This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa
File: vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (raw, json)
Hash identifier: o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=
Subject key identifier: BD:6E:3A:4C:9E:6E:CD:9E:B3:A0:C1:16:77:A7:C5:5D:29:25:27:4C
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019B7C80AC57175D5738082ABD37E942EB7F
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa
Signing time: Fri 02 Jan 2026 02:19:26 +0000
ROA not before: Fri 02 Jan 2026 02:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48083
IP address blocks: 94.127.96.0/21 maxlen: 24
193.53.99.0/24 maxlen: 24
193.53.100.0/24 maxlen: 24
193.116.128.0/19 maxlen: 24
193.116.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:ac:57:17:5d:57:38:08:2a:bd:37:e9:42:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Jan 2 02:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd6e3a4c9e6ecd9eb3a0c11677a7c55d2925274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:18:ec:2f:0a:8f:e3:6f:7c:3f:09:eb:53:
e6:16:1c:bf:70:58:eb:14:54:35:01:69:88:ca:0d:
95:b1:a7:14:ed:de:12:5f:b3:35:63:03:b2:b4:e8:
f6:de:96:de:17:68:9b:51:0d:ea:b4:8c:36:d3:91:
e9:35:0a:0d:fb:89:d8:49:f3:b4:52:b7:fb:bf:80:
5e:99:7f:5d:14:33:77:34:1a:ae:ef:f4:44:68:63:
a6:db:63:67:99:5d:8c:24:9d:d6:88:3e:b2:67:7a:
60:0a:f4:66:dd:ba:08:de:6b:29:63:fc:50:c9:a1:
7b:c4:12:8d:23:87:16:47:cc:89:e1:58:c8:81:78:
f6:55:1e:79:11:3e:53:ff:30:d0:1b:71:eb:1b:1b:
92:3e:6e:48:be:03:9e:30:10:fc:80:76:ef:30:15:
cb:90:63:8b:1b:cd:78:36:ce:d2:e9:38:25:c3:80:
be:1f:2b:cc:61:40:31:67:03:e1:db:8f:c8:e1:b7:
2c:8b:41:af:b9:6e:24:d4:b9:df:f5:2c:7e:3f:c7:
99:50:d7:02:d3:d5:86:a7:3e:07:29:09:12:11:a6:
93:be:ca:e3:0c:0f:18:e7:3b:71:76:14:52:34:81:
24:35:49:e3:8a:25:ea:8d:3f:a4:22:71:81:44:1e:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:3A:4C:9E:6E:CD:9E:B3:A0:C1:16:77:A7:C5:5D:29:25:27:4C
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.96.0/21
193.53.99.0-193.53.100.255
193.116.128.0/18
Signature Algorithm: sha256WithRSAEncryption
99:dc:85:8c:67:63:19:35:6c:fd:a2:64:e6:85:a4:3d:10:20:
c7:cd:4e:69:e9:a9:ed:61:6d:f7:79:9a:62:f6:92:c6:64:d7:
5f:c5:83:21:26:14:3f:4e:92:31:dd:01:24:3c:94:6b:7e:8c:
02:44:db:cc:e1:24:e9:4a:8d:1d:df:b1:ca:dd:ed:73:63:19:
d0:28:0c:91:bd:a8:cc:7b:bf:87:55:0a:cd:9c:e6:02:ee:b9:
1a:6e:6a:32:83:e5:52:41:f9:80:93:9d:6a:ff:55:27:c0:51:
b4:44:5e:ec:66:49:29:fe:98:88:73:b0:11:a8:d8:27:98:18:
dc:e8:52:07:e9:38:f7:d0:bd:a5:d6:87:92:0f:f2:d8:f6:15:
00:16:74:56:f5:e0:a7:66:f9:b8:e1:34:4f:31:b7:cd:13:4e:
9b:c5:02:a9:29:f7:a0:2b:4f:24:40:ac:00:14:51:f9:e2:2b:
11:0f:b1:cf:3f:ac:3d:e3:23:f5:50:51:52:40:6f:c5:00:02:
e2:0f:8d:d5:9e:ed:30:da:8e:88:2d:c9:4c:28:90:70:17:1c:
83:2f:4e:59:54:61:41:21:5e:93:a0:7e:72:de:48:6e:cc:06:
b2:fc:53:8f:b0:dc:51:70:2c:19:47:e5:3f:e6:9c:6c:61:90:
71:1d:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:17 2026 by rpki-client