This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ppk17F6OyNc0EwSbu1kw3GGU0jI.roa
File: ppk17F6OyNc0EwSbu1kw3GGU0jI.roa (raw, json)
Hash identifier: XKo5gTm78DhZYG3mOTajWDGyeUuNj7w2rAJKRuCr/xk=
Subject key identifier: A6:99:35:EC:5E:8E:C8:D7:34:13:04:9B:BB:59:30:DC:61:94:D2:32
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019B775894289AE69FBA87E2D44D2516B2B7
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ppk17F6OyNc0EwSbu1kw3GGU0jI.roa
Signing time: Thu 01 Jan 2026 02:17:32 +0000
ROA not before: Thu 01 Jan 2026 02:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198716
IP address blocks: 91.236.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:94:28:9a:e6:9f:ba:87:e2:d4:4d:25:16:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Jan 1 02:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a69935ec5e8ec8d73413049bbb5930dc6194d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:f1:cb:47:11:45:73:ef:ef:19:96:db:42:
31:93:df:1b:20:39:29:51:15:fd:b2:47:59:73:27:
91:cf:b0:c8:64:ec:a8:3b:b7:ab:f0:51:ef:19:09:
2e:82:54:9e:1f:99:41:d7:c2:4a:3a:82:34:90:9c:
1e:71:0b:a8:29:83:ac:91:ac:46:a8:cc:55:9b:ff:
3c:1b:84:7e:b7:43:7d:a5:bd:1c:c9:ce:67:ec:20:
9d:3e:b3:9d:5f:9f:e5:49:c2:17:d3:ce:b8:26:43:
3a:15:48:40:c5:8f:0b:be:a0:40:05:21:16:81:21:
fa:60:f0:f2:24:83:e9:d7:3e:3f:80:d7:7e:da:f0:
62:58:d1:b5:17:56:46:53:ef:95:17:0a:40:89:da:
af:8f:b0:bc:5b:53:ba:84:15:73:0f:31:58:30:a8:
47:4d:79:d2:8c:5e:c2:99:e1:13:70:07:20:a5:52:
f7:5c:f1:44:e2:d0:d9:73:b2:6b:bb:15:1a:2c:ec:
a7:b0:d8:97:81:17:2c:62:94:5a:b1:ca:1d:87:e8:
07:dc:19:d5:f4:10:7a:fd:d4:8f:e8:a5:db:b1:6b:
47:41:8c:2f:0e:a8:b4:a3:49:03:f2:8e:b6:4e:72:
ae:8b:c1:54:ed:97:de:3d:24:f2:53:ea:70:06:47:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:99:35:EC:5E:8E:C8:D7:34:13:04:9B:BB:59:30:DC:61:94:D2:32
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ppk17F6OyNc0EwSbu1kw3GGU0jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8d:c0:4f:8e:b9:06:ec:03:5d:d5:ce:d0:7e:d6:cd:3f:95:
21:16:8e:63:1d:73:17:88:a2:99:de:4f:cb:8b:8e:21:f8:cf:
fc:c2:68:9e:2b:f3:af:6e:a7:29:44:08:ce:9e:bd:9c:11:5f:
10:fe:57:4f:d5:a3:80:be:dd:b5:ed:35:7f:c0:2c:a5:bd:78:
7a:52:52:e6:3f:29:f4:34:8d:c2:6f:c3:1c:10:ee:f2:1f:b4:
cb:51:8f:c0:5e:a1:56:62:15:39:ff:20:40:73:4a:31:6c:b6:
e9:d8:42:b2:bb:29:0c:90:5e:15:63:27:2e:b6:e8:45:c3:c8:
e7:51:36:43:06:1c:7b:1e:4c:f9:1a:65:c9:3c:7e:1f:a4:55:
3d:17:e9:ab:c0:be:23:0d:96:83:f8:64:28:ef:a1:01:f0:09:
48:fa:69:49:36:97:d1:e0:3f:04:bd:0f:cf:de:58:1b:a8:c8:
1e:0e:51:4b:4e:9b:5c:e6:04:c9:49:21:f2:2e:e4:21:7d:fe:
17:13:27:ed:55:43:1b:74:d6:0e:17:a1:a3:02:de:db:9f:56:
31:bc:bd:d1:08:01:8b:86:32:a2:4e:b5:45:81:e1:c5:f9:54:
8f:e8:be:5e:77:9b:16:ed:d1:a3:62:8f:3a:ad:e6:cb:d7:b0:
a1:4b:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:25:16 2026 by rpki-client