This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa
File: jv18kUzHEBlDlkIHJKkxODrKqc0.roa (raw, json)
Hash identifier: wdFZODPpunDdGOXTc+SSGtgRA0zL9y523IFxS0/YWn0=
Subject key identifier: 8E:FD:7C:91:4C:C7:10:19:43:96:42:07:24:A9:31:38:3A:CA:A9:CD
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 019B79EBBBF241F46BEDB3A1108478C1911E
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa
Signing time: Thu 01 Jan 2026 14:17:30 +0000
ROA not before: Thu 01 Jan 2026 14:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215563
IP address blocks: 91.223.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:bb:f2:41:f4:6b:ed:b3:a1:10:84:78:c1:91:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: Jan 1 14:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8efd7c914cc710194396420724a931383acaa9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:85:43:0b:a8:9c:08:1a:31:d3:4f:a1:46:36:
10:4e:78:14:67:13:2b:03:32:88:d6:5d:d7:f0:65:
d2:38:38:75:83:53:40:28:5a:70:eb:b4:fa:da:0e:
bb:80:2f:b7:08:e0:7a:95:cd:ce:ad:52:06:9b:16:
c7:cd:d9:5f:53:e1:82:a5:d6:bc:02:72:1d:6e:14:
87:2d:a6:39:5c:15:52:94:a3:2d:c6:fd:a9:8c:e6:
1f:9a:24:3e:4a:70:00:39:68:ce:b3:28:0c:7f:c8:
23:c5:31:49:95:65:1d:90:a1:7d:04:3e:62:2a:c5:
13:71:45:49:9b:dc:2b:76:9f:bf:96:c2:5a:57:f5:
45:0d:90:9b:ca:04:8f:24:c7:02:3f:70:ec:cb:da:
d1:fa:b6:86:8b:fd:32:87:a9:6e:f8:0d:46:2e:08:
88:c7:e6:8e:16:bb:c3:2e:43:5c:18:34:6b:09:4e:
a2:4a:5f:9d:1e:83:3f:57:92:e0:e5:38:88:ab:36:
a1:11:f1:51:f6:74:e7:26:ff:ac:e6:6c:a1:4b:98:
64:68:af:bd:4b:08:da:6d:88:19:61:c3:64:5e:ea:
a0:08:67:9e:40:35:aa:3b:9c:f1:db:5b:5e:cb:53:
cd:ff:fc:14:53:37:21:db:33:83:e6:3e:1f:b6:90:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:7C:91:4C:C7:10:19:43:96:42:07:24:A9:31:38:3A:CA:A9:CD
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/jv18kUzHEBlDlkIHJKkxODrKqc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:96:9a:c2:b1:66:e3:ee:4d:e4:e5:ca:b9:8c:77:04:10:63:
e9:19:80:36:91:f5:c4:24:96:7d:fe:dd:29:80:d9:3c:97:6b:
85:67:a0:28:92:37:ce:b5:37:7c:de:02:4f:2d:2f:f4:71:15:
00:b9:80:19:fd:ff:24:34:0f:dd:db:10:04:73:22:60:8a:ce:
29:3a:6a:54:b7:d2:0b:87:a5:0e:5e:93:8b:1c:5b:7f:ed:b5:
47:ca:8b:b3:f7:fa:b2:8f:e5:3f:15:37:db:5e:69:56:0d:81:
e0:a2:73:11:29:22:4d:c5:05:42:1d:16:a1:ab:27:3d:61:a7:
3d:98:9d:b7:0f:72:d1:d1:b8:1c:b6:79:20:c6:50:da:3f:d9:
d7:6d:4c:cf:0a:a6:53:e2:14:61:10:5c:78:4f:b6:ee:c2:88:
07:2e:b5:4a:12:16:19:ef:2c:2a:11:65:69:c5:42:33:f2:23:
cd:87:36:fc:c8:8f:09:11:bb:c3:d2:19:fc:67:c4:23:23:d9:
9f:16:12:44:99:2a:c7:15:c1:61:29:36:58:eb:ab:e7:7d:26:
23:c9:68:31:02:86:ae:76:cd:be:54:f8:55:f8:e6:6e:3d:da:
7b:54:98:ac:a8:c8:8b:89:b2:1b:24:7d:99:2b:29:5a:02:cd:
55:0b:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:46:04 2026 by rpki-client