This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa
File: 1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa (raw, json)
Hash identifier: GLfzuz24dtgGsbzbzf51Mgi7uiLzVKCscSDvx4Q43oY=
Subject key identifier: FB:C8:80:AB:30:9B:F9:D9:EA:A4:2D:26:1B:D4:1C:1C:54:FE:06:25
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019B7AC9496D7083D59A8C81D7DE9D3C7E04
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa
Signing time: Thu 01 Jan 2026 18:19:30 +0000
ROA not before: Thu 01 Jan 2026 18:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6696
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:49:6d:70:83:d5:9a:8c:81:d7:de:9d:3c:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 1 18:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbc880ab309bf9d9eaa42d261bd41c1c54fe0625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:98:a3:0a:65:08:c4:24:d5:03:80:79:7e:
15:44:ad:d0:b4:63:ab:a1:2d:64:dc:8b:f5:c6:22:
2c:cc:af:a5:1c:7b:69:ba:cc:6e:71:34:b7:23:04:
29:d6:34:5a:9d:46:b6:49:88:8f:be:b6:ff:7b:ae:
19:48:dd:18:d2:e4:63:6a:fd:92:2b:77:a8:63:18:
15:f2:55:40:db:90:f3:92:6b:bc:7e:4e:59:7a:99:
34:e2:08:ce:3b:b9:a1:ae:cb:4b:5f:6b:88:a5:dc:
ca:54:c5:f9:88:1a:b4:53:78:b9:32:37:44:72:82:
69:68:e2:38:8f:44:71:01:b1:bc:9c:a4:b5:f0:72:
23:9c:27:41:50:0f:5c:79:a2:4a:ff:88:54:bc:b4:
24:13:aa:85:6b:86:0b:4e:78:fe:8b:b8:91:9f:f1:
99:18:29:ac:07:44:a0:27:a4:25:4e:6d:8f:46:f1:
e4:13:70:82:b2:01:b5:31:e3:49:1b:8c:cb:ae:80:
ad:0e:e3:10:b7:bf:d8:51:49:d2:9e:20:dc:e7:01:
a6:89:1c:74:f1:15:c1:84:b0:c7:ea:1c:fd:16:16:
13:aa:83:16:39:48:5e:ba:c5:da:8b:78:a1:2d:e7:
1e:b6:7f:f1:2d:9b:af:b3:d0:d0:43:4f:f8:e9:31:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C8:80:AB:30:9B:F9:D9:EA:A4:2D:26:1B:D4:1C:1C:54:FE:06:25
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/1-8iAqzCb-dnqpC0mG9QcHFT-BiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
55:70:6a:82:39:d3:71:39:0c:a5:02:0b:fb:85:ca:01:98:25:
cb:90:f9:49:a2:1c:54:08:87:0f:6f:47:1d:5f:c5:9d:2d:ca:
1e:36:e5:5c:27:56:5d:ad:ba:c7:3b:7f:2c:f7:99:a7:8b:86:
ed:25:de:00:23:b2:af:a0:d8:71:3a:0f:b3:4b:96:e8:76:46:
fa:7b:b0:4c:9d:2b:88:e7:4d:d8:2a:bf:78:b6:b8:8d:1b:5b:
da:81:0e:cd:28:76:d1:58:fb:d3:d7:8f:78:5a:6e:f8:32:28:
0b:6a:93:00:6c:58:a9:b4:fa:d3:1b:7f:32:90:fc:47:93:34:
ef:7e:a1:d0:a9:6f:bd:ae:8b:b2:7e:0a:99:d3:71:af:73:bb:
aa:36:ca:b1:ed:1b:9b:28:38:db:63:0d:64:86:1a:f0:9a:b0:
4b:57:41:74:e1:2f:b8:69:2c:c5:fa:89:f6:06:62:f3:02:85:
99:79:51:c3:bb:b2:20:0f:d0:ed:74:6c:4c:df:33:86:89:15:
82:95:f9:5d:0f:31:6a:8f:2d:38:20:73:7a:47:97:6b:27:3a:
14:04:17:1f:de:34:84:9e:ef:51:d5:d6:74:77:79:c4:a2:63:
25:e8:87:0f:fd:61:b9:82:41:55:c5:f7:f8:58:3c:50:da:81:
a1:15:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:22:43 2026 by rpki-client