This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9p0TtvhRrkV6sw70wIYGelfig6c.roa
File: 9p0TtvhRrkV6sw70wIYGelfig6c.roa (raw, json)
Hash identifier: HsRqIy7OWjTw1xezXuc17YbotCafjZA9tyWi/7Iq19g=
Subject key identifier: F6:9D:13:B6:F8:51:AE:45:7A:B3:0E:F4:C0:86:06:7A:57:E2:83:A7
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019B7B35F98CD01F7AEBA31AB9F213295B76
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9p0TtvhRrkV6sw70wIYGelfig6c.roa
Signing time: Thu 01 Jan 2026 20:18:13 +0000
ROA not before: Thu 01 Jan 2026 20:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39395
IP address blocks: 176.124.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Jan 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:f9:8c:d0:1f:7a:eb:a3:1a:b9:f2:13:29:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 20:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f69d13b6f851ae457ab30ef4c086067a57e283a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:ab:ea:3f:31:90:a1:5a:c6:86:5a:f6:36:
20:d9:b6:6e:21:ff:c2:56:29:85:a4:71:b2:86:18:
7f:83:d7:49:1b:b0:b4:ea:6f:08:cb:47:7a:0c:74:
d9:4d:80:4d:05:9f:51:4c:34:21:96:3a:a6:ff:5f:
41:06:18:37:dd:0c:86:d0:c4:74:e1:a2:ab:b2:aa:
ba:cd:f5:64:7e:6e:29:70:fa:58:2f:c3:26:e1:98:
6a:f0:01:b6:f3:95:0e:f4:cc:24:cb:96:dc:94:97:
5c:90:c9:c6:8f:0d:d7:9d:67:29:1f:17:ec:03:b3:
2a:8e:f3:86:59:d4:65:91:75:88:a5:e4:ab:72:b2:
74:e0:ab:cd:74:24:88:03:b5:c1:28:63:a4:c0:37:
8c:68:c1:e9:b6:91:02:3e:d4:aa:f0:cb:aa:04:4e:
39:e9:55:3b:08:b5:a4:ba:67:10:67:15:2e:5a:35:
76:45:84:59:4e:70:4c:50:84:10:34:82:2d:b5:4a:
68:e9:0f:81:6e:d4:37:45:e9:be:69:58:4f:49:6a:
5b:57:98:e5:52:9c:d2:1b:a8:a9:3b:6e:96:5c:fe:
d2:d6:01:15:6f:9f:22:17:32:7d:5c:14:13:ff:76:
3d:94:a8:b7:b0:a4:b5:57:5c:38:38:d0:f4:1b:54:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:13:B6:F8:51:AE:45:7A:B3:0E:F4:C0:86:06:7A:57:E2:83:A7
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9p0TtvhRrkV6sw70wIYGelfig6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.35.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9c:4b:06:8b:14:1c:0b:46:f4:ce:91:9a:b0:7a:a3:58:67:
47:4f:e6:06:11:ca:89:76:42:e4:87:a1:f2:03:8c:f0:21:6b:
de:ab:39:a0:62:27:b0:86:d9:b6:3c:03:8f:3d:a3:2e:be:3e:
cf:6a:60:b6:e3:f7:a9:1e:6e:40:7f:84:65:b0:1e:c0:a7:b6:
6c:05:bd:be:28:88:ab:4e:71:e5:51:69:e2:ca:42:97:85:b2:
5d:65:11:58:54:eb:d7:0b:4e:9d:b7:f0:60:fd:50:20:93:c1:
46:b2:79:3d:d9:30:fd:33:84:1f:40:cb:7c:9b:ae:a7:31:de:
d8:7e:97:a8:92:c0:25:f9:d0:ea:3e:7f:9c:3b:73:da:92:21:
fa:00:3b:eb:1a:1f:ba:82:76:c1:1a:94:43:21:e5:6a:c4:40:
40:12:8f:bc:18:05:f8:3c:47:15:4c:14:40:82:d1:2b:d9:2c:
09:b0:8d:15:42:6f:9b:2c:2d:3b:1b:b5:eb:32:ed:62:ff:06:
1a:f7:c0:36:90:5e:0b:38:53:be:cd:7e:80:9b:57:1b:95:a2:
fa:13:3d:db:cc:b9:1b:5e:61:e7:db:9f:b2:80:5a:b7:c3:a0:
cc:e6:1c:6e:64:9f:0f:7b:fc:46:a3:7a:09:a6:80:00:2b:5b:
e3:22:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 13:19:24 2026 by rpki-client