This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa
File: aWcPUj1DCDuQO6qmjauPK8xInfo.roa (raw, json)
Hash identifier: k8tfsJzdjTq2aomYV3WxH/lnSIh4yY+NAufWvoQ6Pds=
Subject key identifier: 69:67:0F:52:3D:43:08:3B:90:3B:AA:A6:8D:AB:8F:2B:CC:48:9D:FA
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019B78A21AFE52592E71C466FF2353724FE3
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa
Signing time: Thu 01 Jan 2026 08:17:28 +0000
ROA not before: Thu 01 Jan 2026 08:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211415
IP address blocks: 91.212.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:1a:fe:52:59:2e:71:c4:66:ff:23:53:72:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 08:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69670f523d43083b903baaa68dab8f2bcc489dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:28:6f:10:a3:27:42:b9:37:3c:51:42:8d:
2e:3c:0e:c9:e2:68:5d:f3:cf:74:dc:42:35:f2:4c:
c6:db:83:42:15:a8:16:0e:78:89:ec:b2:df:2d:39:
ee:b0:fb:6e:4a:91:47:38:62:7f:43:3c:4b:57:4f:
bc:ba:19:a7:06:cd:3a:48:39:41:ad:5d:c4:fb:ae:
d7:92:31:73:a5:e8:be:ce:74:3e:f1:c9:8c:32:86:
41:f0:83:dc:a7:84:ba:26:66:ec:8b:2d:1f:ed:de:
8e:ba:0e:03:8b:9c:ce:6b:9c:a5:98:8f:42:ed:05:
0d:fe:25:bc:7a:ee:f7:9a:3d:1c:70:87:62:84:5d:
ea:92:0c:1d:23:fc:b8:87:33:78:e6:c1:5c:36:bd:
08:21:d4:05:3f:fe:f7:24:1c:0d:2f:34:d8:c3:3f:
1b:a4:34:a5:14:7b:9c:d4:c9:e8:3c:3e:b8:e0:ca:
2c:5c:8a:d2:94:44:cb:42:f6:63:84:69:86:ae:6f:
3f:69:6f:88:6c:30:a0:1a:09:19:af:64:c0:98:64:
30:cd:e0:8c:47:89:9c:bf:27:ce:24:d6:dc:8b:8f:
5f:9b:58:15:86:25:ce:18:23:24:df:28:3e:c2:94:
02:2f:7c:c3:90:dd:85:2c:08:b2:bf:39:98:cf:fb:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:67:0F:52:3D:43:08:3B:90:3B:AA:A6:8D:AB:8F:2B:CC:48:9D:FA
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
Signature Algorithm: sha256WithRSAEncryption
26:59:08:21:58:db:95:35:18:a8:7f:c3:f0:3a:86:84:fe:4e:
a7:e8:77:6c:50:76:6f:0f:c0:eb:82:af:f2:a2:8a:7f:ac:d0:
e5:c4:05:fd:00:a4:cc:e2:b9:46:e0:f0:b4:1e:38:f5:18:b7:
f7:51:95:fd:69:5c:74:7e:90:cc:e0:7b:cb:50:c9:6e:1b:d9:
b7:49:72:2c:2a:d6:bb:fa:fa:e0:c0:4f:a1:a7:0d:ad:ab:c9:
4a:38:67:3b:98:6e:d0:45:e5:18:69:43:a5:ec:19:c8:36:1b:
69:13:1d:a3:9e:9e:84:ce:ca:3e:68:6b:58:d5:fc:2b:02:e0:
26:4d:14:2a:d8:7f:55:79:94:fb:bb:f5:d5:4e:ee:87:06:f7:
45:e9:e9:24:ee:fd:64:79:5f:af:b4:b0:22:ec:3c:14:87:6a:
a8:b3:cc:f5:bf:fd:71:33:9e:14:1f:80:69:46:b4:e1:7f:94:
99:7a:1e:40:fd:c8:28:8e:cc:47:b4:fc:1a:61:a0:74:38:52:
b9:e7:e5:61:7a:e2:ba:e8:21:52:87:49:7d:4d:e4:d4:40:eb:
7b:35:4f:64:f1:86:a9:03:45:84:27:67:32:12:0b:64:b8:b5:
a2:cc:8b:0b:3c:a9:26:ec:77:d4:06:a1:1f:85:57:3f:ca:83:
ba:59:ab:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ohr+UlkuccRm/yNTck/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTY3MGY1MjNkNDMwODNiOTAzYmFhYTY4ZGFiOGYyYmNjNDg5ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v4obxCjJ0K5NzxRQo0uPA7J4mhd
88903EI18kzG24NCFagWDniJ7LLfLTnusPtuSpFHOGJ/QzxLV0+8uhmnBs06SDlB
rV3E+67XkjFzpei+znQ+8cmMMoZB8IPcp4S6Jmbsiy0f7d6Oug4Di5zOa5ylmI9C
7QUN/iW8eu73mj0ccIdihF3qkgwdI/y4hzN45sFcNr0IIdQFP/73JBwNLzTYwz8b
pDSlFHuc1MnoPD644MosXIrSlETLQvZjhGmGrm8/aW+IbDCgGgkZr2TAmGQwzeCM
R4mcvyfOJNbci49fm1gVhiXOGCMk3yg+wpQCL3zDkN2FLAiyvzmYz/vF1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlnD1I9Qwg7kDuqpo2rjyvMSJ36MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvYVdjUFVqMURDRHVRTzZxbWphdVBLOHhJbmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TYMA0G
CSqGSIb3DQEBCwUAA4IBAQAmWQghWNuVNRiof8PwOoaE/k6n6HdsUHZvD8Drgq/y
oop/rNDlxAX9AKTM4rlG4PC0Hjj1GLf3UZX9aVx0fpDM4HvLUMluG9m3SXIsKta7
+vrgwE+hpw2tq8lKOGc7mG7QReUYaUOl7BnINhtpEx2jnp6Ezso+aGtY1fwrAuAm
TRQq2H9VeZT7u/XVTu6HBvdF6ekk7v1keV+vtLAi7DwUh2qos8z1v/1xM54UH4Bp
RrThf5SZeh5A/cgojsxHtPwaYaB0OFK55+VheuK66CFSh0l9TeTUQOt7NU9k8Yap
A0WEJ2cyEgtkuLWizIsLPKkm7HfUBqEfhVc/yoO6WatP
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:01 2026 by rpki-client