This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/84-gr5Fvge6KrYBg8cW-K5m-lWY.roa
File: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (raw, json)
Hash identifier: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=
Subject key identifier: F3:8F:A0:AF:91:6F:81:EE:8A:AD:80:60:F1:C5:BE:2B:99:BE:95:66
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019B7C804F8819D14F4554DF73B21810A317
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/84-gr5Fvge6KrYBg8cW-K5m-lWY.roa
Signing time: Fri 02 Jan 2026 02:19:02 +0000
ROA not before: Fri 02 Jan 2026 02:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.190.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:4f:88:19:d1:4f:45:54:df:73:b2:18:10:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 02:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f38fa0af916f81ee8aad8060f1c5be2b99be9566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:81:f1:01:a7:b9:46:b1:bf:4c:b3:aa:14:
5e:33:eb:45:fd:e5:f6:6c:f6:c1:af:49:8a:97:4c:
08:a0:68:d7:86:7a:06:14:ba:40:13:04:53:d2:47:
3c:c7:56:48:ba:13:1a:b3:83:ca:31:64:08:1c:e3:
29:cf:11:05:57:f4:d3:bd:db:4a:8a:ae:ed:2d:19:
6d:58:58:50:65:c6:94:68:45:1a:60:48:c8:eb:67:
27:64:8c:aa:ab:35:4c:28:21:2a:15:be:41:89:f8:
77:47:e8:2c:c1:b1:7d:a8:7f:9e:b7:e5:59:d8:90:
71:91:df:93:ed:bb:a2:dd:c5:82:1b:60:9a:59:67:
07:25:4b:7c:6a:0a:46:33:1d:bc:91:d9:73:b9:36:
ea:11:57:30:e1:8f:5c:d3:92:44:27:59:c0:25:12:
00:e1:be:77:8a:06:f9:22:d1:ed:82:f7:7e:c7:f3:
c0:50:ea:2a:9b:be:34:b6:c1:21:83:5f:c7:b8:1e:
75:fb:3a:ec:30:3c:e4:7e:18:55:b1:a7:59:0c:90:
af:f7:c2:bc:a0:f9:7e:3c:79:63:00:70:c8:b3:b9:
1a:14:54:0a:fb:31:2f:0e:92:87:ff:23:1f:24:8f:
85:f9:b3:59:54:ad:1d:d8:53:8a:2e:26:4e:57:af:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:A0:AF:91:6F:81:EE:8A:AD:80:60:F1:C5:BE:2B:99:BE:95:66
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/84-gr5Fvge6KrYBg8cW-K5m-lWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.190.0/24
Signature Algorithm: sha256WithRSAEncryption
16:82:55:99:cc:51:d7:26:43:d0:9b:98:3e:d5:86:90:f1:69:
4c:66:85:ca:7b:f5:e6:a7:a1:5e:c2:83:1a:f1:2c:14:25:f7:
4b:7d:be:e4:e0:17:a4:c2:98:c5:b5:2d:87:d3:d6:a3:b9:f2:
88:c4:2d:47:c5:ad:2d:3d:ce:fe:7d:80:0a:42:fe:73:f5:32:
2e:21:e2:b3:1f:e1:0a:a0:f5:f1:ad:a1:cb:a5:43:b7:10:a5:
19:c9:c4:c7:d2:80:5c:b1:09:59:ce:0b:16:1f:92:6b:24:8c:
54:9b:d8:c2:d4:36:2c:0c:cc:bc:70:05:34:72:d1:01:48:40:
79:51:e7:7f:5c:0a:7d:8a:9f:a0:2a:c6:2f:13:20:92:34:7f:
58:eb:81:75:7b:8a:32:bb:7b:ed:6d:c1:14:04:fa:dc:a2:e4:
40:3c:ee:46:8c:9f:2f:f6:90:bb:25:9d:09:2c:a5:17:21:37:
07:28:10:72:78:84:50:25:99:9d:91:2b:02:26:55:8d:6d:4d:
02:47:83:95:ba:83:07:6c:f4:48:1d:9a:36:86:2c:f7:5d:9c:
ff:e8:7b:2b:a6:39:ce:65:d1:b0:e1:08:a2:42:ce:ac:b2:a5:
47:9e:f7:1a:d6:a4:1b:0a:cc:39:08:9b:d2:5c:c6:f2:fa:93:
5c:48:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:05 2026 by rpki-client