This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/m9-Vx0ZizE3ik4m4WdW9CJkU1i8.roa
File: m9-Vx0ZizE3ik4m4WdW9CJkU1i8.roa (raw, json)
Hash identifier: dbf7IAJzq/UdbbEb+xvo9kGLn6XivNKOcM0hlYFN2Q8=
Subject key identifier: 9B:DF:95:C7:46:62:CC:4D:E2:93:89:B8:59:D5:BD:08:99:14:D6:2F
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA4221137CC06E47822DB7192F692F0
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/m9-Vx0ZizE3ik4m4WdW9CJkU1i8.roa
Signing time: Thu 01 Jan 2026 22:18:32 +0000
ROA not before: Thu 01 Jan 2026 22:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215826
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:22:11:37:cc:06:e4:78:22:db:71:92:f6:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bdf95c74662cc4de29389b859d5bd089914d62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:d6:58:22:37:b7:73:b0:32:bc:71:7a:23:
b5:9b:77:f9:be:70:fc:c3:5f:82:d9:6d:55:9b:57:
42:c7:26:cf:c2:1f:75:a5:52:24:f0:ec:2c:c2:19:
2d:c5:e3:44:22:31:de:e1:51:57:10:ee:86:0e:a9:
f6:27:67:29:d0:c2:71:27:b6:7b:50:20:3f:bd:75:
55:18:b0:a7:82:65:93:f2:7e:ca:d7:36:f7:2c:7f:
e9:2d:09:51:28:f0:c3:4e:17:cb:7f:87:7e:6f:9e:
e5:94:19:33:0f:8e:b8:55:d2:13:7b:9d:6c:b6:0c:
cb:2a:8c:55:62:43:1d:5f:fb:b7:8b:67:84:85:96:
9b:24:6d:74:16:de:fa:7e:2d:90:32:06:cc:22:30:
b0:7e:d9:88:7e:40:9c:4c:69:c0:c8:32:f8:de:6c:
89:c1:c3:3c:78:fb:ee:37:57:1b:57:2e:10:63:8d:
28:ef:7b:1b:2b:1b:b5:c7:c8:fe:86:89:af:f5:ff:
16:e4:c6:06:4e:80:71:d9:7a:3a:b8:45:db:31:5b:
3e:84:17:44:17:c7:b9:ec:9a:2c:bd:fa:ca:8b:5f:
de:c3:d8:a8:95:0d:58:17:59:a1:0e:29:88:8d:16:
c9:79:3d:6d:5a:7c:9d:24:05:0c:13:59:55:9f:98:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:95:C7:46:62:CC:4D:E2:93:89:B8:59:D5:BD:08:99:14:D6:2F
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/m9-Vx0ZizE3ik4m4WdW9CJkU1i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0e:75:1c:0a:94:32:cb:d3:fb:f8:49:2e:f0:87:81:4b:a1:
e0:ad:db:e3:e1:82:c1:7b:01:dc:2b:4b:28:b8:6b:a2:a0:15:
b9:04:a8:16:f8:07:76:b6:21:4e:ad:90:c4:1e:32:4f:4b:35:
65:18:e9:62:a0:38:ec:93:b2:9c:27:90:3b:f1:f0:54:1f:5e:
69:e9:37:49:9a:e8:20:51:b2:b9:e6:93:cf:26:a6:a1:a6:65:
4d:22:12:23:8f:6c:13:aa:8b:00:91:72:76:0d:eb:ea:99:75:
52:23:07:75:72:7d:45:dc:a9:94:b6:2b:53:84:35:28:4e:e1:
b7:ab:3b:6d:1f:8f:9d:00:cc:4d:06:00:6a:fe:6a:e5:3a:19:
c0:3b:d8:26:11:b4:84:6a:01:ae:ce:c7:8a:69:84:13:5f:4b:
e5:78:3c:3a:0f:21:52:14:8f:22:3f:c0:05:4d:32:60:31:24:
1f:d7:35:af:4b:76:ba:25:66:28:07:7b:c0:ac:aa:00:90:d2:
53:ed:88:c4:d7:9e:f9:db:a6:44:8e:60:93:80:48:5f:ef:e6:
47:fd:81:f0:8b:87:c4:fe:44:c0:74:35:2e:b9:49:df:fa:3d:
0a:91:da:b9:2f:81:e6:7a:d4:d3:b7:f9:bf:e0:ca:18:96:16:
6a:5d:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:46 2026 by rpki-client