This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa
File: g4RYmNig4J0sVJiMkj_qIgt2ecc.roa (raw, json)
Hash identifier: AMXXhy9XoCJvEM2f7TVsKWyuskZydY3c3G++2kcR1RM=
Subject key identifier: 83:84:58:98:D8:A0:E0:9D:2C:54:98:8C:92:3F:EA:22:0B:76:79:C7
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019B79EBB654196AFAAE6FD3A24152789597
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa
Signing time: Thu 01 Jan 2026 14:17:29 +0000
ROA not before: Thu 01 Jan 2026 14:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42981
IP address blocks: 91.196.8.0/22 maxlen: 24
185.153.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:b6:54:19:6a:fa:ae:6f:d3:a2:41:52:78:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Jan 1 14:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83845898d8a0e09d2c54988c923fea220b7679c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:16:c3:6e:0d:8d:1a:7c:a4:f7:49:e6:70:
7b:6f:e3:41:d0:76:94:83:49:07:2e:ea:34:1e:ca:
b4:0b:c1:27:db:3c:16:8d:11:e4:5e:31:9a:24:12:
b8:0b:82:89:54:32:ab:84:84:ff:56:43:c5:75:81:
c8:9e:7c:95:3f:82:71:d0:20:35:f1:d7:12:5f:2a:
17:59:74:95:52:60:76:d9:68:ac:99:cd:bf:87:3d:
54:e2:aa:cb:9c:da:de:81:db:54:b3:f6:f1:11:3c:
16:46:c6:0b:e2:c0:07:ce:1e:d5:f6:a0:68:af:b8:
b2:30:6c:ec:cf:c2:8f:83:45:5e:85:94:45:c1:be:
92:67:2b:a6:5f:d4:4a:72:65:28:74:ea:41:91:c6:
0a:26:53:6b:08:79:01:2e:61:00:36:a1:d7:ba:de:
03:b4:fb:32:7f:20:b9:b1:63:60:3c:a7:58:8f:2f:
4f:1a:b3:ad:4e:27:10:3f:f1:c5:8c:d5:99:60:1a:
7b:b4:37:61:c6:f6:a4:47:60:27:b6:fe:a7:ad:ab:
27:5d:9d:ce:e2:6f:04:54:1e:f0:b6:7f:bd:97:51:
ca:34:5b:80:ca:a0:a4:d5:92:9f:d3:7c:96:35:68:
26:f8:d8:e2:1d:73:41:4f:11:cb:52:6b:51:7c:04:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:58:98:D8:A0:E0:9D:2C:54:98:8C:92:3F:EA:22:0B:76:79:C7
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.8.0/22
185.153.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:b3:8b:75:bf:b5:fb:62:e7:b1:ec:01:2b:41:c6:aa:ef:ba:
db:81:6e:f1:8a:46:61:f1:ca:b7:7e:ec:9e:6a:6c:e7:1b:00:
81:a3:62:a4:fc:71:89:be:0e:55:a7:82:91:8e:cb:e9:de:4b:
31:94:3a:a8:45:ba:94:f0:29:25:9b:d0:ab:62:b8:1c:e7:bd:
09:63:26:cf:0f:97:10:3c:ec:d4:bc:de:98:bd:c2:14:d5:c6:
6b:12:89:36:d5:31:99:75:34:de:22:bc:67:38:62:a8:45:7e:
b2:0a:72:53:b8:10:08:f1:e1:35:72:58:fa:57:8a:00:9f:2d:
54:fb:f8:bc:ec:a0:b5:e7:8f:8f:cd:9a:2c:2c:57:8b:be:0c:
7f:a5:86:a9:c8:85:18:2b:8b:ba:1c:22:a0:7c:88:74:cf:a7:
26:51:43:ec:69:c8:a0:d7:97:fb:5b:8c:cd:bc:66:cc:80:89:
ae:df:ca:95:15:a5:92:b2:c5:26:00:e4:20:ed:26:59:a1:d5:
42:fb:eb:89:4c:2f:5f:e8:eb:88:ed:6c:a6:5e:09:98:cc:64:
e9:f6:c6:45:28:a2:72:70:2e:1b:e8:78:9f:f3:5e:b9:66:e0:
7f:e4:77:32:c6:88:60:fa:1d:96:6d:70:8e:f8:05:ec:68:c0:
45:93:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:29:16 2026 by rpki-client