This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/9iYRo82i9hRkUCgmREahdJYxLLE.roa
File: 9iYRo82i9hRkUCgmREahdJYxLLE.roa (raw, json)
Hash identifier: Iaajzt1IR/GS2dadWD8d0yfp4+37Bgf5XHM3q2W76dA=
Subject key identifier: F6:26:11:A3:CD:A2:F6:14:64:50:28:26:44:46:A1:74:96:31:2C:B1
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 019B7DCB677E5FF09CE08625A00ED31CB17F
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/9iYRo82i9hRkUCgmREahdJYxLLE.roa
Signing time: Fri 02 Jan 2026 08:20:40 +0000
ROA not before: Fri 02 Jan 2026 08:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34848
IP address blocks: 89.104.192.0/19 maxlen: 19
185.38.180.0/24 maxlen: 24
185.38.181.0/24 maxlen: 24
185.38.182.0/23 maxlen: 23
193.238.184.0/24 maxlen: 24
193.238.186.0/24 maxlen: 24
193.238.187.0/24 maxlen: 24
195.242.120.0/23 maxlen: 23
195.245.210.0/24 maxlen: 24
2a01:77c0::/36 maxlen: 36
2a01:77c0:6::/48 maxlen: 48
2a01:77c0:1180::/48 maxlen: 48
2a01:77c0:1181::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:67:7e:5f:f0:9c:e0:86:25:a0:0e:d3:1c:b1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Jan 2 08:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f62611a3cda2f614645028264446a17496312cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:b5:05:76:3f:c3:a3:7d:64:e1:5f:80:02:
60:f9:d4:1f:c4:ee:51:48:14:16:c5:14:9a:ae:fe:
ca:49:d9:d1:af:7a:a9:89:63:76:5e:7e:7d:b2:cc:
89:65:2f:8d:3b:bb:ea:00:78:28:a0:08:60:18:e4:
3f:92:ca:b0:d9:19:8b:ec:d8:9a:24:bb:59:70:1f:
b1:80:a5:a0:bc:8e:0b:23:52:8d:e0:39:e0:8e:e3:
ea:f3:0b:47:9e:59:7f:6c:ab:dd:ee:f5:9f:58:76:
c8:6e:2c:b7:80:19:71:99:af:61:2d:8d:17:97:4b:
ae:4d:20:88:30:8b:b0:d7:96:43:35:d6:52:13:ea:
ab:b9:a5:60:cc:77:49:75:fb:3d:16:ae:5d:e7:82:
46:a4:19:8f:fd:54:ac:61:da:f9:8f:4d:8b:2d:96:
d5:47:d3:8d:b9:9a:c1:5c:c8:28:74:a7:b0:2b:b8:
69:f8:82:94:65:7b:ed:42:52:6d:de:07:19:16:a9:
16:91:c7:58:24:0c:fd:c9:42:9c:72:8f:12:47:6b:
63:9a:e3:cd:0a:0c:ec:e9:1a:3b:79:01:e5:31:84:
7a:f8:8d:63:c1:f7:27:ad:3e:2a:39:05:8e:ce:d3:
24:35:24:7d:04:21:92:d0:19:d3:3a:6f:22:69:33:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:11:A3:CD:A2:F6:14:64:50:28:26:44:46:A1:74:96:31:2C:B1
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/9iYRo82i9hRkUCgmREahdJYxLLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.192.0/19
185.38.180.0/22
193.238.184.0/24
193.238.186.0/23
195.242.120.0/23
195.245.210.0/24
IPv6:
2a01:77c0::/36
2a01:77c0:1180::/47
Signature Algorithm: sha256WithRSAEncryption
87:29:88:8d:16:76:b2:17:34:90:57:c7:e9:02:ca:97:80:5b:
93:bc:9f:d5:c0:67:f8:a6:4f:45:e7:6b:8f:76:56:c2:66:93:
61:56:ac:8f:8d:2d:43:85:d8:c5:37:70:5f:34:ca:c3:50:c3:
96:91:48:88:c9:18:cf:05:1c:0e:ce:e7:85:e0:7b:d8:7b:ab:
60:f9:61:0d:d5:e4:d0:f6:fc:8f:9c:2d:08:cf:d2:ac:cd:fa:
0f:6b:d3:bf:92:b9:d3:b3:67:76:aa:c1:7b:b2:1d:f1:05:75:
c3:2c:fc:aa:f6:22:d6:3b:08:b7:8a:08:e9:fb:da:be:01:48:
76:1c:30:a5:8c:79:e1:c8:2f:2a:79:f6:39:67:d7:05:25:8f:
f8:f2:a7:61:b2:46:d8:8d:2e:90:b4:15:3f:eb:ab:62:dc:17:
7e:d6:b9:33:90:af:89:b5:3c:03:49:7b:86:1d:75:95:a4:a5:
94:e9:fd:67:79:27:9c:88:cb:62:b2:83:f5:09:2c:da:93:fb:
b3:4b:59:f6:cf:fe:c0:70:6e:8e:76:dd:d8:b7:e5:14:78:4f:
38:a0:5c:62:a3:e2:a0:ea:5a:98:09:82:1f:b0:47:19:1e:37:
0c:7f:b3:b7:98:7f:44:68:8e:d3:90:bd:20:a8:24:7f:ce:89:
e2:64:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:28 2026 by rpki-client