This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa
File: Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa (raw, json)
Hash identifier: W91Un4+cAWOmCfRYL9NpIZw0WnRk1OPj82pCoQEGyIs=
Subject key identifier: 17:1F:1D:71:C3:09:9F:62:29:47:6B:93:22:A2:9E:EF:F2:87:6A:86
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 019B791056C549E9E6910951F9CF93001388
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa
Signing time: Thu 01 Jan 2026 10:17:52 +0000
ROA not before: Thu 01 Jan 2026 10:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8896
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:56:c5:49:e9:e6:91:09:51:f9:cf:93:00:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 1 10:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=171f1d71c3099f6229476b9322a29eeff2876a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:8c:3e:e7:22:27:0d:44:01:73:d7:b4:74:
d5:77:d2:4d:8b:51:25:21:08:b6:1f:55:1e:c0:f1:
ff:16:de:eb:1f:60:19:13:aa:0b:cc:d9:ed:34:d8:
85:2a:be:02:cf:66:d3:2f:ae:1d:d5:5e:55:47:fb:
7e:5e:14:68:3f:5d:c8:e0:70:d9:32:8e:2e:b6:e2:
c3:ac:5a:dd:7e:4c:38:41:8c:b8:ba:de:1e:1e:e1:
7a:98:79:69:b3:02:74:27:7a:be:bf:1f:ba:f1:cb:
6e:19:db:51:a4:ad:f9:18:4d:ae:fa:59:f0:3f:63:
21:56:d7:98:24:98:bd:38:58:a7:04:e1:22:91:c0:
37:6b:4c:f0:84:cb:54:68:82:bf:d8:07:59:6d:04:
42:5b:1e:b2:f0:01:5a:45:d9:1e:71:b8:f2:97:ce:
62:26:ca:c5:27:fe:fc:db:c0:2c:43:f3:b9:ea:33:
b9:1a:78:41:75:51:9a:b1:c7:de:21:36:0a:b5:fc:
2a:d8:60:01:5b:f5:f6:71:40:0c:33:e3:db:a2:f9:
59:f8:ae:3c:44:7a:75:14:e6:0e:68:d5:b1:13:98:
df:28:33:38:bc:ec:ec:bb:56:21:2a:31:3f:e8:c1:
80:6a:8f:bb:64:a2:62:98:ff:57:22:fa:e4:1a:a3:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:1D:71:C3:09:9F:62:29:47:6B:93:22:A2:9E:EF:F2:87:6A:86
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Fx8dccMJn2IpR2uTIqKe7_KHaoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
11:12:44:a4:02:86:ad:e4:4d:0e:ae:42:1a:db:96:21:ee:e8:
de:3b:75:8a:1a:96:3d:d1:52:ca:1c:9e:36:30:1a:e9:3e:4a:
f0:78:d9:e5:75:35:c2:4e:7b:82:b4:9d:61:30:f4:35:e6:17:
95:18:f4:26:4a:77:df:dd:8c:a1:a5:db:4a:a3:9f:3c:88:8a:
f9:86:ff:d5:59:d3:ae:a4:93:63:d5:6a:47:55:59:14:7d:31:
67:c2:d4:31:81:0a:ec:38:e4:46:82:8e:5a:b9:98:f3:ac:b6:
c0:8a:23:b3:fa:40:ff:dd:a2:40:51:02:f9:9c:13:38:4b:30:
66:d8:66:97:11:46:43:a1:1c:1e:7c:25:d6:ca:24:2b:35:ca:
8c:71:5d:1b:a6:ee:b9:27:db:44:4f:3f:30:26:00:d7:ac:e4:
5a:c5:6e:b8:e7:46:a7:91:a5:82:d0:fc:80:45:8d:22:f5:63:
b6:d6:3f:5c:f3:96:e1:dc:9d:4e:08:50:16:df:dd:eb:49:13:
9f:34:7c:26:3a:cb:3d:0b:5a:66:b8:81:f3:d0:38:6e:2f:8d:
66:e5:30:70:54:f8:9d:af:c3:6c:c2:e5:2c:7c:9b:59:94:2b:
5f:13:a8:fb:2e:21:a7:94:a0:d8:aa:85:78:3b:87:7c:0c:3a:
3b:16:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:01:22 2026 by rpki-client