This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa
File: rZ9kBE893IiediPl8JVKgVoCtwo.roa (raw, json)
Hash identifier: BGuq9RWJYP25W0Z07Vz7NQitArh9VRZNLo6+TEhYgkY=
Subject key identifier: AD:9F:64:04:4F:3D:DC:88:9E:76:23:E5:F0:95:4A:81:5A:02:B7:0A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019B7F15E3784B2FBD60FB3D60988F5FBC69
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa
Signing time: Fri 02 Jan 2026 14:21:39 +0000
ROA not before: Fri 02 Jan 2026 14:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47400
IP address blocks: 195.177.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Jan 2026 14:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:e3:78:4b:2f:bd:60:fb:3d:60:98:8f:5f:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 14:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad9f64044f3ddc889e7623e5f0954a815a02b70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:ed:85:e5:e7:89:6b:85:c1:c6:43:99:84:
90:14:1f:2e:63:52:85:b5:5e:2f:92:c8:d9:97:50:
e4:53:28:1b:85:1b:fe:28:07:f1:b7:a8:ff:a0:34:
35:bc:89:02:ed:8c:e1:a8:f4:c6:41:f4:55:55:ee:
74:ee:b3:61:6f:db:94:a7:a1:d7:1c:8e:ec:bf:0d:
32:e5:c5:71:eb:9c:68:cd:4b:c0:6c:6e:99:aa:df:
65:04:41:2e:e1:8f:9c:02:3d:a0:fc:ec:dd:30:38:
63:82:e3:d5:b4:ff:fa:38:9b:9f:1b:f2:ff:c6:19:
e3:c5:bc:17:90:25:82:df:e8:57:15:c2:d0:36:94:
49:93:8f:e8:86:f5:1d:ed:85:e4:19:3f:7f:2e:02:
b4:a4:16:9b:30:f9:53:c8:b9:0a:f4:90:22:99:0c:
c4:97:c9:b2:c8:6d:06:54:8a:c5:bc:16:9f:4e:43:
46:7b:bc:a2:14:8c:69:1f:98:aa:0c:69:3a:09:9e:
18:af:a6:62:c1:d7:33:7c:75:7a:8e:5b:b8:6a:81:
c0:85:dd:66:1a:98:f4:41:53:8e:50:dc:dd:d2:8a:
5e:e3:4b:8b:79:1c:5a:23:93:d8:58:fa:51:47:78:
b4:81:fe:50:cf:44:f4:2d:10:c3:f5:19:ea:ea:82:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:64:04:4F:3D:DC:88:9E:76:23:E5:F0:95:4A:81:5A:02:B7:0A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:65:3b:a5:c2:10:50:1d:97:b3:ec:bd:2c:a9:2d:27:72:c7:
83:10:da:6a:e2:a2:20:c5:57:2b:6d:27:44:69:13:df:fc:6c:
78:ea:de:16:d9:50:af:05:e1:32:ce:01:9d:81:48:90:dd:4c:
2a:e3:4c:73:9b:f1:a9:ba:cd:ce:08:86:b2:6b:fa:b8:59:aa:
b5:3e:db:97:16:e8:2d:bc:d2:6f:7e:67:92:12:62:b2:6c:10:
09:37:47:eb:e2:1e:18:65:8b:d4:da:8b:78:ac:6c:36:ab:f4:
c6:79:d3:7c:df:c1:c2:89:c0:f6:b7:8d:8b:a8:a9:09:5b:1b:
e4:c5:af:53:17:9f:49:ea:9a:8f:b4:df:68:13:83:56:6e:d7:
c7:b1:78:5f:cf:10:4d:30:29:6d:b2:eb:cc:f5:26:d0:17:5b:
17:9e:a8:26:c2:38:11:b3:43:5a:c2:77:a7:24:5c:b9:7c:92:
24:64:66:6f:e5:0b:f1:60:c6:47:30:83:26:8a:38:20:16:66:
38:b3:96:3a:68:c9:20:70:ef:a9:fd:0d:ba:ad:7f:32:47:08:
fb:70:52:be:56:a5:0e:07:23:bc:65:88:93:1f:7c:d3:3b:82:
73:bf:21:21:49:06:f3:d9:06:2f:09:8a:d3:3d:50:47:c2:30:
25:73:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 20:51:31 2026 by rpki-client