This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/_V7Cb-NwO8anySMSbrwiBhmYglM.roa
File: _V7Cb-NwO8anySMSbrwiBhmYglM.roa (raw, json)
Hash identifier: Ahe9bG/97BT0KbQWugP0o5eBZCTOE3ZbuxcW7SXy2go=
Subject key identifier: FD:5E:C2:6F:E3:70:3B:C6:A7:C9:23:12:6E:BC:22:06:19:98:82:53
Certificate issuer: /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial: 019B7D5C81F5BACA3FB15F54FB44E185A279
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/_V7Cb-NwO8anySMSbrwiBhmYglM.roa
Signing time: Fri 02 Jan 2026 06:19:33 +0000
ROA not before: Fri 02 Jan 2026 06:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49636
IP address blocks: 91.213.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:81:f5:ba:ca:3f:b1:5f:54:fb:44:e1:85:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Validity
Not Before: Jan 2 06:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd5ec26fe3703bc6a7c923126ebc220619988253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:bd:4a:4d:cc:80:d7:8e:de:0a:73:36:91:
96:8b:01:65:dc:9f:b3:60:e1:11:05:1f:7c:0e:52:
5a:e7:0c:bc:87:5f:65:60:5b:15:71:3a:ff:4e:9e:
19:51:ff:b8:51:60:f5:4e:aa:9c:29:c1:a5:68:35:
75:ca:c6:bb:26:5d:fc:bb:bc:e4:00:9a:0c:2f:c7:
98:f4:9a:f8:e3:7c:ed:b6:94:d7:75:b6:82:88:23:
82:da:56:d3:67:18:79:ea:98:77:c9:25:4d:71:35:
63:96:74:71:81:24:1a:b6:37:0d:34:8c:a4:77:43:
8b:59:c6:29:f4:c9:43:c8:3d:d8:58:42:64:14:ae:
c1:7c:36:f3:f8:34:5b:4b:6a:21:7a:88:b7:73:dd:
f0:4c:0d:7d:0e:52:c5:0e:a4:4e:9e:f3:dc:02:d9:
45:af:4b:85:f2:d2:0b:99:31:87:5c:47:46:fe:c5:
4f:8d:df:b3:b1:45:20:44:a1:31:0d:63:60:96:a3:
57:b6:36:05:16:08:95:77:b2:66:1a:65:5e:0f:67:
fd:db:51:7d:cf:7a:e4:45:7d:44:1f:f9:d2:3f:bd:
3e:36:48:d2:4b:14:b5:9e:ae:a0:c6:7e:b4:a0:2c:
22:4b:ee:5e:b4:4b:a7:bf:f4:7f:44:67:df:a1:fe:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:C2:6F:E3:70:3B:C6:A7:C9:23:12:6E:BC:22:06:19:98:82:53
X509v3 Authority Key Identifier:
keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/_V7Cb-NwO8anySMSbrwiBhmYglM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.80.0/24
Signature Algorithm: sha256WithRSAEncryption
07:10:a2:ea:7d:2d:0b:de:60:ef:65:ce:d6:c4:1d:b4:ec:8e:
08:f8:0a:91:49:0a:1e:e0:c8:2a:9d:31:4e:62:51:69:34:0f:
f8:f8:12:c5:0f:44:1a:83:c6:a7:e8:ab:a4:4b:9e:b3:fc:f1:
29:0c:bd:8d:0c:c6:09:ba:18:74:52:aa:cf:c0:eb:7a:9d:7b:
ad:83:49:a3:84:80:4e:7b:78:d5:c6:53:1e:55:c4:fc:62:53:
4b:c5:0d:2e:05:76:42:e0:cb:0a:bc:b4:e8:07:a9:02:fc:ab:
07:4a:86:e9:35:bb:d4:84:2e:a3:ee:d3:1b:11:53:9d:78:66:
af:12:36:24:0a:b5:4c:ce:ba:c5:b1:6e:62:6f:fd:b0:27:1f:
dc:67:92:0b:50:35:ea:46:50:a2:ab:e7:81:67:d5:47:20:13:
d7:8c:52:15:92:f9:ed:41:c1:88:de:10:90:b3:7d:63:ba:49:
62:69:15:76:83:e3:ee:21:f5:77:7f:7c:2d:e2:13:d9:51:39:
98:49:d0:98:9b:53:65:c8:2a:81:61:46:c1:b8:c1:a1:61:73:
8f:c0:de:af:c1:02:5d:98:a5:f8:d0:34:c4:a4:17:4f:95:11:
13:ac:9a:09:23:6e:fc:30:0e:f8:9e:06:ed:d2:5e:86:6c:04:
9e:4b:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 04:17:46 2026 by rpki-client