This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/9jINeFumL336-QR3Wj0mntR5_cM.roa
File: 9jINeFumL336-QR3Wj0mntR5_cM.roa (raw, json)
Hash identifier: wVCs9VOH0OKrniCbWjEGE6eJoair0ggue+MyLd2THDQ=
Subject key identifier: F6:32:0D:78:5B:A6:2F:7D:FA:F9:04:77:5A:3D:26:9E:D4:79:FD:C3
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019B7CED3139C2A327C390EEE640430EDC3D
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/9jINeFumL336-QR3Wj0mntR5_cM.roa
Signing time: Fri 02 Jan 2026 04:17:58 +0000
ROA not before: Fri 02 Jan 2026 04:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199405
IP address blocks: 185.5.224.0/22 maxlen: 22
2a03:840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:31:39:c2:a3:27:c3:90:ee:e6:40:43:0e:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Jan 2 04:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6320d785ba62f7dfaf904775a3d269ed479fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:0f:9f:56:0d:b4:45:02:42:ea:75:e3:aa:
ae:c7:aa:c3:c0:36:9f:1d:7e:8f:04:aa:b1:b7:3e:
f5:da:69:5e:75:04:d2:3e:a2:06:6e:d0:4c:50:06:
34:7a:82:19:c8:74:5d:91:3b:80:cc:69:ab:32:26:
df:b3:1b:f0:3a:f5:28:fc:0d:eb:dd:47:92:f2:0f:
6e:eb:bd:ae:c6:70:0c:d0:7f:02:b0:61:14:15:c1:
5b:5d:4d:b2:8f:79:ba:d8:dd:9e:f8:f8:6c:b8:32:
9f:52:1a:5f:6f:11:25:b0:56:6e:bd:74:d7:41:1c:
17:82:fc:83:c4:54:63:10:54:6a:b9:5c:2e:ef:ba:
9d:88:42:92:05:ca:a7:e4:12:74:6a:f1:d4:be:c6:
ca:52:46:b3:36:e9:c3:23:54:1a:b0:59:bb:e3:7b:
42:f8:ec:64:ee:b7:80:9f:af:59:7c:15:74:53:20:
74:75:9c:ff:35:73:55:82:68:67:40:50:c1:dd:af:
8d:e4:0b:cc:fd:8b:6f:63:72:45:c8:87:5e:9a:df:
c3:a7:7f:29:6c:56:83:84:e8:db:c7:af:79:5a:6a:
06:32:59:5a:7e:63:6b:ea:1a:e4:b9:f3:6f:a4:a9:
05:45:e6:82:df:77:a5:06:58:ab:03:e6:b3:2b:74:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:0D:78:5B:A6:2F:7D:FA:F9:04:77:5A:3D:26:9E:D4:79:FD:C3
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/9jINeFumL336-QR3Wj0mntR5_cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.224.0/22
IPv6:
2a03:840::/32
Signature Algorithm: sha256WithRSAEncryption
9c:82:f9:c2:07:fb:d1:5b:e7:75:c4:61:2d:bf:e5:bc:2d:cf:
0c:70:12:be:45:67:e6:98:43:5d:6c:10:29:9e:ba:80:7c:c3:
15:e9:30:3c:57:c2:58:9b:84:d1:56:ff:dc:cc:70:4a:11:23:
e1:25:67:b7:a3:38:a5:0c:24:74:b4:c9:08:14:67:ec:2c:f8:
6c:01:a2:8a:69:68:a2:75:39:d8:fd:3e:ca:d2:55:14:32:52:
76:51:66:d5:4d:8e:dd:55:d7:f2:80:a5:26:24:ba:6d:22:23:
18:6c:45:9f:8e:65:f0:ce:21:22:ba:2d:3e:af:a5:8f:61:db:
c4:f8:94:bb:36:04:2b:4a:7e:02:39:f0:89:4a:54:13:26:52:
a2:fd:1b:01:74:aa:e2:22:ae:1d:bd:54:79:ea:c8:79:4d:73:
8d:e5:5d:43:1e:be:06:ac:6d:11:6d:62:cc:0c:c4:c1:10:fe:
95:a6:c2:ae:89:ed:24:22:23:69:88:87:2f:85:ac:ed:25:41:
f1:c6:24:88:2a:83:04:ea:3e:09:35:0d:c3:b0:1f:8f:ec:32:
33:a3:90:65:60:05:2f:8f:55:a7:9f:7d:58:05:15:03:49:fb:
be:45:e8:2e:8c:f1:c3:89:9c:07:47:31:a2:02:d1:e8:32:cd:
16:f0:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:47 2026 by rpki-client