This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiJi7j-ZIjUwUTwaGoEt13TizrE.roa
File: eiJi7j-ZIjUwUTwaGoEt13TizrE.roa (raw, json)
Hash identifier: FnBCil+MgauAmm/7ykBNZRjTx45NyaliULDsm5XYleE=
Subject key identifier: 7A:22:62:EE:3F:99:22:35:30:51:3C:1A:1A:81:2D:D7:74:E2:CE:B1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C778B69BF8CB8CEA4DA76A3E4958E3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiJi7j-ZIjUwUTwaGoEt13TizrE.roa
Signing time: Thu 01 Jan 2026 04:18:39 +0000
ROA not before: Thu 01 Jan 2026 04:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202880
IP address blocks: 91.107.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:78:b6:9b:f8:cb:8c:ea:4d:a7:6a:3e:49:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a2262ee3f99223530513c1a1a812dd774e2ceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:d5:90:3f:6f:cf:40:a8:25:76:e6:33:fd:
8a:29:8d:dd:97:23:d1:0b:fa:e1:85:04:cd:75:66:
7d:a1:8c:44:df:54:45:e5:67:f5:c2:49:fa:8b:4d:
c7:bf:2d:e8:f8:4d:66:2d:51:d7:1e:59:6f:b5:f5:
a0:7f:b4:f3:d0:83:40:d8:cd:08:b3:7c:19:62:c5:
e1:c3:b3:7f:61:ea:2b:72:f4:15:12:9f:a5:fb:a0:
8f:ad:bb:e8:d1:d3:80:28:8f:a8:09:4f:63:99:6a:
ca:04:9e:07:4b:a3:f1:e4:77:f5:46:cd:2a:25:15:
bf:78:66:a3:09:0b:f3:eb:c6:9d:78:40:99:d7:1d:
e3:cc:fb:ac:e2:3f:35:15:14:30:0d:39:44:7a:a8:
49:60:c7:ed:6d:7c:c4:bd:be:0e:f9:0f:f3:88:54:
77:76:c1:6e:9c:7a:0a:92:1e:fb:f0:65:f0:b7:a9:
a0:dc:4c:db:8e:0b:1c:eb:5c:be:3c:aa:49:fb:2a:
51:c7:0b:c6:1b:a2:e0:73:45:81:c6:72:f4:c3:58:
f5:9f:ad:0d:d6:8d:14:ab:31:72:7e:c8:b1:b6:ad:
3e:26:c4:ef:d9:8a:95:a2:4b:8a:88:b3:2c:c9:94:
7f:07:63:ae:88:14:1d:5b:79:5b:4e:ba:7b:3d:c9:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:62:EE:3F:99:22:35:30:51:3C:1A:1A:81:2D:D7:74:E2:CE:B1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/eiJi7j-ZIjUwUTwaGoEt13TizrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.114.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:6b:0c:7a:b9:0c:78:1f:3d:3f:fe:94:71:57:6c:4a:75:
20:f1:51:86:d2:17:23:67:c2:9b:6f:85:e1:1a:38:3b:55:0a:
5f:a2:0b:20:79:1a:fa:44:b1:ba:ea:38:bd:e9:17:29:1b:ed:
d7:ca:09:98:92:ad:b5:96:28:d8:53:b0:14:3a:df:f1:1d:be:
44:f3:02:c3:ae:b6:3e:32:7b:c2:7d:92:d5:fb:b1:ee:ed:51:
f5:fd:17:e6:ce:b1:73:a6:65:09:d9:da:f8:2f:65:17:47:06:
ff:5d:ee:ca:bb:34:c5:51:de:ab:d3:47:f2:c2:1a:a7:f7:9b:
75:af:e1:4f:74:52:a1:f0:a7:49:68:dd:d5:86:3f:aa:82:a9:
3d:56:af:d8:26:b4:e0:2e:52:9f:43:c4:83:64:c9:c6:8c:ae:
93:41:2a:18:6f:40:cb:ef:1f:e8:23:7e:9b:e4:38:6a:e0:32:
3e:eb:ee:45:98:e2:23:33:21:9c:2d:33:4b:15:01:9c:af:10:
96:03:63:a0:1f:92:09:4c:56:6a:07:48:a2:50:2e:b5:52:06:
7f:fe:a0:6b:4c:8e:b6:4a:69:f3:4c:0c:ff:70:bb:80:7f:57:
35:3d:48:da:1c:79:fc:df:c4:53:70:a7:c5:65:a8:17:24:0b:
46:25:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:42:20 2026 by rpki-client