This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa
File: rbQLRQQ57T1QHNETgtQKDJDxvVs.roa (raw, json)
Hash identifier: LJ4g0UoBULTP2DaQsUUzIZ3AibWkiJwfnok2tkxhGgI=
Subject key identifier: AD:B4:0B:45:04:39:ED:3D:50:1C:D1:13:82:D4:0A:0C:90:F1:BD:5B
Certificate issuer: /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial: 019B7C12439A34352F216445C9FF1754DFEB
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa
Signing time: Fri 02 Jan 2026 00:18:50 +0000
ROA not before: Fri 02 Jan 2026 00:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30839
IP address blocks: 91.213.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:43:9a:34:35:2f:21:64:45:c9:ff:17:54:df:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
Validity
Not Before: Jan 2 00:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adb40b450439ed3d501cd11382d40a0c90f1bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:3e:0d:78:37:9a:a3:29:07:17:61:bb:35:
15:73:44:e1:22:6a:3d:68:d0:b5:d0:c4:69:03:33:
22:77:ac:2d:ad:51:71:5c:90:5f:df:f9:0f:a1:89:
98:dd:4e:15:4c:75:55:e8:2a:aa:a9:37:ea:1e:c7:
11:9a:20:8c:b1:2b:ae:2d:2c:f5:08:d9:30:1f:ff:
5a:f2:6f:7b:cd:5a:9f:28:90:ac:58:1e:3e:dc:52:
57:57:e7:b6:b2:bb:a7:14:12:4a:3f:64:44:4a:2f:
1d:9c:35:27:a9:4f:4c:3c:26:fc:a2:db:66:3d:db:
13:01:1e:ef:3b:34:2f:8b:91:7b:fd:58:31:a8:5b:
db:51:9f:66:ac:cb:5a:a2:54:15:80:7c:83:10:29:
16:eb:1e:cd:da:e7:be:5a:28:ad:ef:67:dd:ea:bd:
83:a4:2c:5e:17:ee:96:95:e3:6d:0c:d0:13:fe:f1:
83:5a:d8:33:9f:6a:47:00:96:71:8c:f9:da:fb:86:
6d:34:14:a3:98:51:63:a8:3d:13:a4:e1:4f:37:44:
d9:6c:e5:f0:13:34:b9:23:33:46:14:ed:e3:c0:c7:
b9:95:4c:67:06:8a:21:00:9d:e2:31:3a:26:4b:be:
48:1a:8a:a9:01:ca:d6:f2:42:04:19:08:bb:b9:89:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:0B:45:04:39:ED:3D:50:1C:D1:13:82:D4:0A:0C:90:F1:BD:5B
X509v3 Authority Key Identifier:
keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.90.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bc:0f:eb:21:3f:14:ac:c6:ef:9d:89:38:37:c4:a1:9d:35:
f0:10:96:8d:b7:24:4a:54:ab:69:d9:8f:f3:11:f0:7a:12:33:
93:27:a6:3a:09:0a:1e:df:50:d5:06:21:0d:ea:5f:94:3b:2f:
2b:62:16:c8:4f:18:cf:76:69:bc:0b:6c:c5:22:7e:24:1b:2a:
0f:19:06:43:74:a7:1f:5f:96:fa:f8:36:60:3c:e3:2b:19:1a:
bc:35:b6:1b:8e:2b:b9:fc:df:6f:b9:92:58:d7:ec:52:af:05:
c5:38:dc:b2:34:e5:51:10:fa:28:cd:86:9b:16:3e:f1:c5:e1:
c3:7a:cb:84:46:51:6f:fc:48:74:db:ff:75:1f:52:27:84:20:
ae:93:1e:3a:f8:08:57:d6:19:a9:47:ff:cb:b2:9d:f8:33:99:
fe:71:4c:90:19:87:c3:ab:c3:eb:d0:c7:4b:51:cf:4a:eb:f5:
ae:6a:9c:13:d6:4e:e7:b4:08:b1:1e:48:47:e0:fd:0c:32:f6:
b4:d1:86:ac:8c:60:68:d8:3f:3d:84:b9:ad:1a:28:a4:f5:18:
53:2a:eb:01:26:4a:9d:b5:df:e7:a5:44:05:ac:89:fb:c0:a6:
e8:16:17:0d:5c:d4:43:a3:b7:77:cd:0c:a8:bb:bd:10:6b:98:
a5:c7:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:00:28 2026 by rpki-client