This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9o89r47ZwfgzhNtigkVcagiOoI.roa
File: M9o89r47ZwfgzhNtigkVcagiOoI.roa (raw, json)
Hash identifier: FeM5cpveSLVh0s1go5e24hmM5/XSg5ClGWr6FMn5IJ4=
Subject key identifier: 33:DA:3C:F6:BE:3B:67:07:E0:CE:13:6D:8A:09:15:71:A8:22:3A:82
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019B78A25A947FB8224B0C6FA9ABB3D6F5BF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9o89r47ZwfgzhNtigkVcagiOoI.roa
Signing time: Thu 01 Jan 2026 08:17:44 +0000
ROA not before: Thu 01 Jan 2026 08:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 93.152.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:5a:94:7f:b8:22:4b:0c:6f:a9:ab:b3:d6:f5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 1 08:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33da3cf6be3b6707e0ce136d8a091571a8223a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:a4:df:27:e9:9e:65:48:c6:b4:5c:ae:a0:
e9:bb:01:4d:c0:b0:55:2f:94:ef:23:06:97:14:b7:
a7:f1:e1:05:7a:4d:f7:83:01:ff:c3:f4:98:3f:9f:
e4:95:fd:83:44:4d:15:3a:7a:c0:7e:91:af:ac:3b:
93:4a:0c:e9:45:cf:d7:d1:cf:3b:54:b2:bd:78:b7:
70:3e:9f:dc:5e:82:ef:7a:08:b4:ae:56:08:6b:07:
24:72:bf:4f:7a:a3:12:ae:f5:d8:35:91:0e:01:bd:
e8:13:ed:20:a0:bc:f1:b4:e7:b7:1c:d1:55:e6:26:
26:aa:2a:c7:78:4f:03:21:ba:19:40:a8:63:ec:36:
1c:77:5b:c9:5a:62:1a:b7:15:08:ad:71:c0:22:52:
bc:d3:ca:ac:6f:5a:63:09:ec:af:c0:59:df:91:d4:
92:ef:f9:4b:f9:c7:ed:fa:8c:e4:63:33:7b:56:19:
76:b4:59:8d:99:09:7f:01:df:3f:c3:56:7f:f4:53:
f5:55:9a:d5:72:7c:d1:bf:c8:b4:35:b5:c4:57:56:
3a:12:66:c1:99:f2:e5:39:ea:d8:e3:25:09:0b:7f:
93:75:81:0a:3b:73:fb:9b:bf:95:f8:94:57:06:7a:
9a:f8:fb:11:39:d4:92:2d:23:1b:d3:8e:66:e7:3f:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:3C:F6:BE:3B:67:07:E0:CE:13:6D:8A:09:15:71:A8:22:3A:82
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M9o89r47ZwfgzhNtigkVcagiOoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6b:cb:9f:8b:01:21:6d:d2:38:85:1d:36:93:e8:df:0c:f3:
b0:2c:39:af:13:1f:ad:5d:bb:36:56:73:dd:f9:06:39:9b:3a:
8d:4f:b9:b2:1c:5f:24:c0:e1:98:f3:12:88:e3:3a:d3:fa:fe:
ad:e4:28:74:07:a1:a0:61:b5:07:94:08:c5:12:d8:5c:0b:a6:
26:b4:72:82:e5:70:d0:bd:75:fa:56:97:2a:19:5a:1e:ae:0e:
2f:07:a2:e2:3d:50:b5:52:29:3b:b1:af:94:5c:89:8b:53:6e:
05:26:c0:87:4d:da:92:fd:a6:50:d5:42:c4:d1:d5:38:88:12:
52:26:cf:12:fa:ac:28:d1:d8:05:1d:e9:2b:5b:1c:6d:28:42:
f6:23:45:7a:a9:47:e9:90:7c:50:c1:27:8f:c5:10:91:5d:50:
12:0a:1e:e8:75:90:d6:f2:1d:14:2a:e8:51:28:b8:93:0a:63:
d8:36:0f:52:8f:2b:8e:42:20:cc:25:e9:9d:81:ca:01:ff:41:
10:b8:c9:8d:5f:b2:92:8f:82:fd:a4:b3:6e:be:44:a8:26:d4:
fd:21:1b:f6:4c:80:81:d8:8b:30:86:f1:e1:e4:b0:45:93:be:
80:6f:b1:6b:05:1d:a9:f7:88:06:33:59:61:60:14:0e:83:75:
94:2a:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:16:57 2026 by rpki-client