This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/L1cSbjjQGctZbYceguMaYMQAPvU.roa
File: L1cSbjjQGctZbYceguMaYMQAPvU.roa (raw, json)
Hash identifier: peUd7meGLOIIhj/OSy9KzfxP7xwU4LdriyeCXz9sbec=
Subject key identifier: 2F:57:12:6E:38:D0:19:CB:59:6D:87:1E:82:E3:1A:60:C4:00:3E:F5
Certificate issuer: /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial: 019B7B36B7328291E6CA51626AD38FE14676
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/L1cSbjjQGctZbYceguMaYMQAPvU.roa
Signing time: Thu 01 Jan 2026 20:19:01 +0000
ROA not before: Thu 01 Jan 2026 20:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42321
IP address blocks: 194.0.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:b7:32:82:91:e6:ca:51:62:6a:d3:8f:e1:46:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Validity
Not Before: Jan 1 20:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f57126e38d019cb596d871e82e31a60c4003ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:ea:cf:bb:5c:73:0e:ee:c6:14:79:8b:3d:
9d:1d:43:d9:a9:98:39:79:1b:b6:57:de:6c:c0:d8:
ee:4a:a3:9e:b9:bf:76:e5:ef:a4:a4:64:2a:41:2e:
f6:28:8a:1a:d3:e2:87:8d:ee:b5:6a:e7:be:ba:92:
f9:7a:5b:f7:92:70:7f:27:ca:9d:10:05:71:a1:6e:
91:e2:2d:fd:35:eb:b0:9b:71:f4:6b:6e:5d:5e:71:
c3:2c:e0:12:85:67:77:b3:85:82:80:9b:d9:9d:9b:
10:8d:00:23:0e:78:8b:44:f6:49:4f:a3:dc:a1:1f:
0b:ad:fa:f9:19:59:eb:0a:f0:3b:ab:b5:77:3a:3a:
18:6c:2b:08:89:af:39:18:29:22:0d:ee:30:ad:6d:
c2:a8:4c:01:05:ff:b3:4e:bf:c9:71:c4:97:ea:1b:
f9:4e:35:3c:87:79:40:f9:1d:4b:8a:b2:07:0a:06:
23:10:f5:e0:19:fb:6e:51:7f:60:5c:37:4a:43:a2:
07:b6:00:87:64:9e:31:1c:58:6c:ef:93:f5:80:80:
45:e7:c8:c5:e1:29:f2:cb:2a:63:02:7b:42:ba:aa:
4b:fe:f4:c1:22:01:3f:95:7f:b9:b3:d7:11:7e:ec:
f1:72:8d:06:a7:3a:ea:cb:5c:b7:fb:45:32:84:04:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:57:12:6E:38:D0:19:CB:59:6D:87:1E:82:E3:1A:60:C4:00:3E:F5
X509v3 Authority Key Identifier:
keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/L1cSbjjQGctZbYceguMaYMQAPvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.202.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6d:24:ab:17:c0:d2:5a:1a:fa:ca:03:29:db:02:1f:28:86:
e6:ce:30:46:6f:6e:0b:72:48:86:33:a8:d3:f3:32:9f:7f:4f:
b2:f5:21:ff:3c:4a:14:6a:ab:c0:2e:85:5c:7f:82:3d:06:ab:
fe:c0:55:4e:b0:b4:a3:07:c8:c4:3b:17:46:71:91:4b:9c:58:
09:27:58:ff:45:67:cd:02:3f:d1:3b:8e:68:f2:be:ac:f5:9b:
a1:03:e4:d4:cc:48:90:da:2c:52:0e:d7:e1:6e:e4:62:5f:8b:
29:ab:0a:4a:0f:45:2c:c7:21:81:60:ee:5a:65:91:12:60:5c:
e2:43:27:73:fa:70:f2:b7:37:82:ae:ed:cf:ff:b3:4f:24:13:
80:ce:bf:9e:9a:21:96:f6:ea:8c:ba:15:ac:0d:e0:25:24:d4:
31:a6:f8:14:37:d1:21:85:ef:4a:87:d2:b0:55:5d:c1:d1:d5:
0e:d3:09:0f:a2:c9:3f:f2:f2:94:7a:ca:0f:db:72:1b:0c:d2:
5e:c6:76:5c:e8:30:40:b3:7a:f7:5a:c0:01:54:da:40:de:0f:
f1:e3:08:45:5f:a3:19:a7:1c:ee:52:41:17:11:e9:5c:fb:48:
9f:f9:7c:d8:45:84:12:91:e1:e1:d8:7d:5a:d0:41:3d:9a:38:
04:7c:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:37 2026 by rpki-client