This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa
File: pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa (raw, json)
Hash identifier: 4nqaIka8KRsnuFWOYZD3ShbhJq0aiv3A2wx6tpUOgnk=
Subject key identifier: A6:42:A0:69:76:6C:EF:E6:9E:2C:5E:D2:33:C2:50:65:3D:1E:2A:0E
Certificate issuer: /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial: 019BFE4B0E1252623E49CF16616ADCFCF795
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa
Signing time: Tue 27 Jan 2026 07:11:30 +0000
ROA not before: Tue 27 Jan 2026 07:11:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197275
IP address blocks: 91.219.56.0/22 maxlen: 24
91.219.56.0/23 maxlen: 24
91.219.58.0/23 maxlen: 24
176.115.144.0/21 maxlen: 24
176.115.144.0/22 maxlen: 24
176.115.144.0/23 maxlen: 24
176.115.146.0/23 maxlen: 24
176.115.148.0/22 maxlen: 24
176.115.148.0/23 maxlen: 24
176.115.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:4b:0e:12:52:62:3e:49:cf:16:61:6a:dc:fc:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
Validity
Not Before: Jan 27 07:11:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a642a069766cefe69e2c5ed233c250653d1e2a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:47:de:ce:29:26:6b:fa:c4:84:1b:8f:9a:
5d:8b:31:e3:7f:5d:e3:85:75:68:84:0e:c2:60:0c:
03:27:2f:8b:ba:9e:d7:2e:15:1c:a1:35:45:0f:fa:
1c:3c:46:60:c7:0d:6f:9f:45:b8:3d:68:8b:08:be:
c7:02:93:92:db:a0:2c:19:69:ed:30:26:b5:b8:84:
9f:2f:43:d4:f5:cf:81:fa:4f:48:d0:c9:d1:e4:39:
dc:79:d3:90:0a:2d:b5:cc:6d:36:c8:dd:56:78:71:
83:d2:47:68:d8:f2:3a:6d:12:0b:d0:a0:43:56:39:
8c:03:bb:6e:cc:75:13:8e:a0:53:30:66:92:93:14:
60:02:57:c7:be:31:11:1c:04:f1:00:ef:be:e9:87:
a1:6d:9d:43:d6:6d:5c:78:be:ed:01:ff:84:94:19:
65:25:e6:4a:0e:27:35:57:b8:6c:63:9f:6d:c3:b8:
01:57:15:c8:ec:16:fd:28:8f:da:32:42:14:31:df:
c8:85:e1:68:bf:58:35:bf:d4:2e:33:62:4f:45:74:
24:5d:85:3c:f1:10:a8:3c:b3:42:be:1a:f6:49:00:
a5:c0:5f:7b:a8:8f:09:36:14:d5:dc:d5:2e:b6:2e:
69:f6:71:0f:7d:ef:c4:19:0b:69:36:7f:b6:a8:48:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:A0:69:76:6C:EF:E6:9E:2C:5E:D2:33:C2:50:65:3D:1E:2A:0E
X509v3 Authority Key Identifier:
keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.56.0/22
176.115.144.0/21
Signature Algorithm: sha256WithRSAEncryption
92:a5:c8:17:99:30:64:b9:a9:b8:03:66:2d:03:0c:a3:c5:b0:
85:1e:d5:04:0a:ca:de:3e:87:06:3f:a1:93:28:63:b5:48:52:
cc:ae:14:f1:60:58:42:68:62:a2:58:34:f1:14:1b:07:2a:dd:
1f:44:cd:dd:6f:61:2b:d3:64:b0:5a:cf:a9:0f:3a:d4:bd:a4:
10:74:e3:9c:5a:82:23:6e:da:8b:29:e7:94:5d:a8:23:97:79:
6d:ee:8c:57:61:47:54:01:e4:17:59:ea:a5:ff:0f:a0:8a:06:
7d:fd:f1:dd:ad:e8:50:bd:0b:80:24:6a:6e:11:11:30:7a:04:
86:69:37:2f:ad:7b:0a:a4:7c:7a:c8:76:17:de:a4:98:00:c1:
d0:87:42:cf:2f:41:ce:b8:74:63:e2:71:5a:0e:a4:d7:86:2d:
59:1a:33:46:fd:ab:66:40:68:88:d5:0c:ac:6a:f6:af:ce:59:
76:e8:f5:18:fe:13:37:3b:16:ab:c0:5c:e1:4b:25:9e:09:e7:
99:d2:9c:c8:27:38:88:e3:62:16:a9:c4:ae:bd:9e:c7:13:bc:
72:0f:99:da:ac:3b:c5:c6:29:67:a7:38:8e:0d:92:0a:65:d0:
1a:b2:f4:8e:b5:1a:c3:0e:1c:64:e4:32:9a:60:81:2b:93:f3:
a7:20:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:14:57 2026 by rpki-client