This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa
File: 8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa (raw, json)
Hash identifier: RASI4VhIjb5uzRS2pv3aXc0f9fBfqSjFCHiU3OvucsE=
Subject key identifier: F1:47:73:31:DF:6A:55:0D:83:42:1C:99:25:68:89:FE:57:5F:AA:65
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019B797F2C8D4377D6B36AD3F151D559D5B0
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa
Signing time: Thu 01 Jan 2026 12:18:56 +0000
ROA not before: Thu 01 Jan 2026 12:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57724
IP address blocks: 91.192.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:2c:8d:43:77:d6:b3:6a:d3:f1:51:d5:59:d5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jan 1 12:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1477331df6a550d83421c99256889fe575faa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:34:c9:70:de:08:9c:a8:39:8f:fb:56:74:
f1:22:6f:1e:c5:72:49:a5:a2:0c:43:5e:98:17:37:
8b:a6:61:37:2a:ab:b0:92:73:c7:bc:12:0b:1f:e6:
7b:cc:55:6f:a8:ba:10:ee:99:ae:59:d8:23:33:5f:
97:fb:8e:09:69:3b:7e:63:96:e8:e7:ae:26:f0:8f:
74:ff:e9:82:47:82:27:0c:b4:76:34:82:28:e3:d7:
d8:66:34:5b:0d:e9:f7:5e:b8:f4:92:f5:28:0a:ed:
01:a1:e0:f0:c9:1e:8b:00:12:3c:ac:bb:0e:b4:ff:
1a:22:5b:ea:ba:09:a9:cd:97:89:c2:4b:f5:8e:ea:
21:57:a0:56:91:dd:99:a3:0e:b5:e3:1f:1c:57:52:
9d:1d:73:0d:68:30:24:87:7a:dc:55:0c:b1:64:6a:
7e:aa:1a:75:8e:c5:2e:c0:de:66:99:a3:61:fe:e7:
df:16:49:d4:65:06:e3:a2:1d:4d:0f:71:93:a1:3d:
d4:b5:57:5b:8c:b4:42:d6:7f:40:01:2d:4b:7c:95:
1e:3a:e1:cc:a2:da:60:ad:fb:34:42:5c:ef:d0:a0:
a6:e0:42:c8:5a:e0:3f:62:ed:07:37:65:f3:3e:33:
9d:f2:ef:52:96:fa:b9:09:b7:15:b3:8e:aa:6b:1e:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:73:31:DF:6A:55:0D:83:42:1C:99:25:68:89:FE:57:5F:AA:65
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8UdzMd9qVQ2DQhyZJWiJ_ldfqmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.92.0/24
Signature Algorithm: sha256WithRSAEncryption
50:23:e2:20:a8:96:16:f2:12:62:12:ba:da:3e:b7:1e:1b:57:
8b:d3:f5:a3:66:d2:42:37:c1:65:cc:a5:66:80:16:c7:56:36:
f8:fc:bc:7f:d6:be:74:04:eb:29:b5:a2:d1:1f:f5:c2:bf:12:
f8:f5:d4:37:d8:8c:03:b5:e8:d9:29:ec:bf:b6:d9:db:64:df:
85:8b:f4:68:5b:7e:b7:94:15:63:6f:15:86:14:ee:b3:41:69:
c7:22:17:86:c1:c0:75:13:9e:92:91:11:49:98:61:eb:b4:a9:
f4:14:92:60:f4:3f:25:23:b6:d9:ba:89:1f:6f:8d:e6:90:ba:
f4:7c:b4:43:34:6f:ce:86:a0:e4:ce:83:24:e2:15:50:fb:51:
3e:2a:73:cd:25:89:bf:2a:eb:97:4c:7c:22:ef:75:d7:49:9c:
b6:03:44:04:c3:57:58:1a:45:8e:6c:0d:ed:5a:53:c2:d1:0a:
86:07:bd:7d:a6:12:b2:c8:be:5d:60:8e:0a:c8:80:be:d5:50:
0a:fb:5e:c0:45:ad:7f:d6:8a:11:be:11:bf:e1:b3:96:5f:8e:
7a:80:d9:cc:90:62:17:cb:a8:5a:48:79:f2:28:2c:e7:4a:43:
9b:d0:ff:92:09:91:5d:e4:8d:b3:35:0b:9f:49:3f:f6:ea:87:
d6:4b:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:42 2026 by rpki-client