This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa
File: 9DJshHuamQ3bgb5z1m1LfJNX_ww.roa (raw, json)
Hash identifier: 7svYIoYfPlfMyBkpS9n34AdZclfd41c9DZvPrcryylI=
Subject key identifier: F4:32:6C:84:7B:9A:99:0D:DB:81:BE:73:D6:6D:4B:7C:93:57:FF:0C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019B78A25D7157CD1DA518704DAF66130BDF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa
Signing time: Thu 01 Jan 2026 08:17:45 +0000
ROA not before: Thu 01 Jan 2026 08:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211813
IP address blocks: 212.134.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:5d:71:57:cd:1d:a5:18:70:4d:af:66:13:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 1 08:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4326c847b9a990ddb81be73d66d4b7c9357ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:59:1a:ed:64:d0:7f:31:43:63:70:b9:b9:
93:1c:78:69:7f:ff:c1:96:d0:b0:c5:17:74:ad:46:
ba:17:64:ba:77:6d:7c:2c:fe:86:44:40:c3:13:33:
c4:9a:3a:40:01:75:04:02:7a:b5:e9:0c:de:59:72:
aa:f0:79:0d:ed:72:9c:e1:09:3b:ce:a1:61:4f:0b:
79:8c:c3:77:cd:60:fc:54:2e:c0:16:58:1a:85:8a:
c4:92:8d:9b:90:92:3a:53:fe:09:3d:27:f7:0b:db:
35:8b:43:14:f1:48:8f:ef:f1:59:86:c9:18:10:de:
bf:de:43:ba:7c:6c:65:b0:bc:b7:bc:24:5c:5c:6d:
56:bd:e6:16:30:d5:67:30:d4:59:7b:da:2b:54:56:
05:b3:b8:4d:9c:20:43:42:91:84:51:35:07:3f:86:
bb:8e:23:97:51:33:f4:2a:c1:44:33:4e:44:22:bb:
f4:9e:6e:dd:e8:67:a2:6a:16:c7:2c:cd:79:2c:35:
c4:e0:8f:2a:a5:0a:1a:fa:1a:43:50:07:00:f4:0c:
1b:be:fd:fa:59:08:58:f4:f3:c6:82:3e:b7:04:68:
31:d7:6a:59:ff:06:50:a4:bf:bf:da:64:fc:e3:ac:
d4:c6:03:68:e6:68:09:0c:44:e7:d0:90:b1:26:da:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:32:6C:84:7B:9A:99:0D:DB:81:BE:73:D6:6D:4B:7C:93:57:FF:0C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.96.0/24
Signature Algorithm: sha256WithRSAEncryption
71:17:e2:9b:6b:7b:f0:3d:8c:a6:f0:05:99:4d:16:32:92:bb:
db:70:94:37:44:02:fd:28:a8:c8:fc:93:61:ac:a9:06:27:00:
ee:6e:b5:33:fb:c9:7c:68:c3:1b:aa:68:f9:d6:5e:0d:68:ad:
3a:dd:1d:3f:d0:67:78:c3:98:e8:e2:34:fc:28:05:be:8a:17:
07:a3:48:fc:e4:d1:42:ae:68:af:3c:59:42:a8:3b:fe:7a:ad:
76:68:0f:14:fd:ed:7b:cc:91:5f:93:da:27:60:0e:e7:58:9a:
92:09:53:36:8d:9b:1b:a0:53:88:24:0d:21:ad:cf:58:b5:21:
f1:74:a4:a2:01:b7:d3:2a:1e:c7:d5:4d:ae:14:e3:f5:8f:c7:
32:4d:1c:9d:a5:cc:04:54:8f:f3:ce:0d:9a:6e:fd:e4:03:1e:
cf:40:06:2c:8d:76:1e:43:6d:1f:7f:75:16:50:5f:98:6e:b4:
55:95:7b:c4:ae:98:25:af:f9:3e:cf:b3:83:6a:c3:9b:2f:81:
44:27:76:56:7b:33:6c:9c:a4:14:30:b1:cb:b8:6b:1b:10:c0:
2a:55:c7:c4:7e:dc:65:61:a4:74:d4:44:b6:f5:d9:7a:73:08:
5a:76:de:e8:6d:e4:b2:18:01:f1:95:f9:0e:7e:15:2e:06:af:
42:b3:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:47:52 2026 by rpki-client