This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa
File: V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa (raw, json)
Hash identifier: yOtT6S4+DTyzwOitbl09n9UxGrPHDfj9Iqqxk3uAElM=
Subject key identifier: 57:42:9C:FB:D8:DA:18:6B:5E:6E:B1:E9:4D:22:7D:98:6A:C4:2A:FD
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019B7EA6F45CE23A17CF46897EEBC85CA8E4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa
Signing time: Fri 02 Jan 2026 12:20:29 +0000
ROA not before: Fri 02 Jan 2026 12:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208717
IP address blocks: 2a0e:46c3:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:f4:5c:e2:3a:17:cf:46:89:7e:eb:c8:5c:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 12:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57429cfbd8da186b5e6eb1e94d227d986ac42afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:a8:27:76:1e:d5:12:db:3f:2b:b0:1a:cb:
1e:06:af:78:0f:8e:01:27:2b:84:f7:93:ae:50:40:
ae:cb:bf:5c:b0:8e:d6:94:61:68:4b:05:d7:23:0b:
3b:5b:b6:d1:8e:38:cb:3b:69:ad:e0:fe:13:29:c8:
f2:f3:79:90:c9:2a:e7:c0:31:e3:4a:aa:72:52:59:
c4:24:a1:62:19:31:88:1a:4a:a0:0d:00:26:60:8b:
28:e7:57:74:ad:6f:a8:c4:b0:d2:4c:32:a9:9d:b9:
51:0b:af:0a:bd:14:81:da:7f:8d:b6:c1:ad:1d:71:
44:18:dc:67:b0:2a:0d:2f:76:97:6c:d7:a3:e0:c8:
d7:2c:be:fb:30:4e:17:7d:14:fd:b9:43:3b:0f:f6:
42:34:38:ed:e2:57:32:dd:d6:8b:ff:8e:3a:93:ac:
d8:0c:e8:cc:1b:fa:3b:3b:19:ca:ad:77:80:cd:2c:
2c:b9:f2:21:31:7b:df:00:e9:1e:22:36:f7:08:d5:
f8:4f:7c:e8:a9:8e:63:9a:c3:f0:70:bd:1e:52:1e:
87:be:0f:2e:d6:60:63:39:36:9e:24:80:48:00:6a:
c8:0d:a3:85:c1:8a:e5:7c:49:9f:b5:35:7e:20:6e:
e4:f4:7e:e4:a8:3f:1e:f8:5d:a2:b8:33:f6:9d:00:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:9C:FB:D8:DA:18:6B:5E:6E:B1:E9:4D:22:7D:98:6A:C4:2A:FD
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c3:200::/40
Signature Algorithm: sha256WithRSAEncryption
a2:d1:01:6d:ee:97:99:b2:2f:4f:f7:5b:53:fa:32:7a:23:3b:
19:6d:e1:92:11:dd:79:a1:57:fb:6b:89:24:2b:c0:fc:59:fd:
2b:3d:f3:9d:6c:ad:ac:0c:f8:3b:41:0d:68:d2:e4:fa:5d:bc:
41:b2:6f:15:89:1e:f8:b3:3b:60:6c:3d:0e:95:f4:48:c8:e0:
42:66:5d:2a:43:51:63:3f:c1:6d:fb:45:13:12:52:93:89:5a:
59:85:7d:08:c7:01:e6:19:e1:6a:5a:54:30:eb:98:73:73:83:
bc:a1:7b:40:fa:2e:cd:ce:c4:3b:f9:72:72:50:c5:c1:51:a1:
cc:4b:b8:b5:48:e2:20:da:d6:5a:e2:d5:27:c1:5f:fe:b9:55:
81:f1:cc:dd:00:60:3f:9c:f4:d5:11:e8:15:28:f5:87:41:d4:
82:06:e4:55:5e:e4:38:91:55:d9:bd:40:97:f6:43:9d:e9:a4:
f2:83:5f:b3:0d:ae:8c:71:4b:49:2e:28:7c:36:d8:9d:e4:36:
49:cb:37:e7:31:da:ca:a0:db:17:14:de:45:5c:c2:89:8f:f7:
0c:82:d1:88:81:70:d1:31:d2:92:56:9d:5a:40:cb:f3:b3:c4:
ec:ce:e6:d3:09:cf:38:a3:00:97:60:69:ba:fb:1f:2a:37:17:
38:16:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:05:19 2026 by rpki-client