This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa
File: gFCCxxR0ahmt0mXsK_NmxadCzY4.roa (raw, json)
Hash identifier: F6IH/d9c7KoM8MKvRJtR95Z2YE78byk45lVJ9DWIUOE=
Subject key identifier: 80:50:82:C7:14:74:6A:19:AD:D2:65:EC:2B:F3:66:C5:A7:42:CD:8E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 019B79ED34053B1746D7A82CBCA37F2F8C87
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa
Signing time: Thu 01 Jan 2026 14:19:06 +0000
ROA not before: Thu 01 Jan 2026 14:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211332
IP address blocks: 91.233.183.0/24 maxlen: 24
2a09:f140::/29 maxlen: 29
2a0d:c140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:34:05:3b:17:46:d7:a8:2c:bc:a3:7f:2f:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Jan 1 14:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=805082c714746a19add265ec2bf366c5a742cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:3f:9f:57:1a:33:15:a0:19:76:56:a0:8f:
84:37:db:14:c1:09:ad:d7:5c:5b:fc:84:42:f4:f5:
d5:c9:c6:69:40:a4:71:25:77:7c:71:cd:db:27:08:
ce:60:ce:09:67:15:2b:bc:f8:1f:bf:0d:41:b4:34:
a6:ef:5f:8d:a5:bd:7b:4c:d5:f3:38:bb:ea:ec:c4:
b4:30:16:1d:a7:16:08:ae:72:b4:14:2b:15:e8:2c:
59:b9:6d:c9:a5:d1:b8:f4:60:77:74:7a:dd:6d:71:
30:0e:3b:1a:76:c3:25:ac:91:67:b7:90:1e:f5:f3:
dd:ed:b7:eb:b1:a2:05:36:e1:d2:9f:be:0e:fc:14:
2c:61:b4:b2:25:37:3e:b9:8b:78:f1:1a:ed:40:ce:
9b:0f:f1:48:26:50:ad:90:17:b8:5a:39:10:4e:c6:
59:aa:ee:b3:f4:ca:ef:44:be:07:a9:18:c1:b0:75:
7a:9e:87:3f:93:d0:1f:f5:8f:ec:be:b5:2a:17:e3:
b0:60:7f:60:fe:dc:87:e8:04:b9:35:57:a0:1f:f9:
ae:40:66:26:24:33:e0:6d:e2:78:12:00:5a:a8:78:
6e:8f:b7:7c:f1:98:08:d9:e9:76:7b:1c:4b:6a:f3:
dd:e0:75:c8:d6:e1:40:60:d4:9b:5e:7e:17:5f:7a:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:82:C7:14:74:6A:19:AD:D2:65:EC:2B:F3:66:C5:A7:42:CD:8E
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/gFCCxxR0ahmt0mXsK_NmxadCzY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.183.0/24
IPv6:
2a09:f140::/29
2a0d:c140::/29
Signature Algorithm: sha256WithRSAEncryption
59:1a:d5:5a:d4:5d:14:7f:6a:83:39:60:97:89:4c:75:50:7e:
35:82:cb:fe:b8:b4:94:cd:1e:7a:35:6a:a1:0e:11:25:16:c1:
47:e2:b7:ee:31:bf:e8:85:a2:04:9f:c5:9d:65:a2:66:5e:16:
db:d1:a4:fa:a9:61:75:8c:20:3b:b5:8b:84:5e:c1:75:74:8c:
e0:47:f8:f3:b2:21:38:de:a3:e5:fa:ef:a4:99:1d:d5:01:d4:
32:7c:b4:a0:34:30:d4:ff:46:b8:9f:24:90:d2:eb:a9:d2:eb:
60:21:45:1e:2c:4e:37:02:a9:4f:c1:43:27:46:78:87:43:5e:
ac:9c:1f:50:de:47:85:3c:9d:83:c6:b2:a6:43:88:9d:42:aa:
b9:92:5f:80:4c:28:b2:af:0e:53:11:47:68:3c:05:69:8c:5c:
ff:26:74:7a:7a:ec:3f:39:ef:c9:26:1f:2a:25:cb:c8:f8:d8:
35:51:ea:cd:db:10:11:e4:b6:10:63:1a:0a:1e:5c:7e:af:06:
b0:fc:b5:d6:85:f7:dc:bf:8d:a4:39:4e:43:84:72:05:c5:79:
cf:5c:9b:8e:5a:36:8f:3a:75:70:40:15:7d:c2:88:2f:8a:35:
34:33:41:4a:c3:ab:37:e2:56:80:b3:8c:c7:3a:7d:f7:a1:d0:
55:3d:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:31 2026 by rpki-client