This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/93wurF5FK4RYHLZhxXvLpMtm-uE.roa
File: 93wurF5FK4RYHLZhxXvLpMtm-uE.roa (raw, json)
Hash identifier: 0dsGiKFe/X8WiHJUSF1yOsNrDgUrPIUtcVPZMgFJnGQ=
Subject key identifier: F7:7C:2E:AC:5E:45:2B:84:58:1C:B6:61:C5:7B:CB:A4:CB:66:FA:E1
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019C147753B1545A3A423A0F2CD7101A6C52
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/93wurF5FK4RYHLZhxXvLpMtm-uE.roa
Signing time: Sat 31 Jan 2026 14:31:30 +0000
ROA not before: Sat 31 Jan 2026 14:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201823
IP address blocks: 2a0d:d940:200b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 05:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:14:77:53:b1:54:5a:3a:42:3a:0f:2c:d7:10:1a:6c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jan 31 14:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f77c2eac5e452b84581cb661c57bcba4cb66fae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:dc:54:eb:26:c5:2b:26:73:34:76:b5:a4:
2b:20:0b:f1:f7:10:ca:61:d3:d3:57:28:12:6e:f8:
35:0e:40:6a:58:09:dc:1b:3a:5f:72:69:6b:33:0c:
f9:87:70:28:e7:47:e6:d3:f3:a4:1b:a0:9f:22:cc:
7c:ce:5d:09:1f:0c:50:6b:21:26:94:97:2a:55:1f:
9c:fb:db:42:8f:fd:6a:3a:92:be:28:db:8c:73:1d:
71:8d:74:d7:fc:fe:51:e6:ef:2f:e2:07:6b:33:21:
11:41:82:d4:64:c7:15:66:e4:ea:fc:b1:62:2e:4c:
65:66:21:5b:0a:ef:6c:4d:67:93:7f:bd:99:c8:33:
a2:67:ff:fb:b7:6b:62:10:5d:fd:b6:42:85:be:fb:
32:b1:2e:f4:cb:b8:65:50:6f:10:b0:10:64:f8:25:
32:a4:33:52:75:2b:00:8f:a9:8a:4b:5b:44:32:f9:
f6:18:89:a5:d2:4b:56:7a:82:1c:1e:b4:d0:ea:20:
d8:f4:41:de:d4:2f:c1:14:b8:3a:d3:10:92:7f:29:
66:4c:eb:9f:57:fa:33:c3:53:a1:11:f4:25:03:fe:
64:6c:64:4c:76:64:72:62:bf:c0:d4:65:74:10:e2:
e5:23:53:5f:8e:69:b3:fb:9b:94:7f:c0:f1:6a:6d:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7C:2E:AC:5E:45:2B:84:58:1C:B6:61:C5:7B:CB:A4:CB:66:FA:E1
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/93wurF5FK4RYHLZhxXvLpMtm-uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:200b::/48
Signature Algorithm: sha256WithRSAEncryption
0e:63:fb:71:98:e3:4a:fa:25:05:9d:c1:71:19:75:d8:3a:37:
ba:c5:c3:f0:ad:f8:c4:9e:75:09:62:76:3a:60:3b:60:40:0c:
83:7d:bd:f3:1d:e1:46:7d:cd:9c:fb:d4:dc:63:70:52:9b:92:
4b:e3:28:a9:c1:e7:63:86:96:9a:07:5b:7f:72:48:1f:34:1c:
12:59:2f:2c:69:d1:09:bb:ce:dd:5d:b0:2c:9a:6c:a6:95:95:
7b:da:6a:ae:1f:20:a4:25:d2:e9:45:88:c4:7e:dc:61:dd:96:
95:af:a5:d4:d6:2e:9a:7d:0b:5e:a3:96:f7:06:ce:7a:f8:eb:
cc:e9:d8:51:f1:a7:02:58:da:53:4e:3b:6a:91:b4:52:7b:86:
63:f3:e8:3a:6c:68:b8:a1:2e:cf:c2:d9:49:53:bc:30:95:d0:
76:19:4c:4d:37:44:1c:47:53:4a:2f:e5:f4:42:4a:18:f5:1f:
af:f5:2d:3d:78:21:03:33:3f:2c:66:5a:67:2b:aa:8b:8c:cb:
98:3b:70:16:5a:04:d9:18:ed:b7:ef:88:d0:2c:4c:7c:b9:c1:
37:62:e3:e4:f4:89:00:2c:9e:71:5c:6b:6d:23:2b:b6:78:10:
4b:65:d1:ea:28:47:9b:68:13:fd:5f:cf:09:f4:d7:34:0b:8d:
4b:f3:2a:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZwUd1OxVFo6QjoPLNcQGmxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwMTMxMTQzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzdjMmVhYzVlNDUyYjg0NTgxY2I2NjFjNTdiY2JhNGNiNjZmYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs73cVOsmxSsmczR2taQrIAvx9xDK
YdPTVygSbvg1DkBqWAncGzpfcmlrMwz5h3Ao50fm0/OkG6CfIsx8zl0JHwxQayEm
lJcqVR+c+9tCj/1qOpK+KNuMcx1xjXTX/P5R5u8v4gdrMyERQYLUZMcVZuTq/LFi
LkxlZiFbCu9sTWeTf72ZyDOiZ//7t2tiEF39tkKFvvsysS70y7hlUG8QsBBk+CUy
pDNSdSsAj6mKS1tEMvn2GIml0ktWeoIcHrTQ6iDY9EHe1C/BFLg60xCSfylmTOuf
V/ozw1OhEfQlA/5kbGRMdmRyYr/A1GV0EOLlI1Nfjmmz+5uUf8Dxam0fzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPd8LqxeRSuEWBy2YcV7y6TLZvrhMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvOTN3dXJGNUZLNFJZSExaaHhYdkxwTXRtLXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQCAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAOY/txmONK+iUFncFxGXXYOje6xcPwrfjEnnUJ
YnY6YDtgQAyDfb3zHeFGfc2c+9TcY3BSm5JL4yipwedjhpaaB1t/ckgfNBwSWS8s
adEJu87dXbAsmmymlZV72mquHyCkJdLpRYjEftxh3ZaVr6XU1i6afQteo5b3Bs56
+OvM6dhR8acCWNpTTjtqkbRSe4Zj8+g6bGi4oS7PwtlJU7wwldB2GUxNN0QcR1NK
L+X0QkoY9R+v9S09eCEDMz8sZlpnK6qLjMuYO3AWWgTZGO2374jQLEx8ucE3YuPk
9IkALJ5xXGttIyu2eBBLZdHqKEebaBP9X88J9Nc0C41L8yr6
-----END CERTIFICATE-----
Generated at Wed Feb 4 13:15:20 2026 by rpki-client