jan 2026 06:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39793
IP address blocks: 91.229.185.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:bb:ed:6a:25:fa:6a:9f:45:28:2b:bc:ee:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 2 06:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea2bdd1a453826971d25e11415c95f50d8aca6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:1b:69:cc:00:9d:b6:cd:5c:97:04:e0:be:
3e:4c:36:e6:d6:97:e1:34:bd:e0:36:2c:97:f0:d8:
d7:80:ac:00:4d:02:e1:8b:4f:d1:74:3c:15:2a:ef:
a7:2b:ad:4c:86:d3:b9:21:07:2e:55:39:47:6d:3e:
db:80:7d:80:f7:50:9e:20:a3:30:70:1e:81:43:16:
4d:90:65:04:17:a3:4e:72:ab:10:27:c3:60:a9:08:
86:a0:5f:5a:fc:41:cc:56:d6:42:0f:9e:31:09:0f:
e9:14:02:aa:65:ef:2e:6e:63:d7:da:d5:93:52:11:
d3:7e:8f:11:95:4d:dc:2b:58:ef:85:fa:41:3c:ff:
9b:cc:d5:e6:29:42:f2:03:c4:2b:89:cc:63:a3:25:
41:92:25:ef:90:7e:7e:be:e6:38:e9:c2:70:75:9e:
a1:27:31:19:c6:c0:df:75:86:31:94:de:5b:46:14:
a8:f6:86:0e:54:72:53:62:76:87:f0:02:c9:53:2e:
c5:61:7c:b7:06:a0:df:9f:7e:42:32:87:7b:02:52:
c7:86:3b:f4:76:32:0e:2f:28:38:83:57:18:91:ca:
1a:72:53:31:a2:c9:79:af:1b:02:28:5e:54:c5:38:
61:5b:9f:f8:1b:31:d0:be:b3:dd:7b:52:81:d1:0b:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:DD:1A:45:38:26:97:1D:25:E1:14:15:C9:5F:50:D8:AC:A6:C0
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/6ivdGkU4JpcdJeEUFclfUNispsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b9:d9:93:a3:f7:08:01:f2:9c:c5:8c:4c:52:0e:dc:71:79:
cf:85:6e:31:77:82:4c:3a:d3:12:e8:17:7a:dc:1a:41:76:ff:
97:2f:24:f4:f1:cb:89:ca:94:2c:8a:e2:e4:27:86:7e:4b:62:
a5:ab:94:cb:92:ef:0b:64:8e:45:3f:63:8e:65:25:2a:5a:da:
21:93:58:dd:c9:36:66:08:56:84:44:00:97:1e:d4:df:0a:2a:
00:00:3d:0b:14:7f:c0:a0:6a:cd:87:97:bf:25:29:87:10:4a:
e4:fe:07:6b:fc:68:10:af:57:73:51:0e:ea:43:55:b9:ff:8c:
b6:40:b1:1d:82:db:bc:e1:1d:31:59:fa:08:f7:d3:4c:4f:11:
3a:bd:e8:64:50:96:78:3b:6b:ce:67:13:37:b2:1b:b6:54:9d:
18:5e:8b:d4:53:2a:12:d4:35:6a:05:4e:1e:89:34:97:da:a4:
dd:05:17:c3:b8:c4:9c:dc:5b:a3:80:40:1e:1f:0d:82:20:0e:
67:2b:39:15:67:c1:d6:1a:21:c4:5b:20:07:7c:51:24:27:55:
1e:8a:dc:cf:91:25:aa:70:fd:81:77:39:f1:15:e3:a1:eb:db:
ab:b7:2f:b7:1b:09:c6:a8:75:6b:5c:57:1e:8c:56:24:21:92:
92:ea:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:23:02 2026 by rpki-client