This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k4rtz9r1fn3rS7hQhKvfz3hABhA.roa
File: k4rtz9r1fn3rS7hQhKvfz3hABhA.roa (raw, json)
Hash identifier: xLOq2Z43SPjfJAtix/vjLqwNei73e56kML/E4IC1lg0=
Subject key identifier: 93:8A:ED:CF:DA:F5:7E:7D:EB:4B:B8:50:84:AB:DF:CF:78:40:06:10
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C38D33B43140317FF769E12002B84D376
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k4rtz9r1fn3rS7hQhKvfz3hABhA.roa
Signing time: Sat 07 Feb 2026 15:58:13 +0000
ROA not before: Sat 07 Feb 2026 15:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 91.217.166.0/24 maxlen: 24
185.113.10.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 15:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:38:d3:3b:43:14:03:17:ff:76:9e:12:00:2b:84:d3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 7 15:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=938aedcfdaf57e7deb4bb85084abdfcf78400610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:07:f0:08:77:c9:f3:b7:d3:54:78:f0:53:
67:68:8d:8b:d6:b4:ad:21:2a:bd:9e:c4:9b:11:fa:
71:0e:c5:3d:b6:1a:10:1f:68:43:b9:c6:ae:25:e2:
cd:32:db:9a:25:ca:69:c5:ea:ea:e5:a8:b0:8b:a9:
22:ae:70:79:0c:17:71:a9:00:89:8a:9b:82:63:b5:
64:e8:9f:48:7a:6e:6f:0b:1e:63:e1:92:b4:6c:f8:
67:a9:9b:11:ed:7f:cf:31:73:ac:6b:0b:12:03:ce:
e7:45:e7:c2:df:53:95:72:ff:0d:89:53:f8:5e:4d:
ba:af:f7:64:e7:c8:6c:a1:e4:23:1f:bb:c5:71:78:
bb:ab:1a:76:f9:0b:02:3b:d4:6e:e7:be:cb:bf:6c:
e0:c7:c6:82:cc:e8:f3:d0:ab:ec:0a:6f:36:71:28:
93:84:bc:30:cd:22:0f:0e:e4:c1:4b:f0:25:80:02:
cf:0f:0d:9d:98:0b:fe:68:65:15:05:90:1f:79:62:
8d:f4:d8:ce:bf:ee:67:08:3e:81:7c:63:0a:63:e6:
8b:1d:ac:09:6c:d9:97:ef:77:39:d6:6d:9b:e2:2d:
01:79:c9:b8:8c:12:b3:8d:68:23:fe:3a:77:98:c9:
0e:6f:0e:aa:c1:78:15:6b:af:02:1b:a2:b4:0f:2f:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:ED:CF:DA:F5:7E:7D:EB:4B:B8:50:84:AB:DF:CF:78:40:06:10
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k4rtz9r1fn3rS7hQhKvfz3hABhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
185.113.10.0/24
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
89:a4:4b:9e:86:31:9e:f5:8b:44:2b:07:b6:6b:a8:3f:69:cd:
33:cb:30:3f:d6:c2:36:1e:d9:ce:5b:22:67:97:f3:68:0c:ba:
5a:d5:f2:72:12:29:77:19:03:e6:3c:aa:fc:02:b7:90:72:a9:
47:01:50:c4:57:e6:ad:6c:9c:da:07:43:40:a1:38:f1:44:e4:
9f:56:ae:82:3d:07:47:f9:7e:e2:f5:d9:94:92:a1:07:79:7b:
eb:bd:d8:fd:d1:3e:91:c7:b2:30:3f:11:8a:2e:ba:a0:53:5f:
d5:ef:cf:b0:be:f9:f8:16:9e:73:17:19:3c:53:fc:48:63:43:
a6:d4:f6:d7:e7:16:27:5a:ce:0d:0f:af:29:fb:5c:5d:88:cc:
ef:62:be:c8:ca:26:86:97:94:db:cb:ea:70:3f:28:d5:a4:cd:
96:a5:dc:aa:45:a5:b5:fc:8d:70:aa:76:82:d8:a6:d5:ba:0c:
00:5e:9c:57:cb:78:0f:71:27:34:58:aa:ce:e5:98:c5:ea:95:
d8:3b:c8:0b:c2:19:e9:71:07:ae:e3:4d:92:8b:fd:fb:9e:c6:
f8:d9:15:6c:13:ba:4b:79:34:80:d2:2e:bb:19:04:9f:33:58:
9b:58:8d:6b:45:90:a1:d0:f2:91:61:74:ba:8b:5c:86:5f:5a:
02:92:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 00:19:59 2026 by rpki-client