This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa
File: Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa (raw, json)
Hash identifier: yQWJLmZGnE0j5tjdQsvXjm4UxMpyJ+/kHzTEWWGPjOI=
Subject key identifier: 22:BE:C1:C5:7E:B3:FC:40:41:D2:60:CD:C4:57:44:43:9E:62:88:EB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C78F79A54A7AD20A37A5A50BE6EC6E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa
Signing time: Thu 01 Jan 2026 04:18:45 +0000
ROA not before: Thu 01 Jan 2026 04:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205813
IP address blocks: 81.15.239.0/24 maxlen: 24
81.15.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:8f:79:a5:4a:7a:d2:0a:37:a5:a5:0b:e6:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22bec1c57eb3fc4041d260cdc45744439e6288eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:9e:d4:24:15:7c:66:9f:35:f0:89:39:87:
01:85:87:c7:f8:c0:38:7b:57:7c:a6:46:78:1a:68:
35:59:5a:89:0a:2e:2c:78:0b:2d:e4:0b:1e:a9:e2:
40:03:8d:29:85:16:58:8f:55:67:83:ce:13:e5:b0:
c4:69:f7:66:69:44:26:40:d8:c7:21:ea:32:0a:63:
70:83:67:cf:5d:17:3c:77:01:13:b5:79:7b:dc:1f:
be:5b:62:e1:69:32:20:72:c9:46:5e:90:a6:03:d2:
14:e1:a3:26:1a:d9:32:a2:e4:dc:39:b2:d1:3a:19:
6c:df:f4:79:6d:cb:61:23:b3:8c:6c:a4:12:c7:21:
be:30:42:81:14:ed:0e:16:32:f5:a4:cd:43:ba:d1:
47:b4:1c:05:16:33:c4:9e:45:d6:18:30:7a:c4:7f:
e7:bd:4a:d6:4a:37:6d:04:db:5e:cc:78:3b:4c:bd:
ab:d8:7b:76:86:5d:3d:96:3f:20:ff:16:b1:de:77:
79:40:f3:af:95:d3:ac:f6:23:a7:46:b9:22:72:e8:
65:e2:6a:4a:45:27:d7:62:b7:35:89:18:c7:00:7b:
8c:6d:e2:8f:f1:73:a2:0e:f6:08:fa:77:1f:09:43:
3f:04:e4:5d:7b:14:c8:ab:8b:b0:d0:39:3f:5d:0e:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:C1:C5:7E:B3:FC:40:41:D2:60:CD:C4:57:44:43:9E:62:88:EB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ir7BxX6z_EBB0mDNxFdEQ55iiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.239.0/24
81.15.242.0/24
Signature Algorithm: sha256WithRSAEncryption
77:83:6e:98:68:84:08:51:4f:ee:8b:26:67:3c:77:8b:4e:df:
6b:2d:14:77:e7:75:77:54:bc:70:78:27:c6:73:b1:cb:c1:36:
40:14:68:7c:c0:59:52:b4:95:76:3a:2b:81:b2:09:6b:6e:d7:
1e:4e:34:1f:b4:c5:fa:ce:bc:c4:98:4c:54:f3:28:09:82:28:
cc:81:93:c5:22:ce:dd:10:2b:90:75:e8:f5:5b:d7:92:ef:93:
43:5b:7c:59:d5:72:c4:03:64:1d:09:f2:4a:7d:e5:5b:1c:43:
27:43:59:ab:65:c5:39:92:68:8f:2c:37:b8:9b:1e:8a:8d:1e:
39:6b:b5:28:83:66:8a:55:f9:81:2c:52:ab:ec:89:a6:f2:ee:
d8:ed:84:1f:c6:bd:25:69:0a:18:ff:9b:0d:c1:4b:40:5d:e1:
f7:c0:39:98:a5:f5:f9:86:73:a9:b0:58:0d:42:92:b8:85:db:
ba:9c:57:ff:ef:51:f2:cb:98:8f:9c:9d:44:84:29:cd:e8:2e:
fb:61:f2:c6:51:d5:52:41:b4:1a:64:58:e5:8d:37:41:2c:b4:
55:b2:25:4a:58:ec:fe:14:ff:d0:79:1a:34:cb:17:6e:e6:6a:
95:66:7c:b8:6e:e6:03:7e:9f:6b:cc:c8:bd:35:47:05:af:3a:
4e:03:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:46 2026 by rpki-client