This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa
File: uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa (raw, json)
Hash identifier: FnTvs0c3/i5yqsDdFaei4bcnSmfeaY6puxtewUwoPcU=
Subject key identifier: B9:72:78:91:5A:74:47:52:5F:E4:5D:FF:F7:78:41:B9:69:22:C1:57
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019B77C72A32A5C27DD8B5C6134CA7010C73
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa
Signing time: Thu 01 Jan 2026 04:18:19 +0000
ROA not before: Thu 01 Jan 2026 04:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 91.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:2a:32:a5:c2:7d:d8:b5:c6:13:4c:a7:01:0c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 04:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b97278915a7447525fe45dfff77841b96922c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:8e:de:d0:bf:95:b8:c2:14:78:c8:7c:f2:
18:05:32:ee:64:93:10:95:7b:c2:d3:f0:b8:d9:55:
89:3b:f0:ee:d8:16:a4:83:15:56:6c:d7:bf:73:9b:
b9:57:79:10:02:e8:31:57:87:12:81:7a:03:64:be:
18:51:f4:b5:74:93:ad:01:5c:21:41:90:e2:d7:48:
30:80:f9:45:d0:24:7b:a4:8f:ad:16:71:a3:db:c9:
d9:04:fc:e9:6d:aa:3c:ac:4d:45:cf:7b:06:53:ef:
51:45:46:47:0e:d6:0c:ac:ad:a6:38:bf:4a:cf:4f:
0e:cd:da:40:28:53:32:b3:14:0f:53:5b:07:44:c1:
aa:47:62:d7:aa:83:15:c9:f6:c2:d3:0d:ef:aa:fd:
da:4c:57:02:98:63:42:32:d9:72:95:20:78:45:a0:
9f:86:18:b4:1b:b6:e9:39:33:12:08:30:e5:ac:ff:
47:19:ce:4e:fe:ad:7c:a9:5a:c7:48:3f:ed:0e:ad:
d0:1a:bf:6b:3e:b3:0b:5d:eb:3a:40:23:21:d8:47:
9c:47:19:0f:eb:51:3f:f8:80:4d:a8:fe:36:78:f9:
d5:84:43:ac:b5:b5:ce:39:ae:8d:6a:94:2f:6f:46:
cc:b1:32:11:54:57:75:8a:59:4e:e5:3c:49:7c:8c:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:78:91:5A:74:47:52:5F:E4:5D:FF:F7:78:41:B9:69:22:C1:57
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/uXJ4kVp0R1Jf5F3_93hBuWkiwVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
79:18:a6:cb:68:0a:7b:5a:64:03:9b:ac:31:77:b7:7c:5c:61:
39:47:bf:14:1a:d5:0c:24:46:62:b7:0e:be:74:aa:27:6a:1e:
f8:11:12:16:dd:8f:2f:ae:2a:b9:93:a3:da:65:97:ea:57:a6:
d5:ab:97:1a:53:bc:83:f9:85:74:e6:e3:bd:c0:4b:9d:1e:42:
82:cb:5b:ba:1c:46:95:77:4e:22:d5:f1:4f:d4:bc:4f:1e:5a:
21:d5:98:c6:a3:77:0a:51:37:0c:bb:c3:54:67:a0:83:9f:a7:
e4:43:0d:3c:5f:c0:bd:33:99:f9:95:0e:cd:a9:ca:d9:d0:99:
c0:3c:2d:05:26:a5:2f:be:22:b7:bc:ad:5f:1c:59:3a:a1:2c:
8b:67:38:60:e0:96:fa:08:22:d6:92:2b:2b:2d:3b:db:ca:30:
59:6d:2e:84:db:4a:1f:5e:c8:ca:b0:f7:d1:62:71:43:1a:ab:
c1:4e:17:4e:b3:3f:05:09:2a:61:09:90:a3:97:70:3e:fd:23:
e9:81:1e:c0:7e:ea:7f:3d:a2:03:a3:5e:ef:3b:9a:cb:92:ce:
04:c0:07:8e:51:57:77:86:d3:d1:8d:a6:b9:7c:f7:5c:cf:ae:
92:4a:06:b0:28:9e:1f:f3:f3:86:0e:52:3f:75:4c:fc:d3:38:
c5:b8:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:15:12 2026 by rpki-client