This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa
File: n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa (raw, json)
Hash identifier: 12jqzpGaLihSKEn4m7KQUtKkmWE3dp9k5ig5SAQQ3hM=
Subject key identifier: 9F:57:D8:BC:CA:00:7C:F2:D0:58:18:0E:B2:37:52:9F:89:79:24:79
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019B7C128AA423FE79FC8FABD6B601B98F57
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa
Signing time: Fri 02 Jan 2026 00:19:08 +0000
ROA not before: Fri 02 Jan 2026 00:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208091
IP address blocks: 87.251.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:8a:a4:23:fe:79:fc:8f:ab:d6:b6:01:b9:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 00:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f57d8bcca007cf2d058180eb237529f89792479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:3e:1f:0d:84:14:31:5a:fa:d6:54:c7:17:
5f:e8:82:11:ba:bb:97:aa:16:b1:48:31:75:ae:2a:
3f:12:5b:93:20:d3:eb:71:fa:58:73:98:07:65:fe:
c9:2b:98:f0:18:af:2b:f5:45:07:57:d4:0f:b8:42:
5e:66:07:fb:d2:80:0c:f2:fc:45:50:06:e6:a6:93:
c2:b3:5a:5f:ed:1c:df:62:1a:00:d6:ea:50:f3:e8:
84:55:6f:d0:7f:96:46:0a:9f:59:0a:4c:e9:71:22:
d1:aa:e7:d3:ea:53:06:64:75:30:e6:40:aa:c8:92:
bd:08:2d:f8:2e:11:70:77:6b:1c:a3:1c:44:d2:09:
f5:74:70:24:10:98:6d:f7:f2:66:39:a3:a3:5a:60:
4d:a5:a5:c9:ca:fa:55:c9:00:76:1a:90:d2:1e:c8:
3e:b4:06:44:4e:d7:c3:96:9d:2e:0e:64:8d:55:d1:
b6:3d:9f:c5:50:d1:e4:73:fe:a5:47:7e:9d:07:f3:
2f:84:c2:b6:b7:89:f7:4b:d3:bf:bf:85:de:59:66:
87:43:04:54:b7:a8:6a:a6:34:3a:4b:ae:b0:f0:af:
c9:21:12:75:54:d8:c8:1a:f6:06:42:10:82:98:29:
a3:9d:0a:df:50:4c:46:51:59:09:9d:a9:ca:c2:d4:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:D8:BC:CA:00:7C:F2:D0:58:18:0E:B2:37:52:9F:89:79:24:79
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/n1fYvMoAfPLQWBgOsjdSn4l5JHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
42:74:fc:9d:5b:94:a4:fb:85:1c:2c:91:7c:cb:40:71:8c:ca:
0e:73:ce:66:c8:07:b7:6a:f5:f5:be:55:f0:c3:f2:e7:66:c5:
41:00:87:82:5c:08:78:08:27:da:40:63:46:ca:04:bd:02:72:
77:31:cf:f3:7e:5f:22:59:bf:bd:c5:5b:0d:fd:3c:70:aa:0f:
b4:18:1c:48:77:72:98:e3:da:dd:dc:ed:73:cb:f0:f1:4a:1c:
bb:4e:ca:cc:06:7f:a0:7c:60:5f:06:7d:6f:54:a5:2d:43:32:
6b:e5:43:2a:e8:2d:42:b6:10:32:a1:cb:23:2c:54:50:4c:88:
3f:39:1f:35:6a:a6:23:79:7a:ac:26:30:d3:ee:19:86:b6:17:
04:71:d7:ee:60:1b:17:df:5c:d8:b2:41:31:07:54:ef:04:33:
d4:03:be:e6:9d:24:9d:22:28:bf:de:a0:65:cf:be:92:2a:b1:
79:c1:12:2b:79:81:32:a6:db:83:a6:63:4f:31:11:c5:00:00:
f8:75:77:da:e3:3e:a2:7d:84:14:18:64:06:63:f4:d5:2d:fc:
ea:6f:1f:0c:9a:cb:d6:42:a0:18:60:5f:4a:0a:86:5a:a9:e1:
60:b0:e8:58:3b:68:eb:d9:0f:78:98:26:a4:68:11:75:82:80:
2b:76:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:31 2026 by rpki-client