This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa
File: SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (raw, json)
Hash identifier: hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=
Subject key identifier: 48:9F:31:1D:EE:7A:66:37:C2:C5:34:65:3C:B5:EF:EE:A1:59:ED:2F
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019B78355305D7CA093B41A4B646983356F7
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa
Signing time: Thu 01 Jan 2026 06:18:39 +0000
ROA not before: Thu 01 Jan 2026 06:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207131
IP address blocks: 93.95.28.0/24 maxlen: 24
2a12:af40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:53:05:d7:ca:09:3b:41:a4:b6:46:98:33:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Jan 1 06:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=489f311dee7a6637c2c534653cb5efeea159ed2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:ed:26:6c:1a:14:9e:05:ce:36:ce:27:05:
b3:ca:36:a2:1d:a5:cc:71:15:c5:75:79:e8:a9:44:
e8:7d:1a:12:66:86:3d:ac:d2:f8:71:bb:44:48:d5:
f4:b0:c7:8c:5b:39:61:8b:ad:37:c9:6d:65:18:8b:
46:1f:88:ed:7f:5d:dc:c6:91:bd:8f:15:8a:d4:cd:
a3:df:f9:cd:a3:eb:b4:77:5a:88:5b:ef:e9:6f:0e:
5a:e5:2e:63:01:fc:4b:5a:26:c5:0e:8e:5c:46:00:
47:1c:f4:47:8c:2e:46:fc:9a:3d:a4:72:37:52:7f:
1e:ad:11:93:7e:ac:87:bd:79:50:39:bf:ff:d8:5b:
33:ec:dc:ff:df:f5:93:2d:0e:27:51:cc:c7:e4:8c:
00:86:34:dd:4d:65:39:c2:a2:82:b2:ca:64:40:2f:
77:92:a1:04:8f:56:8d:d5:87:7d:9d:83:ec:8e:9d:
5a:ef:5b:a6:95:2c:29:f1:4e:7e:cf:22:0a:aa:3d:
20:73:82:8d:df:61:48:45:7d:1b:ee:51:88:0d:c3:
cc:39:6a:b1:7b:eb:81:ce:6f:12:2e:43:2c:da:de:
bd:b5:f3:f3:f6:46:55:33:83:95:8f:fd:b2:2d:06:
b5:6b:9f:e3:7a:f5:c5:ae:7b:da:e9:d9:df:39:06:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:31:1D:EE:7A:66:37:C2:C5:34:65:3C:B5:EF:EE:A1:59:ED:2F
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.28.0/24
IPv6:
2a12:af40::/29
Signature Algorithm: sha256WithRSAEncryption
41:79:6d:3f:fb:7e:2d:a2:4b:1d:cd:96:17:9d:9e:6c:fd:45:
a2:0e:04:7c:2f:bc:3d:20:2a:ce:0b:6f:7f:93:a6:ed:95:9e:
6f:99:b0:7d:11:bd:e3:7b:95:d1:21:8d:2e:17:10:d3:32:c7:
23:6f:70:48:b1:86:25:e2:d4:0a:23:88:82:b8:aa:ff:ff:a1:
07:c5:00:fd:56:6c:d2:bd:6a:f1:db:2e:54:e7:e3:f8:b1:4c:
bd:5c:f3:c5:2b:07:56:ac:4d:ed:90:af:ce:dd:b8:a7:63:e7:
39:05:96:d7:fc:89:06:be:b7:3e:dc:1b:50:68:74:00:a4:04:
c4:04:c8:7f:c5:34:f4:89:7e:d0:58:d9:54:2e:f9:7d:c2:93:
78:ef:8f:38:00:27:8d:78:6c:3f:a2:78:b2:4b:06:da:e8:04:
d9:ee:bc:b3:c0:3a:a5:91:cc:82:a3:62:f5:f3:02:dd:5d:56:
04:d0:cb:d0:bc:9d:15:59:db:63:5d:51:98:79:bf:e7:f8:01:
b9:1a:7f:c0:f5:b7:0d:c1:61:2b:72:48:b5:8d:da:16:42:9a:
fd:e3:a2:ff:f7:f3:7f:b4:07:fa:6f:ae:56:33:ec:71:91:a0:
c5:05:5b:f0:52:89:23:60:f8:0d:41:36:ba:28:1f:24:49:66:
e3:9f:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:26 2026 by rpki-client