This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/Yac91t2eogvz5cwAb2fKP1E4ctw.roa
File: Yac91t2eogvz5cwAb2fKP1E4ctw.roa (raw, json)
Hash identifier: GRCEipXvu/z6v8Q0987NE/jFkhe0wRikv0AvdJFVTDI=
Subject key identifier: 61:A7:3D:D6:DD:9E:A2:0B:F3:E5:CC:00:6F:67:CA:3F:51:38:72:DC
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019B77C735B4D77D3C9B685BEFEB9B77A84B
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/Yac91t2eogvz5cwAb2fKP1E4ctw.roa
Signing time: Thu 01 Jan 2026 04:18:22 +0000
ROA not before: Thu 01 Jan 2026 04:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58034
IP address blocks: 91.237.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:35:b4:d7:7d:3c:9b:68:5b:ef:eb:9b:77:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Jan 1 04:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61a73dd6dd9ea20bf3e5cc006f67ca3f513872dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:cb:99:3e:e3:19:a3:1e:e9:06:a0:45:e6:
0d:08:11:8a:09:35:6d:ab:d3:d8:4e:9b:a8:84:e8:
6f:d8:97:94:0f:bd:f5:d5:ac:35:a8:47:92:dd:b2:
49:da:3c:91:f1:4b:af:90:27:4c:0c:08:07:94:1c:
f5:11:e7:9a:ba:2e:53:62:74:c3:4a:59:9b:3e:19:
15:86:56:e1:dd:b7:3e:55:e0:72:2f:2a:1b:ad:2a:
23:3b:af:40:b3:ba:19:c8:bd:8e:e4:35:91:60:70:
49:86:40:8c:84:cf:64:dd:f5:2a:2f:b4:68:24:09:
51:90:7e:35:ca:6d:1f:96:cf:a6:fa:06:02:f6:df:
17:b3:44:21:34:9b:e4:d3:24:cb:c2:1f:13:06:21:
d0:85:09:59:01:2e:d0:90:39:67:90:cc:6f:7f:d1:
d1:3d:1f:8e:cf:be:35:aa:6d:21:e5:37:54:d5:f6:
3f:1d:f4:6a:42:aa:62:57:40:3b:ac:94:7b:4c:fc:
b7:74:d3:6a:a5:cd:b3:7c:6a:fb:4c:6e:8b:b9:4c:
69:c0:41:aa:9c:5e:81:a4:47:5c:49:bc:e9:46:79:
da:d6:0f:48:4a:cd:87:3a:0e:6e:73:17:cf:3c:aa:
66:87:cf:d0:01:e3:42:83:d8:da:91:94:ba:ab:ba:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:3D:D6:DD:9E:A2:0B:F3:E5:CC:00:6F:67:CA:3F:51:38:72:DC
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/Yac91t2eogvz5cwAb2fKP1E4ctw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:6a:1e:9c:5a:18:bc:02:b1:e4:c6:46:07:d0:d4:c0:4b:77:
5e:22:be:36:36:97:2e:4b:22:ce:4c:95:51:d6:ac:73:09:6e:
3b:e0:94:2e:6a:f7:69:bb:60:98:4f:e3:b7:97:79:f4:20:93:
97:6c:ae:c5:ab:f1:d2:26:98:4f:61:55:98:03:76:cc:14:eb:
9b:78:f3:72:73:f4:de:24:ca:59:49:37:98:9c:5a:84:c5:48:
e2:fb:c6:0f:91:1e:2d:10:68:f8:72:71:52:a6:2c:df:43:f3:
a1:cf:37:ae:d5:22:aa:d5:c8:58:ce:dc:e9:68:91:21:ea:f6:
9c:68:b9:39:d0:7d:97:55:f9:eb:0e:1b:d9:f5:92:e8:b6:7b:
34:87:3f:56:08:b7:22:9b:3a:34:66:ea:1b:34:34:97:7f:9e:
fc:ac:65:93:74:25:d9:df:71:2d:eb:b8:39:8d:c0:f4:a7:f4:
9d:cd:c0:0f:39:ab:0f:b3:f6:0d:d7:f5:98:99:82:3f:82:6d:
b9:22:b2:b1:ae:c1:72:de:6e:41:1a:a9:ae:0a:43:b7:ed:6d:
1d:29:a7:94:da:32:38:64:de:e3:b0:f9:bd:ba:3b:52:4a:27:
61:fd:de:21:1f:16:d3:bd:80:a4:c0:08:47:b8:ac:08:67:ee:
15:b4:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:50 2026 by rpki-client