This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa
File: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (raw, json)
Hash identifier: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=
Subject key identifier: C3:D7:0B:32:D3:DB:09:86:2B:C2:82:84:46:9D:3A:20:F9:82:D9:B1
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019B78A346BC1522BB28350F097837B4988C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa
Signing time: Thu 01 Jan 2026 08:18:44 +0000
ROA not before: Thu 01 Jan 2026 08:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60721
IP address blocks: 185.193.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:46:bc:15:22:bb:28:35:0f:09:78:37:b4:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 1 08:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d70b32d3db09862bc28284469d3a20f982d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:9c:3f:57:d7:27:17:2a:17:12:54:af:94:
62:c5:c8:ae:2f:81:70:3c:a4:b5:fd:7a:f8:68:ab:
e3:9f:38:63:dc:9e:86:21:39:a9:4f:a5:c7:d3:a3:
cc:a4:c4:2b:93:26:22:c7:94:3f:57:16:ef:ae:1a:
b6:94:0e:d6:3e:4c:2a:ed:18:f5:7e:a1:a9:cb:63:
c9:31:4d:c2:aa:6b:fd:78:8b:1a:20:d4:be:69:82:
50:6a:51:73:e7:3d:c4:29:79:2b:8a:8b:47:09:aa:
38:c8:3d:81:9b:45:2e:1f:92:ce:60:80:e9:b3:7c:
8c:17:b3:48:47:13:15:26:89:6a:c4:76:fe:c9:85:
0c:77:5d:58:8e:e3:c3:97:08:c0:4a:b5:58:97:29:
71:e8:d4:67:96:b4:ed:ac:9b:0c:d5:ef:da:a5:95:
4f:42:c0:dd:40:71:0b:9e:d7:85:47:ba:c3:16:43:
d7:92:7d:71:e1:14:37:f3:13:00:7c:2c:7b:f8:96:
f4:67:39:56:5f:e4:08:44:42:46:3e:10:cc:03:1b:
9c:f1:b8:0f:a0:50:6e:6f:aa:5b:62:24:ee:1d:ae:
13:31:0f:fb:fb:c8:06:e3:43:e8:3e:20:b1:04:94:
2c:83:f4:76:c0:4f:e3:73:31:5a:6e:25:8c:d3:6a:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:0B:32:D3:DB:09:86:2B:C2:82:84:46:9D:3A:20:F9:82:D9:B1
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/w9cLMtPbCYYrwoKERp06IPmC2bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e3:0a:37:f0:fd:ea:a1:21:e2:2a:51:3f:32:21:e9:db:8c:
6d:bd:d8:53:d2:de:af:8a:0a:30:63:6c:85:a9:8e:b8:25:31:
d4:84:8b:d8:ee:31:6a:3b:dd:2d:90:fe:34:25:5a:6e:d1:a5:
f3:26:22:0f:58:f7:5c:0f:73:0b:e6:ca:59:45:6c:d5:d5:d9:
6b:fb:69:84:65:80:ea:35:b4:d6:79:d9:49:74:cd:44:79:00:
04:3f:1e:83:49:01:46:06:90:dc:3a:32:c8:51:83:1c:ca:b0:
be:41:17:eb:ed:ef:c9:e3:25:3d:32:ff:95:9e:de:52:62:ba:
99:ea:a9:91:ee:59:42:b0:61:ac:8d:6d:e2:6f:58:93:4f:c4:
da:b4:ba:7f:26:48:5b:d3:7c:e1:97:cc:72:ef:2f:be:9f:68:
99:66:71:a4:7a:bd:4e:89:79:98:9a:fe:4a:c2:43:d1:0d:36:
42:eb:51:29:28:62:07:89:f7:07:98:59:41:98:96:25:b6:b1:
2f:a1:01:a0:a8:7d:e3:94:5a:19:76:37:9b:98:78:bd:8f:5a:
56:02:87:e8:29:f0:60:6a:05:db:47:35:71:e4:d8:12:41:2f:
2f:f5:9c:2a:12:b0:dc:55:49:9c:66:93:fd:e0:e2:30:5d:e7:
84:b9:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:04:39 2026 by rpki-client