This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa
File: 6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa (raw, json)
Hash identifier: sSdGu5Xuxs0f7WjvG48kyrMaNHwDQMDfZZyHNGWz4mk=
Subject key identifier: E8:FE:53:AC:2A:C1:30:13:B3:58:FA:7B:35:F9:13:3D:57:C6:14:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 019B79ED5EA296F2EF411DB069C729B592AE
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa
Signing time: Thu 01 Jan 2026 14:19:17 +0000
ROA not before: Thu 01 Jan 2026 14:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212633
IP address blocks: 91.220.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:5e:a2:96:f2:ef:41:1d:b0:69:c7:29:b5:92:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Jan 1 14:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8fe53ac2ac13013b358fa7b35f9133d57c6142d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:25:14:40:a6:a9:2c:c5:50:c0:c0:f4:93:
6b:71:61:cc:df:1d:f5:7d:13:f2:99:17:97:b8:7a:
b4:7c:86:54:bc:fa:3c:34:d0:26:47:89:75:0e:a4:
4d:34:46:10:cd:9f:27:b9:51:92:47:f4:64:38:bc:
36:6a:c9:e0:33:a2:db:d6:51:94:be:1b:c4:2f:26:
cb:4a:a5:6a:8e:68:e6:f0:a0:0c:32:64:45:14:07:
a3:ab:72:81:ad:89:94:59:0c:94:10:da:36:70:92:
13:d6:74:33:b6:f5:1b:e0:e4:0d:61:4a:74:c5:bc:
b1:00:7f:0b:ff:29:f9:70:f2:b7:19:77:ce:b6:97:
48:f1:05:59:bc:16:fb:0c:ea:13:9e:63:59:e1:5f:
76:6e:1e:5e:b9:7e:6e:45:07:3d:0d:e1:e9:51:6a:
85:70:2e:66:c2:b8:dd:9b:06:aa:c6:91:28:3d:3c:
c6:1a:64:06:4b:21:ab:ac:43:7b:20:3d:43:d5:24:
b9:d6:05:fa:f9:85:8c:a4:d2:4a:f5:b5:5c:b6:b4:
d2:87:18:a5:ef:22:75:0a:1e:84:41:4e:61:ee:39:
66:b7:94:19:2c:4f:e7:e8:8a:7d:8a:7a:ee:a7:33:
1a:a2:5a:31:de:30:7b:51:56:eb:e6:3d:dd:55:6d:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:53:AC:2A:C1:30:13:B3:58:FA:7B:35:F9:13:3D:57:C6:14:2D
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.115.0/24
Signature Algorithm: sha256WithRSAEncryption
55:11:34:96:74:eb:78:46:01:3c:5a:df:6c:42:15:b7:77:6b:
ef:14:19:81:a1:aa:c0:52:27:ba:f2:58:db:46:65:4b:46:79:
7a:6d:a6:44:c3:24:48:dd:a1:60:f5:a9:59:5b:7c:cc:c2:b3:
b6:36:fe:36:9a:95:8c:2c:36:39:0f:af:b9:b3:a1:30:ed:b3:
46:d3:9f:2e:2a:2a:a9:8e:42:41:6a:cb:84:19:9b:14:be:39:
db:b0:aa:a3:76:a9:35:a7:81:ff:04:74:b7:35:16:67:44:f9:
f1:b4:7d:e7:fa:2e:62:0b:13:1a:bb:6a:70:1b:5f:78:11:97:
ba:4b:62:1c:f3:27:d0:f2:e9:d3:62:44:82:47:74:f5:c0:81:
8f:96:82:28:c3:f3:78:9f:0d:e5:42:f1:d7:24:a2:80:a3:b8:
aa:d2:fe:6f:a4:a2:c2:73:aa:ed:df:d2:cf:97:3d:40:d4:2d:
11:13:4d:26:61:3d:68:5f:4d:e5:17:30:f8:26:f4:f3:d2:7f:
5f:64:c3:40:31:ec:28:4d:28:ff:7a:ee:8a:cc:f1:a8:de:16:
21:c6:ca:7a:1a:8b:e2:0b:bb:8b:af:53:c0:3f:30:de:77:38:
8e:2d:02:7e:f2:66:fc:0d:41:70:cf:bb:8d:e3:37:9d:8b:d8:
cc:ab:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:50 2026 by rpki-client