This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ayldUpWSLCKTT5NBURdadAC7vG4.roa
File: ayldUpWSLCKTT5NBURdadAC7vG4.roa (raw, json)
Hash identifier: kmJtdzYnPp/0wkbVrxyfkJU2U6fhnQwdHAFof4M2AdY=
Subject key identifier: 6B:29:5D:52:95:92:2C:22:93:4F:93:41:51:17:5A:74:00:BB:BC:6E
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019B7C12D1CDDEB72F785293DAEB95EB9CCE
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ayldUpWSLCKTT5NBURdadAC7vG4.roa
Signing time: Fri 02 Jan 2026 00:19:26 +0000
ROA not before: Fri 02 Jan 2026 00:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 91.108.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:d1:cd:de:b7:2f:78:52:93:da:eb:95:eb:9c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Jan 2 00:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b295d5295922c22934f934151175a7400bbbc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:69:32:30:75:6f:67:ed:5a:e5:bd:14:18:
2b:8d:db:a1:e8:54:5f:d8:44:ae:7b:4a:c3:e0:d2:
94:8c:fb:c9:86:8a:f6:ee:7d:2e:cd:2c:d3:0e:6c:
a4:cd:22:89:0d:34:b1:c1:63:f6:17:72:7a:29:c2:
22:f6:dd:51:24:af:0a:90:6e:3d:be:19:40:68:83:
ee:47:87:e1:da:d0:64:f0:a9:f5:12:4f:c3:6d:86:
32:e1:a3:52:74:5c:ff:90:c7:14:2b:2b:1d:28:c0:
3b:46:ae:ef:cc:94:6d:8b:c6:a8:7b:5a:4b:c9:f0:
19:d2:5e:5b:b1:7d:81:21:83:0d:7d:7b:69:71:d1:
3d:ff:da:77:33:b5:15:ff:30:33:c9:7d:08:86:86:
7f:f6:c8:ef:d2:ac:5e:d2:a9:ea:d3:c2:2c:5e:31:
6c:66:49:bc:3c:33:14:98:b1:76:cb:e2:8e:44:a9:
7f:d6:50:65:de:16:03:b5:42:55:c3:d1:72:26:48:
4b:68:8f:61:35:f2:2c:cf:62:d8:af:c4:8d:ad:b6:
1b:46:df:e8:ee:90:cf:ba:50:7f:e1:79:aa:b5:7d:
c8:1e:bb:98:d9:41:9f:40:d5:4e:a9:e8:67:d4:64:
07:81:8e:8e:4e:06:94:09:7b:be:68:ed:36:a3:31:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:5D:52:95:92:2C:22:93:4F:93:41:51:17:5A:74:00:BB:BC:6E
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ayldUpWSLCKTT5NBURdadAC7vG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.145.0/24
Signature Algorithm: sha256WithRSAEncryption
77:09:66:f3:f6:38:41:e1:17:cf:4f:7c:93:a6:99:de:29:5c:
ae:02:3f:2d:54:0a:5e:a9:5c:38:10:22:69:e2:d8:38:83:d5:
f8:97:a3:73:79:43:62:5d:c3:aa:06:f2:87:bd:14:6f:48:41:
a2:54:35:7a:92:38:90:19:0e:8f:f6:fb:45:ec:40:cd:16:68:
1d:7d:b8:12:27:0d:62:81:d5:b8:25:b1:08:25:b0:19:86:0e:
50:f0:e3:45:e1:b1:78:73:da:f3:08:b3:1d:0f:95:91:39:85:
28:8d:84:50:6a:98:0c:02:6b:7d:62:6b:bf:1d:a6:88:a9:6c:
5b:9a:7a:a1:c5:a8:3d:f2:b9:ec:bd:2d:18:3d:5a:e7:f2:fb:
02:94:0a:84:db:6a:4b:72:63:5c:35:c6:79:3c:4a:0a:7f:63:
a2:c8:d3:86:35:55:7b:17:2d:c8:dc:2a:18:95:51:82:35:97:
56:2f:00:ad:56:df:88:86:00:f3:83:24:f9:7d:ec:48:fb:3a:
31:e3:0b:da:f9:9d:7d:6f:68:6d:e4:ad:8f:0a:bc:75:d4:7b:
a8:4a:d6:2a:04:03:72:56:ac:b9:16:49:b5:3c:9c:13:88:24:
2e:10:1a:ea:93:ae:cf:59:15:96:b4:a3:27:79:e5:65:d0:bc:
64:a4:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:22 2026 by rpki-client