This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa
File: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (raw, json)
Hash identifier: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=
Subject key identifier: 25:95:7D:5A:6B:1C:C3:EF:ED:05:95:B9:C8:BA:0E:D7:69:01:E2:72
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019B79ECDCB6504B8280E3D7A3643A058202
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa
Signing time: Thu 01 Jan 2026 14:18:44 +0000
ROA not before: Thu 01 Jan 2026 14:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9091
IP address blocks: 194.8.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:dc:b6:50:4b:82:80:e3:d7:a3:64:3a:05:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Jan 1 14:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25957d5a6b1cc3efed0595b9c8ba0ed76901e272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:81:af:77:87:5d:9d:d0:38:5b:f2:cc:cd:
44:5c:df:42:26:33:90:fc:62:9c:08:e3:6e:84:84:
d7:43:95:f1:3d:35:e4:9b:43:66:f5:f4:59:18:31:
fc:3f:f8:ce:aa:4d:78:62:2f:ae:86:1b:24:8c:13:
d0:66:0e:ee:89:21:02:44:77:e4:e8:66:b6:a0:b1:
88:70:3e:92:e9:94:aa:87:95:1d:7d:4e:97:11:1b:
1a:2a:f7:eb:36:76:42:fc:ea:a6:4a:90:69:40:6a:
79:14:c0:49:c8:32:1f:1b:4d:7c:c6:e6:19:df:92:
46:5c:07:d0:31:dc:67:42:21:29:8c:93:2e:24:a6:
13:7d:e2:87:91:9e:75:34:95:51:c2:34:c7:cb:a8:
61:fd:e5:f5:d7:1f:dd:54:3a:95:ac:06:90:d1:89:
4e:94:8f:ea:e1:b1:bd:87:74:39:03:fa:21:84:ca:
18:b4:33:56:ef:76:07:4a:b6:59:17:68:31:af:ca:
e3:93:8f:19:df:a9:10:3b:d5:59:f5:3d:e2:53:e4:
9b:9e:0b:5b:4a:fe:c8:6f:50:12:17:5e:af:1e:30:
62:7d:fe:c4:e2:69:57:ce:98:4f:4e:28:41:4d:b7:
c8:6b:ee:e1:2f:8c:08:5c:b5:37:7a:81:cf:b5:03:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:7D:5A:6B:1C:C3:EF:ED:05:95:B9:C8:BA:0E:D7:69:01:E2:72
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/JZV9Wmscw-_tBZW5yLoO12kB4nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.10.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b5:53:c3:e3:78:fb:97:4c:5a:2a:5e:01:47:d2:36:11:04:
ad:a9:53:9b:07:78:9b:fc:9f:be:69:0a:78:ab:88:2f:a9:e1:
72:4f:b7:87:4d:11:ae:88:5d:5f:32:94:18:1b:03:02:42:e7:
7b:eb:e7:c7:d0:77:a0:87:88:a5:d9:9f:78:be:22:5d:d0:f6:
31:04:15:34:37:b6:1f:fa:9c:b8:cb:91:2c:f8:c4:42:97:b9:
7e:66:6d:29:84:31:ab:df:25:e9:6a:c0:90:e7:00:28:ac:1a:
1e:75:56:f4:b6:ea:bd:9a:97:1f:45:8c:2f:bd:30:e7:66:56:
f6:4f:f1:bb:f8:6c:91:42:a8:11:f0:b8:cb:c6:a6:2e:4b:cc:
46:83:9b:05:56:83:72:5f:86:33:87:ea:92:8f:03:83:a0:2a:
85:3f:83:21:be:0d:63:31:4c:a9:e1:65:82:8d:00:00:24:f5:
b6:3e:65:9e:34:5c:54:09:a3:fd:86:25:f3:0d:b9:99:74:de:
e0:1e:54:78:1e:1d:7c:df:f1:dd:02:56:f8:19:40:49:12:a4:
12:91:ce:76:09:00:d3:59:63:cb:af:eb:58:6e:33:1f:55:7e:
a4:f0:70:f9:38:2e:b7:8d:7a:10:61:0d:ab:12:9b:e6:de:fa:
0e:2e:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:12 2026 by rpki-client