This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/n0ruOGbeVvXhGIrsWayjSXVW_as.roa
File: n0ruOGbeVvXhGIrsWayjSXVW_as.roa (raw, json)
Hash identifier: 39LLK08KXO2vyHtc1/PHu8DzL0QhDBg9EmDMQZMx3yU=
Subject key identifier: 9F:4A:EE:38:66:DE:56:F5:E1:18:8A:EC:59:AC:A3:49:75:56:FD:AB
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019B7A5ACF3270012989D5FA4E194BC40601
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/n0ruOGbeVvXhGIrsWayjSXVW_as.roa
Signing time: Thu 01 Jan 2026 16:18:50 +0000
ROA not before: Thu 01 Jan 2026 16:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203946
IP address blocks: 185.117.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:cf:32:70:01:29:89:d5:fa:4e:19:4b:c4:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jan 1 16:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f4aee3866de56f5e1188aec59aca3497556fdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:92:45:3a:96:c0:a1:5c:d1:e2:6e:3c:8c:
07:31:0c:25:cc:60:0a:f4:54:9a:e1:ec:26:91:e4:
c2:07:03:dd:45:7d:d5:c8:94:87:d1:cb:1b:60:3d:
3c:de:f0:e7:fb:30:71:3a:c1:b8:d8:f4:95:b3:28:
8f:ee:7a:b3:0e:fb:cf:c0:b1:94:15:90:df:b9:63:
1d:c5:87:20:2d:b3:14:ef:57:3f:01:2b:c8:f7:c9:
ce:1c:b9:87:4c:ba:57:44:27:d9:ef:ac:65:29:e3:
d9:6c:ff:44:cd:28:7b:cc:ff:33:9a:91:6c:5b:4f:
86:dc:d2:c9:5f:3c:23:99:1a:92:8a:aa:5b:97:e0:
cb:5d:56:78:2b:ad:10:41:84:25:4c:dc:40:03:01:
a4:70:96:fb:4f:c9:dd:11:c2:c8:f8:d7:12:18:c7:
c0:6f:06:b9:14:51:10:e3:d0:e6:4b:54:96:7d:5a:
83:3c:e0:a4:29:43:91:06:63:35:dc:e6:ac:97:56:
3a:41:3d:e3:09:c7:eb:66:67:27:dd:2b:24:7c:0f:
b7:5a:aa:a5:86:21:38:d8:4b:05:50:1a:77:0d:c1:
37:1b:55:da:a2:91:73:58:de:8e:e9:f9:5f:5d:7f:
ed:71:fa:6a:d7:f2:fd:13:18:66:40:bf:9e:5b:37:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:EE:38:66:DE:56:F5:E1:18:8A:EC:59:AC:A3:49:75:56:FD:AB
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/n0ruOGbeVvXhGIrsWayjSXVW_as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.133.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:79:04:b2:8e:08:fb:a2:d3:9f:b0:86:99:c6:6b:71:34:a6:
bb:47:31:11:45:ca:ab:5f:63:93:6b:e9:00:21:76:fc:9b:cf:
d1:e0:eb:8d:c7:79:f1:3f:6b:d8:48:8f:85:35:df:e4:5f:6f:
5e:bc:f8:d8:22:c1:8d:84:a6:38:4e:70:1e:c7:f7:32:e5:ee:
1b:78:ff:0d:77:9b:28:e9:8d:d7:5d:6f:e2:e7:d9:5c:0c:57:
d6:73:2b:1d:90:73:b1:0a:3c:99:51:14:6d:64:67:69:93:e5:
c7:88:64:77:7f:f1:52:fa:e6:e6:71:c7:08:44:72:12:6e:d9:
a0:c1:53:91:81:e0:00:79:6e:65:65:5e:2c:99:87:1b:1a:52:
9d:7b:41:a1:28:31:cb:f6:f8:a8:4c:90:95:7e:b6:56:9f:d0:
60:fd:c7:a1:ab:58:b7:5f:db:86:8c:3f:00:e8:00:85:1c:05:
83:e9:bc:85:58:bf:97:ce:6f:bd:02:0a:b2:a2:bc:94:30:e4:
f5:82:02:34:d5:e7:98:a4:e1:69:9e:58:d9:38:4c:72:ad:60:
c5:76:65:20:01:03:be:00:b1:35:b1:34:84:e8:83:e9:27:1e:
26:ca:1d:33:31:0d:d5:85:02:e4:92:7b:fb:ef:f7:3a:d8:7e:
70:76:ca:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6Ws8ycAEpidX6ThlLxAYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjRhZWUzODY2ZGU1NmY1ZTExODhhZWM1OWFjYTM0OTc1NTZmZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fGSRTqWwKFc0eJuPIwHMQwlzGAK
9FSa4ewmkeTCBwPdRX3VyJSH0csbYD083vDn+zBxOsG42PSVsyiP7nqzDvvPwLGU
FZDfuWMdxYcgLbMU71c/ASvI98nOHLmHTLpXRCfZ76xlKePZbP9EzSh7zP8zmpFs
W0+G3NLJXzwjmRqSiqpbl+DLXVZ4K60QQYQlTNxAAwGkcJb7T8ndEcLI+NcSGMfA
bwa5FFEQ49DmS1SWfVqDPOCkKUORBmM13Oasl1Y6QT3jCcfrZmcn3SskfA+3Wqql
hiE42EsFUBp3DcE3G1XaopFzWN6O6flfXX/tcfpq1/L9ExhmQL+eWzfyhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9K7jhm3lb14RiK7Fmso0l1Vv2rMB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvbjBydU9HYmVWdlhoR0lyc1dheWpTWFZXX2FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXWFMA0G
CSqGSIb3DQEBCwUAA4IBAQC/eQSyjgj7otOfsIaZxmtxNKa7RzERRcqrX2OTa+kA
IXb8m8/R4OuNx3nxP2vYSI+FNd/kX29evPjYIsGNhKY4TnAex/cy5e4beP8Nd5so
6Y3XXW/i59lcDFfWcysdkHOxCjyZURRtZGdpk+XHiGR3f/FS+ubmcccIRHISbtmg
wVORgeAAeW5lZV4smYcbGlKde0GhKDHL9vioTJCVfrZWn9Bg/cehq1i3X9uGjD8A
6ACFHAWD6byFWL+Xzm+9AgqyoryUMOT1ggI01eeYpOFpnljZOExyrWDFdmUgAQO+
ALE1sTSE6IPpJx4myh0zMQ3VhQLkknv77/c62H5wdspW
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:46:49 2026 by rpki-client