This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa
File: v5j62T31CGbyesihQ2ZxZfpouT0.roa (raw, json)
Hash identifier: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=
Subject key identifier: BF:98:FA:D9:3D:F5:08:66:F2:7A:C8:A1:43:66:71:65:FA:68:B9:3D
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019B77C6DE8B185A649B3C29C7F41349930E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa
Signing time: Thu 01 Jan 2026 04:18:00 +0000
ROA not before: Thu 01 Jan 2026 04:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 91.233.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:de:8b:18:5a:64:9b:3c:29:c7:f4:13:49:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jan 1 04:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf98fad93df50866f27ac8a143667165fa68b93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:00:15:97:64:73:1a:3f:83:24:11:1a:ff:
21:e4:17:59:c2:ca:62:b7:c2:f9:75:cd:53:dc:21:
1c:18:7d:2b:89:36:8a:18:83:76:84:10:60:77:82:
cd:2a:6a:2b:b6:df:c6:cb:22:e9:dc:be:f6:cd:9e:
10:42:74:74:a9:82:ba:7f:26:94:35:57:06:a5:df:
63:1d:0a:f5:1c:12:dd:19:e5:be:12:75:98:48:dc:
c0:9d:0d:6a:50:d5:4a:cd:0a:55:27:41:75:a5:6c:
6b:46:79:b4:83:c5:bb:ff:d0:e6:e6:56:72:0a:1c:
83:cf:de:87:37:97:60:43:e9:78:14:ab:7e:04:35:
60:44:f1:65:ba:16:6e:87:40:19:59:fb:8d:f4:b3:
09:4c:a7:cb:d8:53:ba:1c:f1:91:44:bc:80:c6:b9:
e6:00:1e:84:7c:62:8a:74:fc:12:1a:c3:58:e8:4c:
03:b8:87:b7:93:8b:12:ef:5e:d3:e4:c1:ac:a2:d2:
5d:95:80:96:02:e9:04:b9:94:cf:3b:3e:ce:7f:1c:
8a:0b:bb:84:8b:f6:19:76:94:a0:11:4f:51:e0:d7:
e2:54:7f:9c:83:0a:f8:63:2c:e4:d7:58:6a:a7:e0:
34:37:91:13:ca:4d:cc:eb:0e:b9:a1:98:8e:4c:ef:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:FA:D9:3D:F5:08:66:F2:7A:C8:A1:43:66:71:65:FA:68:B9:3D
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:ce:d0:cb:9b:b7:5c:55:74:5d:69:f9:9b:13:2c:6d:cd:56:
c5:e4:5c:c7:d4:73:37:c8:0f:a3:73:b8:67:1e:28:a2:75:06:
03:b5:88:fc:81:97:29:65:05:dc:ad:20:87:4e:76:b4:7d:ea:
f4:24:1c:43:1d:31:5c:90:b8:ea:53:bd:c2:03:27:96:d1:dd:
95:81:1b:ca:39:b2:07:62:31:02:29:2c:6a:c2:3b:1d:76:3d:
bf:22:f3:e8:d3:47:04:1f:9d:94:10:1e:f6:62:14:0f:4f:64:
94:f6:44:a9:ec:ca:b8:86:15:31:2b:49:de:d8:b0:b4:45:6f:
d5:f4:b5:57:4d:08:8c:79:bb:11:21:75:c0:1e:7c:02:77:2b:
47:37:da:86:d9:c5:95:72:de:ed:66:38:24:5a:5b:e5:58:86:
63:43:23:cd:6c:1c:e4:63:b0:df:9e:ec:1b:02:cb:5f:1a:24:
56:1a:de:fc:6f:4f:d4:59:d0:2b:20:b0:15:cf:d9:24:ee:e8:
14:9a:7d:fd:4b:49:1d:7e:2f:69:67:0b:9a:91:ed:50:b1:52:
eb:48:c4:84:02:cd:41:27:1c:4b:9a:ce:ac:55:aa:ea:89:1b:
98:01:58:aa:12:b7:9e:77:cc:d8:67:59:dd:ce:8d:2e:f1:55:
49:36:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:24:20 2026 by rpki-client