This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa
File: K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa (raw, json)
Hash identifier: v1gwKHJC5TEruomxCVoo3M10PFXjPvm/5QWXyyAdr3M=
Subject key identifier: 2B:A5:F1:9C:73:94:DD:2A:16:F2:35:D7:71:37:BE:5A:E4:07:BE:99
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019B77593CFB82026FA6F0910F4B6C63AFE4
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa
Signing time: Thu 01 Jan 2026 02:18:15 +0000
ROA not before: Thu 01 Jan 2026 02:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 91.198.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:3c:fb:82:02:6f:a6:f0:91:0f:4b:6c:63:af:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jan 1 02:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba5f19c7394dd2a16f235d77137be5ae407be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:86:04:66:8c:f3:31:70:dc:a3:95:6f:9b:
eb:ba:3e:9d:e3:5e:d5:1a:33:36:4a:9f:2a:1a:fe:
bd:13:a5:b8:24:d3:26:e4:3c:c5:aa:ab:2a:0b:51:
b6:fc:d7:a6:26:c0:7f:ec:26:ae:82:1b:bb:ba:64:
72:f5:35:ab:6f:64:58:10:90:35:aa:10:a7:2b:58:
4a:e2:a7:34:40:d9:fa:d7:71:a8:b9:5f:da:51:32:
26:81:f2:a9:26:21:b9:2a:6b:3b:f6:05:10:46:f6:
04:8b:3f:a2:70:51:52:6e:45:ed:cd:ac:37:2f:f0:
08:cd:ec:bd:44:1f:7b:9e:08:e8:00:e8:23:35:dc:
9e:70:08:ad:35:42:1e:9c:d7:f8:ce:9b:c9:52:b5:
43:8c:b4:b1:aa:cb:05:dd:49:b3:04:75:86:07:bd:
64:17:aa:92:a1:83:f0:bd:4b:06:8a:5d:1d:bf:8c:
73:47:b3:26:0c:8d:ef:08:0e:f3:ed:45:d1:38:9e:
8c:8d:69:2e:a9:a4:df:a7:36:89:83:c9:1a:c3:b4:
6d:9c:ff:ea:d1:61:b2:1e:9f:1f:12:3d:87:7b:f1:
be:eb:78:00:a4:be:28:60:82:f4:17:25:23:a5:3b:
d8:df:93:1f:ea:c9:76:3f:25:b7:29:9f:6a:20:cf:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:F1:9C:73:94:DD:2A:16:F2:35:D7:71:37:BE:5A:E4:07:BE:99
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/K6XxnHOU3SoW8jXXcTe-WuQHvpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:80:5b:10:8b:ff:b9:f1:e0:b2:97:59:be:05:6c:d8:8b:91:
af:30:1c:d7:37:7e:84:03:1e:9d:47:17:6a:cf:c5:55:0f:a0:
b4:a9:03:78:00:53:34:72:65:12:93:7f:e6:e7:d3:cf:d3:29:
1c:e0:8b:6b:2b:50:65:31:1a:43:34:c6:c0:c6:0d:f8:78:46:
7f:49:76:21:c1:73:98:c6:35:21:3a:26:bf:38:00:5e:85:b4:
48:22:e5:ee:36:f2:c8:e0:cb:6a:f1:c6:92:c8:ce:a5:7f:06:
04:88:99:1a:40:7f:0b:b4:f1:9a:93:38:40:f7:02:b7:f5:9b:
de:98:4c:2b:fa:78:2c:f8:e5:c9:5b:64:0c:63:12:36:99:8a:
3d:30:07:7c:18:3a:5b:d0:b6:d6:c5:28:68:e2:f6:24:c3:b6:
0b:c6:e7:ce:ab:ee:0d:7b:49:e2:0f:b0:78:c2:4e:f5:0f:90:
ae:dd:72:4a:db:32:cf:63:71:af:9c:07:9e:82:75:3b:c5:e2:
55:0e:59:41:ae:ce:8c:ec:0c:55:48:93:24:4f:1b:dd:d7:94:
fd:bb:8a:ba:1a:bf:8e:ff:93:fd:30:c7:8c:e0:ff:1f:f8:1c:
df:8a:cb:0b:36:80:6a:de:e1:24:7e:3f:75:0b:9b:01:35:d9:
83:4d:bf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:19:22 2026 by rpki-client