This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa
File: 9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa (raw, json)
Hash identifier: tKt98bn7IEqVw7tRtArn7Eg/aO1ukt/5DnVwd3eE18g=
Subject key identifier: F4:97:18:E4:5F:88:75:87:8A:AB:C1:8A:C8:8B:91:56:DA:92:4B:06
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 019B7DCAC3D01C5E7EE71077DC5AF9D0D2BA
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa
Signing time: Fri 02 Jan 2026 08:19:58 +0000
ROA not before: Fri 02 Jan 2026 08:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51147
IP address blocks: 195.54.176.0/23 maxlen: 23
2001:67c:205c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c3:d0:1c:5e:7e:e7:10:77:dc:5a:f9:d0:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: Jan 2 08:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f49718e45f8875878aabc18ac88b9156da924b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:2e:e7:13:f4:74:33:ae:6f:92:4f:a4:20:
e7:1c:82:41:fb:52:01:c3:65:0f:5c:71:47:d8:2c:
a0:44:a8:94:fb:2e:f0:98:ce:1a:36:b7:50:ec:f9:
08:74:60:07:23:2c:55:6d:22:4c:ea:c7:46:fe:af:
6f:be:6e:ea:9b:b5:de:77:5f:a8:dd:ab:6a:46:ac:
31:bc:d1:4c:44:f2:19:c3:43:df:34:cc:6b:5d:28:
23:7e:3d:c2:65:2d:36:e2:6e:63:58:77:8c:0c:59:
57:01:bb:82:9c:1d:d2:f8:81:31:7a:20:17:4e:e0:
ba:6f:36:0f:e7:c0:6f:f6:87:4f:66:ef:56:16:34:
53:34:0c:f7:3b:b0:52:8f:a7:98:d5:09:8f:7e:52:
ac:93:4e:84:fb:e0:78:3c:ee:f1:77:ec:a9:c9:02:
47:41:4e:74:ff:a7:f4:26:f7:cd:32:96:2b:d4:e3:
24:dd:35:ff:bb:e3:c1:9e:25:dc:0c:f6:ea:4d:38:
8a:ea:53:22:a6:54:9d:a7:4e:59:38:db:69:7e:80:
a2:14:53:52:b1:1a:1f:e8:0a:77:d7:8a:72:66:b7:
4d:6d:3d:e1:8a:ac:1b:b1:0c:86:2a:a4:e7:7f:08:
1b:59:0f:69:f2:6d:30:40:26:43:7b:01:a6:89:4b:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:97:18:E4:5F:88:75:87:8A:AB:C1:8A:C8:8B:91:56:DA:92:4B:06
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/9JcY5F-IdYeKq8GKyIuRVtqSSwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.176.0/23
IPv6:
2001:67c:205c::/48
Signature Algorithm: sha256WithRSAEncryption
86:f5:77:22:d2:36:e6:81:f0:87:aa:5c:10:04:cf:a6:12:c9:
00:a7:a6:72:31:4f:4e:d0:7b:71:12:58:dd:66:55:54:7d:f6:
c1:88:9d:ff:b3:3d:de:3b:bf:49:93:c2:59:b1:13:58:7d:59:
bc:ea:7a:d6:48:8a:b2:e4:01:03:f6:5d:db:54:a5:ff:f8:cb:
82:96:94:85:aa:e4:4e:c6:5c:43:a1:97:6f:07:b7:35:49:8c:
05:2d:68:0f:dd:a6:b1:0d:77:65:ea:2f:eb:ad:71:83:24:75:
3c:d9:ad:e0:cf:6f:dd:bc:7b:af:b1:9e:38:fe:73:a8:eb:7f:
15:8e:0f:c3:9b:e5:85:7a:ed:ef:c5:dd:47:00:a0:fe:5a:39:
6d:0c:c5:1c:26:2e:2f:e6:ac:7c:68:ec:50:86:00:f8:1d:fb:
6d:23:5e:50:c7:9a:d2:7c:30:cc:8b:34:df:55:80:47:6e:27:
2d:70:57:c5:6b:ad:df:bd:8e:1b:ca:52:29:68:b2:65:86:46:
25:ea:60:a2:5d:80:ef:9e:d7:1c:35:81:fb:cd:6e:55:4c:8e:
fe:59:83:6d:9f:f3:d0:a0:d2:2a:8b:d7:f3:b1:62:e7:58:7f:
55:b9:4d:43:9e:7d:ec:d7:93:e0:7b:ff:23:85:a1:47:2b:e8:
8e:6f:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:45 2026 by rpki-client