This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uo5w_hamUoonPJRV5DL4G24KROY.roa
File: uo5w_hamUoonPJRV5DL4G24KROY.roa (raw, json)
Hash identifier: aLK0bMT0B6Nh4M0ukHsojn4vtUCdZ1/I4BO6p+c6iOw=
Subject key identifier: BA:8E:70:FE:16:A6:52:8A:27:3C:94:55:E4:32:F8:1B:6E:0A:44:E6
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 019B7F139BACA4BFF53F8A6750E0C5B0330F
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uo5w_hamUoonPJRV5DL4G24KROY.roa
Signing time: Fri 02 Jan 2026 14:19:10 +0000
ROA not before: Fri 02 Jan 2026 14:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 91.236.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:9b:ac:a4:bf:f5:3f:8a:67:50:e0:c5:b0:33:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 14:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba8e70fe16a6528a273c9455e432f81b6e0a44e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:67:0a:eb:b3:74:ba:b1:d0:22:6f:b0:a1:
27:4c:44:77:38:d6:b8:1e:9b:bd:f1:b4:0b:57:cd:
30:aa:5c:84:c4:bb:1f:13:56:46:fc:98:2b:74:e5:
13:e8:b9:04:ca:87:bd:61:06:24:98:88:8a:25:f7:
0e:55:77:18:45:5c:17:5f:28:68:d4:7b:b9:24:a3:
65:56:9b:a7:09:93:c6:3e:6d:7a:42:63:3f:4c:2d:
2d:97:7f:54:e2:04:8c:2f:71:d1:16:32:52:1e:6e:
0a:eb:19:43:36:56:4a:61:f8:2e:90:5a:37:ab:04:
91:7a:5f:7f:a4:ef:98:f9:c7:91:e5:40:d6:ca:66:
09:be:df:85:f9:af:7b:98:6a:27:59:f7:c0:c4:55:
a3:61:b1:6d:22:f3:93:d2:ae:57:45:f9:18:ff:8d:
d1:f5:80:3d:05:9f:56:7b:9e:e5:3c:78:78:ed:d4:
86:56:7a:4d:29:6c:9c:af:2c:a6:d3:b2:de:a5:d4:
d5:d2:6d:35:0b:89:0b:e5:54:55:fa:67:53:c2:1d:
0d:c8:b1:34:a6:d5:cc:2c:b5:da:2d:48:23:3e:d4:
d2:d8:43:27:73:ed:9c:a5:82:7b:54:c8:e6:98:72:
52:ed:62:fb:55:d3:e3:e9:c7:e9:c1:2c:ca:65:0f:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:70:FE:16:A6:52:8A:27:3C:94:55:E4:32:F8:1B:6E:0A:44:E6
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uo5w_hamUoonPJRV5DL4G24KROY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:f3:ea:cd:4f:00:f9:be:3b:d9:db:60:02:8a:dd:b1:b8:af:
a1:67:2f:6c:e9:0d:62:7b:1c:89:b2:8e:db:2f:3a:7a:b6:bd:
6a:de:23:a8:02:2c:eb:39:ef:f9:d9:ae:dd:e1:93:e6:c2:a6:
f0:20:66:38:b7:2d:fc:d8:8e:21:a2:b8:02:25:6c:74:8a:54:
1c:b6:de:a4:35:e3:1d:c3:ad:b2:40:50:84:2a:ec:d5:e2:80:
6d:d5:9d:5a:34:e5:24:c1:5c:2d:5f:e2:e1:ea:96:ff:cd:5f:
ac:7a:ec:06:5c:36:7f:57:65:3a:64:79:e0:37:1e:69:0b:81:
0c:6d:ce:78:40:60:26:10:d2:db:b9:a4:b5:6a:d4:6b:a5:ad:
92:87:d5:6d:5a:b7:ba:e3:fc:fb:48:4a:7a:e1:d5:fa:2e:7d:
42:7d:a1:2d:06:36:a2:c9:ae:10:ec:6b:c1:64:f9:88:eb:21:
ff:df:e8:a3:fc:39:37:a8:55:4e:45:ff:24:88:e3:12:62:21:
1e:53:12:aa:f8:f1:58:34:20:ac:f5:76:2f:cf:db:4c:d3:d8:
9f:42:1a:ec:28:c7:57:eb:38:f2:b0:a2:64:e6:a8:a8:8a:75:
71:52:2e:3f:91:e7:06:ae:86:83:76:c3:1c:ed:21:b5:21:b5:
a0:3b:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:30 2026 by rpki-client