This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa
File: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (raw, json)
Hash identifier: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=
Subject key identifier: 8A:5B:FA:A4:91:65:6E:BE:06:58:FC:36:1B:03:90:CD:E6:95:26:B0
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019B7B366C0B3580BB0596F976D9EC3623E5
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa
Signing time: Thu 01 Jan 2026 20:18:42 +0000
ROA not before: Thu 01 Jan 2026 20:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59442
IP address blocks: 91.241.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:6c:0b:35:80:bb:05:96:f9:76:d9:ec:36:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 20:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a5bfaa491656ebe0658fc361b0390cde69526b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:36:fb:dd:19:fd:46:13:72:b6:ae:65:a6:
48:f4:ed:2f:ab:c4:46:a5:75:f9:b5:b0:ab:38:da:
c0:a8:17:d2:ad:62:bb:8f:22:a4:1a:ca:6d:2c:8a:
26:b2:63:ae:91:3e:a9:21:c7:d1:51:f9:58:33:4f:
99:4c:ff:da:c7:d7:75:18:7c:39:73:a3:09:94:e1:
f6:76:5e:22:18:85:b0:8c:31:74:29:9f:d8:aa:bd:
a4:0d:ca:bb:77:c6:4d:11:cd:e5:3a:c0:47:eb:ea:
20:8c:37:1d:88:d0:5d:a9:9b:89:01:65:7b:a7:98:
f8:57:67:1d:8e:cf:6c:2f:06:c1:47:59:d0:48:56:
8e:f9:cb:79:30:58:18:f6:f8:ee:69:45:69:ba:13:
6c:78:00:7d:32:72:7f:04:03:41:b7:f1:18:ca:d6:
e0:30:34:e1:c5:e3:cc:77:30:a6:5d:36:c7:40:b8:
a4:b5:c5:c3:b7:12:1e:8d:32:88:a6:94:d5:4d:f9:
a7:35:04:0d:07:4b:d8:f0:d0:20:76:9a:10:14:b7:
4f:f9:9b:d4:72:87:61:2c:ab:6b:71:0f:82:6a:f6:
21:f8:93:6d:76:31:a0:e6:83:4c:c7:8b:1f:b7:9f:
de:8d:30:35:f9:9a:9d:8c:4d:f8:8c:12:73:40:8d:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:FA:A4:91:65:6E:BE:06:58:FC:36:1B:03:90:CD:E6:95:26:B0
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.20.0/23
Signature Algorithm: sha256WithRSAEncryption
79:58:05:fa:c5:19:66:cc:c6:ca:d4:ab:8d:f7:3f:59:86:dd:
47:19:0a:42:32:36:9a:b6:27:26:a1:b7:a6:01:f0:79:f9:c7:
17:3a:59:fe:e2:9d:af:01:ef:12:c5:01:e4:b6:a9:28:3f:05:
57:7e:a7:1e:b5:5a:89:44:61:ef:b3:23:dc:2f:ce:bd:78:0a:
4b:e4:26:9a:92:5b:7d:a4:6d:bc:b7:fa:1e:39:fb:2d:cd:2b:
34:aa:95:89:a4:69:45:b2:ae:af:b8:39:97:52:58:45:81:f0:
25:3f:0e:1b:43:80:b4:8c:dd:9e:36:c1:24:38:4d:01:ed:bd:
63:45:20:ba:88:c9:11:49:a1:52:ae:4b:94:7f:45:01:a6:0c:
ab:bb:bd:43:60:de:31:9e:02:25:24:17:26:34:3f:23:48:8a:
6f:63:d7:33:a8:d9:6f:1a:01:02:2a:62:60:6f:a3:7a:d3:fc:
c8:51:75:66:3a:ea:9c:cd:78:07:15:11:69:56:ce:b4:b4:4d:
05:2a:98:9f:db:25:46:52:d1:c5:b1:22:b4:c7:b1:42:34:bc:
d7:6c:b2:49:0c:97:ff:91:c6:66:f9:5b:f3:60:13:29:47:41:
10:f5:17:7f:53:ab:8d:c4:53:21:da:6a:22:e2:7e:78:fc:2a:
4c:a7:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:51:40 2026 by rpki-client