This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NMvmkeyiAkrobao-3Xs5vv5vq_0.roa
File: NMvmkeyiAkrobao-3Xs5vv5vq_0.roa (raw, json)
Hash identifier: V0DWRl5tRY87mKWaMvT5/a/RDrY01S9lDiCa4C2NjcU=
Subject key identifier: 34:CB:E6:91:EC:A2:02:4A:E8:6D:AA:3E:DD:7B:39:BE:FE:6F:AB:FD
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758EFD1FB6D7B7EB2AF0B482485E17A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NMvmkeyiAkrobao-3Xs5vv5vq_0.roa
Signing time: Thu 01 Jan 2026 02:17:55 +0000
ROA not before: Thu 01 Jan 2026 02:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30793
IP address blocks: 85.31.252.0/24 maxlen: 24
87.239.216.0/21 maxlen: 21
87.239.216.0/22 maxlen: 22
93.180.160.0/19 maxlen: 19
185.58.160.0/22 maxlen: 22
185.58.160.0/23 maxlen: 23
185.58.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ef:d1:fb:6d:7b:7e:b2:af:0b:48:24:85:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34cbe691eca2024ae86daa3edd7b39befe6fabfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:e6:6c:ae:f5:12:24:22:db:86:64:40:72:
c8:77:fe:e4:12:b3:d6:70:29:cd:3f:bb:f6:64:e6:
26:e6:ab:20:94:05:f6:89:88:85:6c:c6:4d:dc:a2:
19:e3:f5:25:4e:6f:a4:65:09:39:35:c6:f3:68:c0:
fc:92:0a:4f:1a:11:3a:cb:ba:e0:a5:cc:52:01:72:
55:0d:9e:29:4e:e3:4d:91:2e:7e:56:3a:09:a9:73:
b0:85:6e:d9:ec:13:2c:a0:57:52:92:ce:80:9e:15:
20:e8:cb:80:7d:62:e8:9a:41:29:b8:3e:40:ca:64:
82:b0:b6:c7:5b:13:c0:ca:c1:7a:12:eb:2a:e2:21:
e7:53:bd:73:c5:6c:69:3a:89:0d:4c:36:99:6d:39:
19:cc:90:88:57:18:d2:4e:e2:97:90:a8:61:ad:84:
20:0a:d3:69:96:15:34:8f:84:ee:ab:b8:fd:ef:b7:
cf:d6:a0:cf:f1:0a:1a:26:80:ff:89:b0:06:aa:b9:
7e:85:cb:53:5f:8e:ea:74:1a:6d:c0:19:25:6f:71:
53:9c:cf:8f:cd:90:1e:ab:90:be:00:39:97:a7:c6:
12:55:d0:45:b4:61:8e:f0:e4:fa:d3:cd:c7:86:0a:
30:d6:0b:62:a4:6f:e3:11:03:a1:6b:62:72:b6:07:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:E6:91:EC:A2:02:4A:E8:6D:AA:3E:DD:7B:39:BE:FE:6F:AB:FD
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/NMvmkeyiAkrobao-3Xs5vv5vq_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.252.0/24
87.239.216.0/21
93.180.160.0/19
185.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a3:12:1b:7a:7f:81:28:53:a3:3f:d4:cd:78:6c:a6:b8:34:
e6:c3:ab:17:c1:8a:15:6a:a4:c3:16:f2:76:15:d8:98:0f:31:
d5:b1:72:96:ba:b1:80:19:7b:c2:53:89:f3:17:f8:8d:0c:9e:
dc:85:06:69:37:a6:45:77:71:e3:24:c6:8e:6d:ce:37:01:21:
03:c4:df:96:7c:0d:6d:3a:2a:1d:9b:3b:26:f4:bd:4d:a0:c4:
22:a9:93:46:2c:a3:49:99:ab:b1:9d:78:36:16:29:e7:91:0e:
f9:76:53:5f:51:24:96:39:33:68:7e:3c:8e:ea:26:ac:b4:cb:
e5:08:8c:58:67:dc:78:14:25:3f:6f:90:76:65:5c:17:d8:6d:
ba:77:53:d8:68:80:2f:ac:97:2a:b7:b3:fa:75:99:d0:21:8f:
b3:11:84:bf:04:9e:94:e8:2b:ef:34:1b:43:96:35:05:74:88:
4f:7a:66:47:67:4f:0f:ed:af:7e:2f:9b:bc:96:ab:f5:b6:ab:
7b:15:6c:cf:a5:1c:65:89:5f:2d:b8:82:37:fa:43:f9:c3:4f:
ef:7e:56:98:ac:19:6d:b7:71:93:9c:6a:9a:fa:38:5d:9c:d5:
1c:8a:64:82:6a:d1:fe:05:2c:ea:8b:68:e8:d3:af:79:db:48:
40:8d:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:54 2026 by rpki-client