This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa
File: Rmp_9MM7V4RosyhvB1k5klKEX-U.roa (raw, json)
Hash identifier: WJrFVR/skZVXQabPx1ss/hhLdnIXcPvdR9wwm+o94z8=
Subject key identifier: 46:6A:7F:F4:C3:3B:57:84:68:B3:28:6F:07:59:39:92:52:84:5F:E5
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 019B7CED8595B2B81993F684CD0AC95AB5B2
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa
Signing time: Fri 02 Jan 2026 04:18:19 +0000
ROA not before: Fri 02 Jan 2026 04:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212435
IP address blocks: 193.163.76.0/24 maxlen: 24
2a12:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:85:95:b2:b8:19:93:f6:84:cd:0a:c9:5a:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jan 2 04:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=466a7ff4c33b578468b3286f0759399252845fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:cf:8f:ec:c9:5b:a8:13:3f:89:5e:be:cd:
23:50:d5:1f:1e:33:47:bb:01:aa:99:e1:53:18:42:
03:24:ed:59:ea:c2:2a:b3:0c:c9:08:87:72:ef:62:
d4:6a:6a:d5:3b:b6:c8:82:fe:29:a4:ce:34:c3:da:
21:d3:46:2c:11:e2:89:5d:90:a5:38:5d:0b:01:cd:
f6:8b:ac:50:bd:35:0a:e4:b7:90:77:ab:33:3e:24:
fe:2e:21:4b:74:20:82:8d:55:97:08:89:41:f0:0c:
42:9e:07:af:af:63:e8:49:57:67:ee:9b:34:a6:e5:
1b:25:e1:b0:1b:28:c4:c5:da:d3:c9:4c:85:da:02:
f9:d1:c4:ee:a9:95:0e:c4:41:21:db:3d:3d:1b:5c:
c8:83:14:32:05:13:d2:d3:01:07:b2:31:50:9a:d6:
3b:01:16:58:a1:f7:22:83:d7:be:3f:a5:57:95:b2:
00:e3:c4:fb:8c:b0:f5:ad:0e:e2:80:9d:90:fd:bd:
bf:04:1c:0f:aa:57:7a:2c:db:09:c0:34:58:fe:e4:
06:b2:eb:87:57:92:e4:0d:65:94:3f:7a:ee:0b:c6:
f8:33:aa:0a:ca:b1:c5:48:29:e1:02:ce:6b:bd:69:
b7:2e:17:ec:e1:ef:6b:12:3f:35:63:27:2a:ce:1c:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:7F:F4:C3:3B:57:84:68:B3:28:6F:07:59:39:92:52:84:5F:E5
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/Rmp_9MM7V4RosyhvB1k5klKEX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.76.0/24
IPv6:
2a12:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
af:3a:56:f3:33:11:34:6d:f4:2c:6a:71:46:6c:2e:9a:d6:48:
73:55:72:bc:96:f2:07:ca:1d:03:2c:33:8c:b6:df:16:c2:4d:
9c:c3:ec:a8:64:d9:38:70:18:6d:53:62:94:17:de:12:4d:3c:
1c:8f:e5:eb:d2:f4:31:a1:f2:db:27:dc:b6:e2:37:59:82:22:
1b:31:8a:a0:00:7d:49:eb:0a:1d:c4:70:b3:d4:be:71:f1:10:
87:78:20:ed:2c:f5:8c:55:8d:4b:b2:4f:4d:10:28:52:76:ba:
fc:fd:33:dc:c1:54:2f:8b:82:7f:59:c0:7c:98:63:fb:0e:5a:
96:3b:09:f6:b8:18:d2:6a:36:f8:46:09:1e:9f:a7:4a:1b:4a:
93:17:3c:ca:83:70:4f:11:c4:68:b6:47:83:2a:6b:68:5b:04:
c2:03:2d:88:6f:39:2d:71:61:1e:b0:5d:a0:a4:2a:80:92:07:
d2:6f:92:e0:b1:34:7b:9b:3d:3a:ca:c9:81:82:20:e7:2e:b0:
c9:bc:ef:bb:cf:d3:b8:ea:04:80:62:3a:d6:8c:39:25:48:93:
dd:34:c9:b0:ba:a3:e8:71:0a:18:c8:e8:2e:82:b2:f8:12:9b:
98:3b:92:03:5d:06:54:e0:34:e5:f7:fe:a0:47:88:be:77:f4:
65:5b:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:34:52 2026 by rpki-client