This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa
File: YB2rJph3jtykrU245nJwP-cGOQE.roa (raw, json)
Hash identifier: aIiLHbCrLpw92COeGL73Eh5jy1guo4i8Y4Mb82Pormc=
Subject key identifier: 60:1D:AB:26:98:77:8E:DC:A4:AD:4D:B8:E6:72:70:3F:E7:06:39:01
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 019B7EA690FDA9D90DD3113ADF81BCAE227B
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa
Signing time: Fri 02 Jan 2026 12:20:03 +0000
ROA not before: Fri 02 Jan 2026 12:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28985
IP address blocks: 91.216.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:90:fd:a9:d9:0d:d3:11:3a:df:81:bc:ae:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Jan 2 12:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=601dab2698778edca4ad4db8e672703fe7063901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:af:d1:1d:da:b9:f7:38:ac:4e:89:a0:3d:
ab:45:da:2c:fb:39:b5:19:82:73:79:01:39:d2:0e:
b8:6d:ba:59:94:31:87:02:fb:5f:a9:44:52:00:62:
0d:ec:8d:aa:32:c4:43:fd:8d:e7:4b:ab:59:c9:d0:
e4:27:24:3c:ba:c0:69:97:b3:37:04:52:c5:75:53:
50:1b:98:06:19:b2:94:a2:72:65:c6:4c:ec:f1:4f:
df:9c:0f:62:e8:99:d5:01:86:7f:47:58:48:3a:1a:
34:60:f4:f0:8a:85:6d:7b:ce:bf:ca:15:34:5d:c6:
b7:54:c3:b4:25:f6:f6:bd:41:8d:94:66:1c:02:5b:
ff:0d:f5:fe:99:b9:80:71:75:a3:f4:ef:e6:18:c2:
a4:a0:2d:e7:9c:aa:76:73:cf:54:39:5a:f8:75:02:
83:51:0d:00:26:6a:9d:d7:ee:ee:59:7c:da:d1:cd:
15:81:a4:7f:dd:75:ab:d5:c4:e8:c0:6a:2b:16:be:
d2:ea:d4:a6:c5:09:17:f6:c4:47:3e:59:e1:2b:3d:
e1:b2:5a:27:b9:2e:3c:31:30:be:5b:0e:d4:dd:86:
e2:b2:ed:3c:3c:79:02:be:e4:71:97:d2:d9:50:89:
52:ea:9d:e4:c0:a8:d7:72:5a:10:6b:c7:69:df:d7:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:AB:26:98:77:8E:DC:A4:AD:4D:B8:E6:72:70:3F:E7:06:39:01
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/YB2rJph3jtykrU245nJwP-cGOQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2e:33:ba:39:9b:6f:f4:58:7c:a2:41:69:cd:af:95:95:a4:
8b:57:f5:27:b0:94:ec:cf:f8:b9:cb:13:bd:c4:7a:14:c6:e7:
f8:f3:d4:fd:58:20:35:1e:1a:89:5f:9e:9a:c7:0f:0d:17:91:
78:b6:f6:63:dc:70:78:56:db:22:3e:60:2c:01:f8:86:7c:bc:
ae:e7:4f:49:32:0b:f6:cb:ac:54:e9:d5:19:2a:04:1f:08:03:
f4:23:da:81:d8:21:14:90:3a:07:da:51:76:15:09:3f:1c:88:
9c:10:27:2f:15:b7:87:99:86:04:77:4f:4c:68:d6:be:90:58:
71:79:e1:9c:31:cf:6d:30:a9:a7:c2:ab:85:af:aa:fb:de:7a:
4f:b4:a1:e6:97:33:02:c8:eb:41:7f:b5:12:3f:f2:17:75:4d:
a6:5a:48:fd:be:71:37:35:ac:00:e0:82:e0:28:53:7c:3e:87:
9a:64:06:9e:c2:7a:52:3f:0a:f3:75:c7:2c:ea:f3:d8:b4:c8:
9e:30:97:a8:72:7b:5d:38:aa:f5:18:42:19:d5:88:8a:ff:97:
39:83:5c:c9:4b:21:0d:19:72:69:92:83:b5:81:01:20:e2:6a:
11:c7:5d:99:9a:97:38:af:91:50:97:6b:60:37:9a:ad:12:0e:
01:15:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:21 2026 by rpki-client