This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa
File: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (raw, json)
Hash identifier: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=
Subject key identifier: 03:5E:85:F4:DB:04:C9:43:80:B5:26:35:CD:70:ED:A0:53:F2:3A:F2
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019B7D5B99C406AED50DAEC50B8FC5893E04
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa
Signing time: Fri 02 Jan 2026 06:18:33 +0000
ROA not before: Fri 02 Jan 2026 06:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 193.9.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:99:c4:06:ae:d5:0d:ae:c5:0b:8f:c5:89:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jan 2 06:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=035e85f4db04c94380b52635cd70eda053f23af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:1b:5c:5e:8e:42:b8:e3:5f:96:e0:5d:12:
0d:1c:e3:87:c7:95:81:6c:bf:52:13:55:53:30:8e:
ce:ec:04:fc:29:91:02:bb:e2:fb:b5:53:fe:7f:66:
9d:12:e7:72:ff:96:8e:fd:52:1e:6d:74:7b:89:ed:
5c:73:05:6c:c5:f0:00:f6:23:7d:b3:7d:01:94:a3:
80:74:73:c7:c8:b3:b7:d7:fc:33:a4:27:6c:03:24:
f5:e4:a6:60:1a:58:48:29:ac:ea:1d:0f:3e:1d:98:
18:88:e7:15:46:20:c3:a6:6c:39:7d:c8:74:fe:d1:
32:31:33:9d:68:6c:1c:ff:3f:fb:57:e0:2a:1f:90:
43:ce:5a:e6:3c:35:ac:68:aa:3f:11:13:a6:59:99:
85:ef:94:ed:b9:bf:8f:d7:6c:5d:dc:8d:d0:c6:d0:
88:9f:e9:28:c9:b6:f8:b4:17:a5:74:16:d5:51:ae:
2e:25:28:dd:43:bf:2f:63:bc:c4:9d:44:9c:75:1a:
a9:03:45:93:1c:51:39:01:ce:82:a1:68:aa:88:a4:
42:29:a3:a8:c4:05:d1:47:4c:33:5b:b4:46:8e:60:
e0:69:ed:f5:0d:d1:84:86:03:25:a6:4e:71:e1:39:
78:16:96:f3:cc:1c:11:37:e8:4b:32:cf:d9:b8:e3:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5E:85:F4:DB:04:C9:43:80:B5:26:35:CD:70:ED:A0:53:F2:3A:F2
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:be:56:99:55:73:22:4d:c1:76:89:f3:55:96:11:49:27:01:
b5:f0:32:9f:29:f9:a9:20:9f:c6:54:e9:c2:39:07:32:a4:89:
73:c5:46:0c:15:d1:14:81:b2:91:8f:9d:3b:a3:02:3c:14:dd:
f9:54:8a:c3:c6:15:c7:a9:07:c3:af:b0:5a:d2:05:b4:a0:e1:
99:71:f8:73:a7:af:48:a0:b2:00:4e:9c:26:99:28:bf:d1:ff:
e0:be:65:48:8c:44:89:6a:7d:a1:7b:1a:67:58:1d:3d:bf:ea:
fd:31:a0:61:45:ab:ad:ef:d2:b2:3c:a4:02:34:62:a4:c1:63:
f2:0c:9c:22:5b:42:70:4d:2b:ca:b1:ca:33:4f:00:9f:ac:a9:
2c:68:d2:01:5f:06:c1:c7:9c:fc:64:56:c7:09:39:3d:ce:56:
fd:10:26:fb:a4:9c:fc:3b:ea:f3:7f:47:45:84:00:3b:98:3c:
62:7e:13:c4:fe:32:a4:38:dd:9d:ad:a9:0e:ba:a0:29:97:41:
24:95:e6:bc:dd:9e:f2:d1:2a:6b:47:b9:15:cb:2d:7f:7c:27:
04:0c:70:62:ef:56:8e:ff:ad:7c:bd:80:08:d5:db:eb:01:93:
59:e8:2b:02:47:1b:b6:d2:32:41:1d:6c:6b:5b:48:b4:17:7a:
c3:1e:79:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W5nEBq7VDa7FC4/FiT4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjYwMTAyMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzVlODVmNGRiMDRjOTQzODBiNTI2MzVjZDcwZWRhMDUzZjIzYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr4bXF6OQrjjX5bgXRINHOOHx5WB
bL9SE1VTMI7O7AT8KZECu+L7tVP+f2adEudy/5aO/VIebXR7ie1ccwVsxfAA9iN9
s30BlKOAdHPHyLO31/wzpCdsAyT15KZgGlhIKazqHQ8+HZgYiOcVRiDDpmw5fch0
/tEyMTOdaGwc/z/7V+AqH5BDzlrmPDWsaKo/EROmWZmF75Ttub+P12xd3I3QxtCI
n+koybb4tBeldBbVUa4uJSjdQ78vY7zEnUScdRqpA0WTHFE5Ac6CoWiqiKRCKaOo
xAXRR0wzW7RGjmDgae31DdGEhgMlpk5x4Tl4FpbzzBwRN+hLMs/ZuOMilwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFANehfTbBMlDgLUmNc1w7aBT8jryMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvQTE2RjlOc0V5VU9BdFNZMXpYRHRvRlB5T3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQl6MA0G
CSqGSIb3DQEBCwUAA4IBAQCbvlaZVXMiTcF2ifNVlhFJJwG18DKfKfmpIJ/GVOnC
OQcypIlzxUYMFdEUgbKRj507owI8FN35VIrDxhXHqQfDr7Ba0gW0oOGZcfhzp69I
oLIATpwmmSi/0f/gvmVIjESJan2hexpnWB09v+r9MaBhRaut79KyPKQCNGKkwWPy
DJwiW0JwTSvKscozTwCfrKksaNIBXwbBx5z8ZFbHCTk9zlb9ECb7pJz8O+rzf0dF
hAA7mDxifhPE/jKkON2drakOuqApl0Eklea83Z7y0SprR7kVyy1/fCcEDHBi71aO
/618vYAI1dvrAZNZ6CsCRxu20jJBHWxrW0i0F3rDHnkb
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:32 2026 by rpki-client