This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/9jb7Om6miiOrT_ZooT83lO4qkYk.roa
File: 9jb7Om6miiOrT_ZooT83lO4qkYk.roa (raw, json)
Hash identifier: gjvHmuorLDsWHz05bRfIkR6+1mIVFz/jhg8KpqLFtDA=
Subject key identifier: F6:36:FB:3A:6E:A6:8A:23:AB:4F:F6:68:A1:3F:37:94:EE:2A:91:89
Certificate issuer: /CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Certificate serial: 019B7CED0C2E866652D6ED75CE90496B0B72
Authority key identifier: 96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/9jb7Om6miiOrT_ZooT83lO4qkYk.roa
Signing time: Fri 02 Jan 2026 04:17:48 +0000
ROA not before: Fri 02 Jan 2026 04:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48294
IP address blocks: 91.194.46.0/23 maxlen: 24
94.126.208.0/21 maxlen: 24
185.38.244.0/22 maxlen: 24
185.77.56.0/22 maxlen: 22
185.81.244.0/22 maxlen: 24
185.81.252.0/22 maxlen: 24
185.126.248.0/22 maxlen: 22
188.164.224.0/21 maxlen: 24
194.150.200.0/23 maxlen: 24
2a02:5d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:0c:2e:86:66:52:d6:ed:75:ce:90:49:6b:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96773e9cc974301a78b7ee6d994528f1f882e46f
Validity
Not Before: Jan 2 04:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f636fb3a6ea68a23ab4ff668a13f3794ee2a9189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:40:82:dd:9e:81:06:e0:1c:4b:5e:8e:5c:
69:fc:39:2a:26:c3:71:a2:c8:05:b2:49:0f:ae:26:
1f:e6:76:9a:97:ba:16:66:16:d2:db:40:e1:f9:e4:
21:de:8d:28:1a:3d:58:82:3a:b5:33:d4:cb:75:1c:
4b:45:26:46:7a:65:8a:10:73:90:cf:55:aa:07:7b:
ac:51:b1:0c:3c:34:0a:67:c9:9b:1a:08:23:54:9b:
f5:4f:61:07:bb:d6:08:ed:00:ff:3f:f9:c1:98:16:
77:d1:cc:26:7f:5d:3c:3f:7d:15:f5:86:60:be:75:
85:a6:40:b6:81:5d:38:7d:2c:50:fb:9c:b4:5b:69:
51:8b:1e:c3:0b:f6:03:0c:2c:97:a1:36:a4:1d:08:
d4:c0:68:7e:f8:29:c5:f1:a5:ed:5e:4e:68:fb:06:
24:a4:18:f7:21:0f:7f:2d:c8:16:02:4d:a4:bd:67:
de:22:6b:4c:f9:9c:29:0d:14:a3:e8:90:14:ad:06:
6e:da:87:74:01:0a:c6:28:71:cc:1f:3b:50:9a:60:
a7:e2:36:d2:8f:17:8a:d3:49:cb:16:ba:3b:c9:6a:
40:56:13:40:33:95:46:21:b2:25:8a:68:48:8f:9e:
ff:95:78:90:b4:aa:a5:55:d9:25:b6:21:08:af:80:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:FB:3A:6E:A6:8A:23:AB:4F:F6:68:A1:3F:37:94:EE:2A:91:89
X509v3 Authority Key Identifier:
keyid:96:77:3E:9C:C9:74:30:1A:78:B7:EE:6D:99:45:28:F1:F8:82:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnc-nMl0MBp4t-5tmUUo8fiC5G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/9jb7Om6miiOrT_ZooT83lO4qkYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9120cb-0b06-4861-b657-757838670948/1/lnc-nMl0MBp4t-5tmUUo8fiC5G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.46.0/23
94.126.208.0/21
185.38.244.0/22
185.77.56.0/22
185.81.244.0/22
185.81.252.0/22
185.126.248.0/22
188.164.224.0/21
194.150.200.0/23
IPv6:
2a02:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
38:3e:4c:53:11:2b:b6:10:ed:99:80:c5:09:fc:d3:03:fc:f6:
50:b0:2d:58:ab:f4:f6:60:1e:cd:b7:88:04:39:27:ae:cc:36:
8a:2c:a9:56:d9:d6:a4:8c:6b:d9:5c:40:f0:92:85:1c:a5:e3:
72:04:e6:56:50:4f:2c:ab:25:21:b6:44:25:be:b7:44:5b:f8:
bc:6e:e7:62:51:47:12:13:74:74:6a:74:21:af:85:17:d9:07:
46:21:c6:8f:2d:a5:59:22:21:cd:9a:15:a7:db:a3:6d:d3:9c:
64:97:6c:de:f5:5e:f6:41:47:c6:9c:0b:1a:dd:61:ac:1e:4f:
18:de:68:ab:16:ce:b7:09:20:5d:97:48:d2:22:9f:18:1d:d5:
e6:d7:86:b0:b5:42:af:90:c7:34:c9:3e:71:22:38:9d:65:59:
81:a8:02:6b:ec:41:da:4c:34:a3:be:ad:80:89:16:cf:ca:e7:
2f:c7:8a:e2:c9:26:9e:ad:78:64:b7:d1:64:1e:ec:8b:77:73:
2b:50:a3:ef:6a:09:93:41:d4:04:6c:6e:0a:50:55:42:39:b6:
8d:4f:22:90:a3:fe:c1:a0:83:b5:f4:ec:08:6a:c8:82:32:10:
32:c8:13:56:db:12:19:ab:94:de:d3:14:2f:e0:65:48:e4:05:
2a:57:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:45 2026 by rpki-client