This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa
File: 9_TVXot_dyIkEe9KiLsuyW2oktk.roa (raw, json)
Hash identifier: AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=
Subject key identifier: F7:F4:D5:5E:8B:7F:77:22:24:11:EF:4A:88:BB:2E:C9:6D:A8:92:D9
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 019B7EA6771E24D10BBF2F21AA9DFBE64B0F
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa
Signing time: Fri 02 Jan 2026 12:19:57 +0000
ROA not before: Fri 02 Jan 2026 12:19:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209103
IP address blocks: 62.169.136.0/24 maxlen: 24
62.169.137.0/24 maxlen: 24
194.126.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:77:1e:24:d1:0b:bf:2f:21:aa:9d:fb:e6:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jan 2 12:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7f4d55e8b7f77222411ef4a88bb2ec96da892d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:37:d5:54:bf:1b:f5:96:9a:78:c0:d2:50:
bc:ec:45:29:49:d8:1c:b3:b6:39:ac:9f:88:ec:6d:
7e:68:d6:6f:ad:f9:50:92:1f:b0:c6:77:e4:80:4c:
7e:51:2e:27:d4:16:ec:72:03:bc:bd:c4:ce:03:57:
18:58:6a:3d:ac:53:2e:3e:6a:de:a1:f3:fa:04:49:
ef:cc:13:51:8e:ed:91:e7:17:48:8a:71:57:59:c4:
cd:10:23:8e:e0:a5:17:a2:c2:81:b6:5a:ea:48:b0:
21:98:c1:97:ba:c4:1c:02:ca:f0:ce:8c:cc:ed:dd:
d4:de:96:62:8f:a5:96:b0:ec:e5:7e:c4:37:73:9b:
c6:a2:03:29:e7:8a:08:57:85:f5:b7:cd:f5:5e:14:
4e:be:ff:6c:3f:2b:0a:47:85:26:bc:b5:0a:84:6b:
b7:81:89:8b:69:d3:58:4f:e2:4d:91:70:b1:d0:ea:
48:8c:d8:6d:cf:14:46:fd:f0:ac:c7:89:57:64:21:
93:7d:1c:a2:22:92:da:7a:02:28:9c:22:7d:aa:8b:
23:5b:36:63:5b:46:43:8d:f5:cb:d9:3d:6d:a8:6f:
e8:37:98:e8:e3:bf:aa:fd:ec:b7:26:03:2a:48:c2:
78:4e:37:8a:aa:a0:e0:76:ba:58:5b:83:2f:8a:04:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F4:D5:5E:8B:7F:77:22:24:11:EF:4A:88:BB:2E:C9:6D:A8:92:D9
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.136.0/23
194.126.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0e:1b:df:96:64:9f:92:2c:a2:46:a7:32:cc:a9:ad:d4:48:
b2:59:f3:e9:02:ae:19:8d:01:f6:f6:33:f9:38:aa:99:87:9b:
ba:ca:98:30:de:23:a8:50:9b:12:42:c0:ee:55:5f:8b:59:9e:
84:16:86:4c:9d:5c:fb:d6:03:28:64:09:65:18:9f:a4:27:51:
c8:8f:bf:66:0b:d1:6b:ca:d0:30:ce:be:2b:b8:e3:47:b6:bb:
0d:c8:1a:f9:63:75:dd:85:7f:6a:e7:c3:fe:0d:37:ba:a8:90:
f4:44:32:9b:3b:6a:ac:15:a9:78:76:b3:f8:70:56:0f:46:a2:
77:45:f2:fa:32:42:bc:d9:7e:73:dd:0d:b3:4e:30:d7:26:82:
0f:a9:04:45:fd:da:6d:96:ab:31:7f:20:60:f3:d8:42:5f:f2:
12:17:06:86:40:66:13:e1:cc:3f:26:16:79:cd:ce:a2:b6:07:
ef:62:6a:0c:13:83:96:25:0d:f3:a5:01:38:62:50:e9:d8:a2:
df:ee:dc:9a:8e:3f:1f:c9:d1:68:0f:1c:67:c4:3a:ed:d1:9a:
c7:89:fe:57:66:61:44:8e:da:ff:d7:06:86:ce:ad:c6:4c:73:
fe:15:2c:6c:36:ca:f3:70:4d:2f:27:88:bd:8c:6b:7c:32:a8:
a0:cd:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 06:57:51 2026 by rpki-client