This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/vIN44HyEP5wnRYxa1TMQU9fUKVk.roa
File: vIN44HyEP5wnRYxa1TMQU9fUKVk.roa (raw, json)
Hash identifier: UPxjEVREQVIYJdYxcduu/9fmVIgZHpDXz79ozRrZ6Fs=
Subject key identifier: BC:83:78:E0:7C:84:3F:9C:27:45:8C:5A:D5:33:10:53:D7:D4:29:59
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 019B7D5CBCE6A19AE45A5C3638AB50AA8F11
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/vIN44HyEP5wnRYxa1TMQU9fUKVk.roa
Signing time: Fri 02 Jan 2026 06:19:48 +0000
ROA not before: Fri 02 Jan 2026 06:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58307
IP address blocks: 91.227.61.0/24 maxlen: 32
91.229.210.0/24 maxlen: 32
2001:7f8:6b::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:bc:e6:a1:9a:e4:5a:5c:36:38:ab:50:aa:8f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 2 06:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8378e07c843f9c27458c5ad5331053d7d42959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:c6:1b:52:df:09:39:d3:52:c8:95:e3:65:
77:e6:9e:15:c4:9c:9e:26:d7:09:6c:ef:22:ca:e8:
4d:ca:15:f6:4b:af:de:6f:88:4f:48:8d:ba:dd:1c:
01:6a:0a:03:8d:62:b3:31:39:64:86:4c:30:8f:76:
0b:d2:71:93:37:dc:3f:b4:af:f7:92:fa:20:61:48:
1e:28:7a:0a:a9:23:53:bb:8f:50:a5:e7:4b:4c:5c:
5b:3d:d7:18:f9:40:a0:68:1c:b8:70:e9:c3:9a:77:
12:7b:43:ce:93:a8:d8:2a:14:b1:5a:a8:b0:90:13:
6f:32:17:01:97:fb:33:4d:1a:71:c5:09:4f:aa:e2:
52:3c:99:ff:db:da:9f:d0:3f:2f:88:83:77:a7:82:
42:77:f5:97:ef:69:df:a0:fe:6a:71:e4:cb:37:57:
88:4b:02:07:94:37:11:9b:35:21:f1:f0:54:fc:f0:
ba:47:5b:ed:a3:18:f5:f3:78:78:c7:6a:68:89:4c:
d5:2e:85:72:f2:bc:24:81:4a:4e:43:f0:b7:f2:01:
6a:d4:b3:d8:2d:74:85:01:c1:33:d9:c5:22:5a:97:
90:fa:27:ac:1b:0c:a1:aa:71:d3:64:48:74:6a:42:
c2:aa:83:72:a6:08:47:27:ba:e5:41:fe:98:4a:48:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:78:E0:7C:84:3F:9C:27:45:8C:5A:D5:33:10:53:D7:D4:29:59
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/vIN44HyEP5wnRYxa1TMQU9fUKVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.61.0/24
91.229.210.0/24
IPv6:
2001:7f8:6b::/48
Signature Algorithm: sha256WithRSAEncryption
27:a6:c8:ee:af:6b:ba:f8:e4:73:6b:32:c7:ee:6a:e9:82:ef:
f7:de:cb:40:1b:b6:da:ac:b4:0f:84:c2:91:10:81:5a:dd:bb:
f7:ca:40:a8:3b:14:68:3d:fa:23:42:38:6d:ec:95:ea:32:3d:
7f:d3:74:49:cf:ab:4c:44:e4:d1:8a:91:64:be:66:26:ce:8b:
28:86:03:f6:ed:cb:2a:50:b9:41:8d:f7:32:7a:4d:da:9d:f9:
f3:44:98:60:48:0c:4c:ba:b0:78:00:45:b4:14:cc:45:2c:51:
37:46:fb:3e:7c:76:8b:94:19:91:18:db:22:5f:f6:fa:fc:36:
f3:b1:2b:9e:17:84:2e:b5:3c:33:4a:20:12:37:bd:09:03:2d:
3a:71:7e:8d:e9:dd:45:12:75:75:19:6b:b9:67:51:ba:f4:1d:
ec:48:6d:87:31:82:80:5b:c4:fe:b3:3f:d3:41:1b:66:d4:94:
65:2b:1b:39:8e:b6:e9:b2:45:45:01:39:f3:4e:c5:d3:3e:ac:
26:0f:ec:3a:7c:1c:52:2c:75:6c:e9:15:91:b0:3d:16:09:62:
35:d6:f5:46:3a:ab:f1:1b:68:b5:a5:3a:d7:12:a8:90:93:4d:
f2:72:5b:d7:4d:f1:b0:30:87:64:d9:2c:25:9f:75:98:3f:e0:
a8:ae:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:22:53 2026 by rpki-client