This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa
File: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (raw, json)
Hash identifier: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=
Subject key identifier: 9E:25:15:D1:D8:F2:E0:FF:C9:41:6E:4F:C1:74:B8:87:D5:03:AB:77
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019B7BA38C113BB1B6E45454D1F4991380C7
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa
Signing time: Thu 01 Jan 2026 22:17:54 +0000
ROA not before: Thu 01 Jan 2026 22:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42837
IP address blocks: 193.34.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:8c:11:3b:b1:b6:e4:54:54:d1:f4:99:13:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Jan 1 22:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e2515d1d8f2e0ffc9416e4fc174b887d503ab77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:68:18:fd:b1:de:96:47:40:6c:ed:d0:5c:
6f:ac:eb:67:75:47:d0:2e:08:c2:92:30:ce:23:db:
af:4a:89:45:89:1d:e6:af:1f:11:27:34:4d:dc:fc:
c9:44:6a:07:c3:f3:80:7d:ec:4a:76:cb:e4:3c:77:
b2:eb:b3:13:bd:2a:ce:6a:b8:9a:59:84:7e:70:c8:
b2:a8:1b:69:59:9a:10:0b:b1:b4:93:a3:d8:fa:dd:
80:51:d1:51:58:b9:96:71:88:a5:48:52:27:fb:dd:
36:ef:73:f1:dc:99:9a:65:7b:83:59:4d:95:77:8f:
ee:ad:76:06:51:f5:0b:a3:95:4c:01:32:08:cc:2a:
ea:45:25:40:ba:25:39:9b:d2:e4:1a:cb:a0:76:47:
43:bb:02:f2:54:df:73:09:87:61:59:ca:04:0c:56:
c3:f6:f8:06:2f:e2:92:9b:e2:20:c0:19:e7:f3:25:
16:bb:57:da:1f:1e:14:07:b1:ac:23:89:6c:61:c1:
56:79:65:1d:7d:3a:65:ba:ee:b9:47:88:10:c5:2c:
5a:a9:d6:87:a0:de:04:6a:d4:60:27:e6:1e:2a:e2:
67:bb:89:93:75:c3:87:be:89:9a:06:96:71:3e:eb:
40:af:05:53:30:5c:c4:2f:65:4a:6f:cb:4e:a1:82:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:25:15:D1:D8:F2:E0:FF:C9:41:6E:4F:C1:74:B8:87:D5:03:AB:77
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.225.0/24
Signature Algorithm: sha256WithRSAEncryption
77:21:1d:fa:ef:3e:6a:fd:1e:f3:b4:c7:ac:6c:ca:9b:dc:ed:
2d:2c:56:c0:35:7d:a8:da:4a:87:c8:af:f1:b8:b9:43:b1:d1:
e9:32:61:15:a5:6e:0d:01:ca:ba:d0:34:96:6c:73:2d:8e:f1:
e1:6d:73:b7:0d:d4:48:22:9b:00:5d:16:fe:92:06:88:b7:25:
4a:0c:6a:7e:1e:89:64:37:c8:25:44:35:bd:94:ba:e6:b3:a9:
a8:7f:1d:e6:b6:bf:b3:75:e8:c3:1e:58:f6:31:ac:d3:22:c3:
53:9b:f3:cd:2c:14:e2:5f:cd:f3:47:2b:27:3e:1e:af:68:4c:
c3:36:00:20:fd:61:24:c6:53:ac:36:4c:8b:ef:08:4a:bd:6f:
79:e3:82:5e:c1:d8:ea:77:df:d1:49:80:42:f0:a5:f5:79:27:
cb:25:a1:96:a2:c9:f0:91:20:2d:ea:1f:c7:3b:b0:0e:1a:13:
ad:c1:56:0a:63:5b:bb:64:72:5e:28:01:b2:76:be:96:ab:d3:
27:61:d7:df:0a:f4:44:be:80:e4:e3:d6:c8:27:fe:19:a8:a1:
cd:5d:c4:1a:f5:90:b8:0d:81:d8:56:5c:9e:fe:50:21:6e:fa:
2e:44:79:4c:da:e9:9e:3c:61:91:33:ed:26:ff:0c:22:83:82:
72:ac:fb:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o4wRO7G25FRU0fSZE4DHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl
MWI4MjUwHhcNMjYwMTAxMjIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTI1MTVkMWQ4ZjJlMGZmYzk0MTZlNGZjMTc0Yjg4N2Q1MDNhYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRVoGP2x3pZHQGzt0FxvrOtndUfQ
LgjCkjDOI9uvSolFiR3mrx8RJzRN3PzJRGoHw/OAfexKdsvkPHey67MTvSrOaria
WYR+cMiyqBtpWZoQC7G0k6PY+t2AUdFRWLmWcYilSFIn+90273Px3JmaZXuDWU2V
d4/urXYGUfULo5VMATIIzCrqRSVAuiU5m9LkGsugdkdDuwLyVN9zCYdhWcoEDFbD
9vgGL+KSm+IgwBnn8yUWu1faHx4UB7GsI4lsYcFWeWUdfTpluu65R4gQxSxaqdaH
oN4EatRgJ+YeKuJnu4mTdcOHvomaBpZxPutArwVTMFzEL2VKb8tOoYLskwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4lFdHY8uD/yUFuT8F0uIfVA6t3MB8GA1UdIwQY
MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt
MGU1OWYyZWNiMTc1LzEvbmlVVjBkank0UF9KUVc1UHdYUzRoOVVEcTNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1
LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSLhMA0G
CSqGSIb3DQEBCwUAA4IBAQB3IR367z5q/R7ztMesbMqb3O0tLFbANX2o2kqHyK/x
uLlDsdHpMmEVpW4NAcq60DSWbHMtjvHhbXO3DdRIIpsAXRb+kgaItyVKDGp+Holk
N8glRDW9lLrms6mofx3mtr+zdejDHlj2MazTIsNTm/PNLBTiX83zRysnPh6vaEzD
NgAg/WEkxlOsNkyL7whKvW9544Jewdjqd9/RSYBC8KX1eSfLJaGWosnwkSAt6h/H
O7AOGhOtwVYKY1u7ZHJeKAGydr6Wq9MnYdffCvREvoDk49bIJ/4ZqKHNXcQa9ZC4
DYHYVlye/lAhbvouRHlM2umePGGRM+0m/wwig4JyrPua
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:52 2026 by rpki-client