This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/kelA1bjmusiDmCW1K47dqweiIW8.roa
File: kelA1bjmusiDmCW1K47dqweiIW8.roa (raw, json)
Hash identifier: bPpEpCtGqf74OwrxtLTkdNIJWgNMPzrtzZREOLihZ2s=
Subject key identifier: 91:E9:40:D5:B8:E6:BA:C8:83:98:25:B5:2B:8E:DD:AB:07:A2:21:6F
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019B797E3542B940151CD3D0D50DFBFB2BA8
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/kelA1bjmusiDmCW1K47dqweiIW8.roa
Signing time: Thu 01 Jan 2026 12:17:52 +0000
ROA not before: Thu 01 Jan 2026 12:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 89.18.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:35:42:b9:40:15:1c:d3:d0:d5:0d:fb:fb:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 12:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91e940d5b8e6bac8839825b52b8eddab07a2216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:26:ed:e5:51:3a:e2:fe:28:cb:21:41:d3:
8f:64:64:db:a3:0b:78:d7:f8:4a:bd:9d:af:41:e5:
72:33:c4:75:05:06:69:8c:fc:33:79:1d:44:29:8f:
0b:eb:13:f8:67:fc:06:a5:23:6a:f0:1c:3a:f6:48:
fb:34:85:b2:4f:ea:74:cc:b9:d0:08:ce:06:99:6d:
62:a9:5a:da:0f:ca:c9:ef:aa:39:87:d1:5c:17:23:
78:e2:7d:51:f9:e2:8c:df:0b:94:17:03:71:6d:ac:
61:1d:28:e0:56:ad:03:c3:df:bd:2b:e1:be:38:5e:
76:1f:a3:7b:47:ba:18:f3:b8:2c:82:96:00:d8:8a:
5f:15:b5:b7:5e:2f:18:d1:23:cf:c2:18:d2:fa:fe:
26:82:f6:0f:e6:a7:84:5d:41:e1:49:01:45:7a:19:
4c:c1:e3:68:f2:75:d4:6b:4a:ab:c3:65:98:5d:20:
62:b9:42:61:28:61:ca:a2:ef:70:f0:f2:4e:80:b0:
c1:5e:aa:8e:de:e3:15:83:7c:a7:ca:02:50:13:bd:
fb:69:b0:48:bb:3a:91:e0:38:7e:b6:3f:1a:72:c8:
3a:8b:e9:0d:bf:7c:ab:8d:af:01:d2:02:8a:a0:52:
63:27:65:a0:3b:56:fd:77:30:04:6a:cf:e5:88:17:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E9:40:D5:B8:E6:BA:C8:83:98:25:B5:2B:8E:DD:AB:07:A2:21:6F
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/kelA1bjmusiDmCW1K47dqweiIW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.175.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:b3:39:56:b7:e7:09:4f:8f:0f:43:c7:8f:49:c4:5a:59:
1d:54:78:cb:18:89:4d:c9:17:16:2f:2b:35:65:d7:58:43:6a:
7a:70:51:8c:d6:30:31:eb:78:a8:1f:af:11:cf:3f:78:eb:58:
ca:2c:06:cd:7c:38:76:bd:f8:ac:16:a5:cf:1d:b7:cb:52:af:
bb:9e:aa:ab:bd:ce:24:d9:4e:a8:59:a5:b2:7a:c3:4e:f1:54:
79:b3:a3:c4:e6:66:91:38:25:3c:05:46:6d:1d:1f:e5:10:ce:
70:d5:da:7f:86:1f:9a:3b:e6:ec:21:dc:93:40:36:ba:84:db:
85:54:cc:44:8e:21:02:01:61:ae:e7:e0:87:e9:68:cb:e1:3c:
c6:ad:3f:54:b6:91:55:00:30:62:96:9a:b0:06:72:46:ea:a0:
28:b3:bc:3e:b8:c3:a9:24:5d:1b:68:89:24:be:9c:5e:b7:90:
69:00:6a:b3:a7:f9:e4:48:bb:af:d0:e1:81:6e:65:5b:da:19:
ee:fa:f6:9b:ef:72:20:7f:50:33:4f:0c:3a:6a:9d:a3:5a:8c:
4b:27:59:40:73:2d:72:48:25:eb:21:92:b2:f8:83:26:aa:fb:
6c:9b:b4:34:e7:7c:be:e9:04:44:ce:93:61:19:2c:4c:b4:07:
c8:07:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:39 2026 by rpki-client