This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa
File: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (raw, json)
Hash identifier: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=
Subject key identifier: 23:BA:76:09:57:4B:50:D0:F5:65:1B:33:98:62:B3:28:8A:CB:B7:BE
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 019B7CED8830A57B376BF5CDF14126D3E899
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa
Signing time: Fri 02 Jan 2026 04:18:20 +0000
ROA not before: Fri 02 Jan 2026 04:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 91.227.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:88:30:a5:7b:37:6b:f5:cd:f1:41:26:d3:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Jan 2 04:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23ba7609574b50d0f5651b339862b3288acbb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:71:5b:01:c7:15:3c:d8:1f:25:89:01:2b:
70:70:79:22:99:e6:3c:48:95:a7:7f:26:32:4d:ba:
47:7d:86:4b:03:4b:c9:40:ed:87:dc:1d:30:6b:61:
35:47:3f:da:46:07:9e:2f:dd:ee:4b:24:db:88:d1:
3c:f4:a2:02:ee:4a:5a:d4:b1:81:25:5d:0c:56:56:
c2:7a:56:60:ec:7c:68:17:08:a4:aa:99:c4:17:eb:
88:82:4e:3f:c2:8b:cf:cc:cf:a7:b3:3e:48:92:d6:
06:f0:96:0e:a2:e2:81:5b:16:c1:65:e6:4e:60:9b:
e0:06:97:3a:2e:9d:cc:46:12:0e:40:8e:14:6b:f1:
21:3d:e4:47:86:e7:1c:db:55:2d:f7:6d:b1:3f:c4:
f8:c6:0a:43:59:15:9c:43:57:98:96:e3:af:e5:82:
d5:0c:20:92:8e:57:b4:cd:7d:6e:ab:5b:2f:87:4b:
13:22:15:e0:61:fb:2b:79:f4:ed:49:21:2f:97:9f:
e7:7e:73:c0:e4:7a:24:80:71:98:e4:eb:a2:d0:69:
88:c8:4f:b5:66:26:ca:e9:36:1e:39:68:38:7e:b8:
d4:d8:36:5a:64:27:ce:ac:3d:31:aa:8c:83:1a:c3:
4b:8d:12:29:0d:cf:bd:bb:b6:f0:94:a7:9f:3c:c5:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:76:09:57:4B:50:D0:F5:65:1B:33:98:62:B3:28:8A:CB:B7:BE
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/I7p2CVdLUND1ZRszmGKzKIrLt74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c8:65:b4:9e:c3:80:52:75:f9:14:e0:d0:4f:38:f6:5f:c9:
56:bb:69:9e:f1:2b:10:4d:cf:26:d1:d4:73:69:7b:99:be:c6:
d0:e0:14:35:93:c3:c0:aa:45:04:75:60:15:cc:48:b3:4b:d3:
18:73:20:d8:74:4f:ed:fd:16:aa:a3:bc:d8:8d:b2:52:89:a3:
49:1e:01:49:04:21:ce:c7:24:30:6a:29:68:d8:9c:9c:5d:21:
ca:ae:ed:b6:bf:68:37:73:54:20:a2:26:69:57:4b:74:a4:03:
45:9b:d7:6b:cf:a4:a0:5a:c7:ba:49:e1:79:8b:54:a0:70:a4:
22:29:81:a3:55:5f:0d:bb:5d:4a:78:cc:c1:99:71:89:dd:ed:
66:fc:5a:c3:83:c4:db:e6:c5:5f:df:40:fc:30:ce:4d:9a:51:
0f:46:39:20:6b:59:e0:81:7c:64:8d:de:b6:0a:15:58:41:be:
6e:67:f1:73:f6:99:05:f7:6d:f8:a6:c7:d1:bc:a6:5c:cf:0c:
43:c2:b1:e1:a0:a6:2e:45:fc:d3:91:2c:aa:d0:de:14:ef:06:
69:8c:a7:6b:bd:39:09:a9:d4:81:97:4c:ff:f9:b6:d0:60:6b:
92:6c:30:c0:20:cf:0d:f7:25:c1:ed:bd:07:38:02:a1:4e:a0:
40:64:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:08 2026 by rpki-client