This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa
File: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (raw, json)
Hash identifier: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=
Subject key identifier: A7:DB:51:FD:83:C8:B2:78:DC:49:A0:9F:43:3A:AD:D2:71:18:AE:B3
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 019B7EA72B53DDCFB446290B0A795C207715
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa
Signing time: Fri 02 Jan 2026 12:20:43 +0000
ROA not before: Fri 02 Jan 2026 12:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8351
IP address blocks: 194.59.16.0/23 maxlen: 24
195.98.192.0/19 maxlen: 24
195.98.196.0/24 maxlen: 24
195.98.217.0/24 maxlen: 24
213.254.32.0/19 maxlen: 24
213.254.33.0/24 maxlen: 24
213.254.36.0/24 maxlen: 24
213.254.55.0/24 maxlen: 24
213.254.56.0/23 maxlen: 23
213.254.58.0/24 maxlen: 24
213.254.60.0/24 maxlen: 24
213.254.63.0/24 maxlen: 24
2a02:320::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:2b:53:dd:cf:b4:46:29:0b:0a:79:5c:20:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Jan 2 12:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7db51fd83c8b278dc49a09f433aadd27118aeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:cd:d2:87:dc:91:6e:a4:aa:3a:5b:36:97:
85:08:b8:50:2d:28:9e:c1:8c:0a:a7:e3:f8:e8:a7:
fb:b0:ed:5f:d9:a0:ba:b1:79:ea:46:5d:61:af:8e:
db:2c:92:4f:6d:40:8b:d6:d6:a8:6b:d6:2c:5e:ab:
5b:9a:3c:85:e4:5d:60:73:16:61:6f:de:dc:7e:06:
87:f7:27:0d:00:d7:38:8d:81:bf:d7:af:be:60:21:
f0:72:04:da:ad:c9:16:b2:2b:03:73:b9:a5:6d:ae:
fa:05:1d:c8:21:34:cf:27:84:1e:5c:ab:43:e5:11:
3e:bb:db:1d:aa:d8:40:d9:1f:4e:98:85:87:64:d1:
0c:5f:a2:65:85:65:fa:e3:7d:e5:c1:1a:a4:4f:cd:
b6:00:9b:46:82:02:fc:2f:63:1e:52:8d:0c:5a:bc:
82:f6:da:b2:9f:fd:5c:46:bb:60:8d:ad:7d:41:0a:
5d:20:0c:53:aa:05:c7:d2:c1:ff:38:7c:60:10:82:
39:0e:55:2b:09:3f:1d:47:d8:3d:c3:47:0e:88:bd:
35:8f:6f:f5:c4:62:1a:b0:59:dd:80:f5:ce:c3:8c:
11:cc:1b:ff:80:ff:de:fd:cd:54:01:2c:d0:0b:a9:
06:88:82:18:ca:f5:8f:7a:06:37:cd:fa:d8:6d:cc:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:51:FD:83:C8:B2:78:DC:49:A0:9F:43:3A:AD:D2:71:18:AE:B3
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.16.0/23
195.98.192.0/19
213.254.32.0/19
IPv6:
2a02:320::/29
Signature Algorithm: sha256WithRSAEncryption
88:b1:44:8d:16:bc:43:4d:6c:8f:be:a4:d3:a8:c6:a2:48:f8:
00:2b:08:63:f3:f3:e8:45:09:35:cc:12:e9:bc:2e:4b:6a:ea:
fe:0b:52:15:d2:3c:8b:b6:24:4d:93:ca:61:eb:8c:f1:9d:84:
ca:f3:15:38:b9:57:71:ae:71:a2:b8:3d:c9:af:b1:98:bd:13:
f5:4f:06:0e:db:eb:ca:82:eb:13:ff:1d:73:1d:5e:dc:63:88:
70:1b:51:3e:d9:6d:7f:91:82:7f:b5:f6:fa:24:e9:52:17:5b:
26:e2:0e:66:13:22:2c:91:09:eb:cd:6f:a5:3b:79:ef:fc:4f:
8c:2f:48:d8:74:5f:3b:4c:fb:22:cd:fb:f5:e2:b3:a3:b6:1a:
19:73:ce:ef:0f:f4:bf:79:75:22:0b:21:43:c8:9c:42:47:fb:
01:a8:d5:29:34:67:80:83:a0:76:6d:c8:cf:c6:9e:b4:3c:d3:
e9:f7:39:ee:8c:8a:71:c6:5f:9e:0c:bf:44:ac:fd:79:55:1a:
5c:61:30:e2:f7:11:04:76:6a:09:69:45:09:2b:0c:8e:98:2a:
e5:8c:f9:98:5e:47:cd:02:83:f5:fd:99:8a:44:db:d6:c5:e0:
96:3f:b9:bc:86:fb:92:2e:c9:c0:f1:db:bd:81:ef:5f:8c:d7:
1b:91:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:34 2026 by rpki-client