This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa
File: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (raw, json)
Hash identifier: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=
Subject key identifier: 68:76:56:1C:C3:28:8F:F5:5E:E8:F3:1C:1E:C9:3E:B4:E7:41:97:BB
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019B783433FA7C143EF5AD5A5586AAF31B05
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa
Signing time: Thu 01 Jan 2026 06:17:25 +0000
ROA not before: Thu 01 Jan 2026 06:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216280
IP address blocks: 185.97.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:33:fa:7c:14:3e:f5:ad:5a:55:86:aa:f3:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Jan 1 06:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6876561cc3288ff55ee8f31c1ec93eb4e74197bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:89:3a:31:9d:9e:b7:7f:6d:a5:f7:e5:5b:
88:f6:16:c9:41:96:17:89:b7:61:9a:22:54:10:e9:
79:af:cb:5b:18:3a:5e:24:b3:c1:1a:c4:8e:7a:9e:
c5:bc:d6:3e:e7:23:d0:70:ca:d6:56:a1:98:3f:f3:
9f:bb:ca:a6:5c:bc:98:71:4c:af:c1:a6:10:94:b5:
ec:d5:e9:bb:b0:66:74:30:19:b3:30:b4:24:c1:41:
5f:8c:2b:1e:7d:0a:92:87:f4:5a:b7:2a:3f:13:a0:
d7:e0:88:54:fa:f4:6d:a9:ce:64:80:a8:b3:90:b1:
b6:a0:27:4c:cc:25:71:8b:b7:b1:50:d0:d2:17:5e:
28:ea:75:aa:f1:ac:41:ae:87:d6:e3:f7:ec:cd:57:
98:79:6f:e0:2e:24:46:2f:ca:06:73:9c:77:dd:1a:
23:87:1b:1f:56:52:04:dc:50:2d:5e:13:5b:74:9e:
c1:3e:8d:4a:90:ad:76:47:e9:a5:d5:a3:3e:c4:db:
f6:3c:a5:6c:81:00:0c:c5:9b:e8:d6:f8:7f:c6:1e:
3c:4e:0c:ea:7a:13:17:4a:a5:00:67:94:dd:5d:21:
b8:a1:a4:77:9b:a3:b9:6b:e5:da:02:66:a0:19:12:
27:99:73:93:2b:bb:49:33:64:f4:8d:de:e0:52:a8:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:76:56:1C:C3:28:8F:F5:5E:E8:F3:1C:1E:C9:3E:B4:E7:41:97:BB
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:73:2c:33:24:49:d8:f6:ae:99:41:c8:5e:f6:7a:7b:f4:6f:
fc:cf:94:3a:e3:ed:54:5c:b5:2b:7e:dd:c6:db:68:0d:e6:d5:
e3:d7:c4:09:24:d8:e5:f8:90:4b:8d:e7:c4:60:c6:5a:5f:3f:
f9:e2:4b:73:0e:08:de:65:14:08:59:65:ec:b9:b9:b5:8d:88:
9c:8c:8e:3d:9a:4f:cf:d9:65:6c:6d:96:e4:af:e4:b7:a7:ea:
94:23:a0:d1:78:4a:5b:a9:15:dd:a0:ec:c6:f1:b8:79:58:08:
83:c6:8f:ca:25:8b:36:55:ce:42:00:52:07:d5:98:32:e6:d6:
2e:23:79:c5:c9:1d:e6:a7:87:40:1b:39:26:94:09:5e:9e:7b:
9b:d4:a3:24:17:15:a0:d6:a0:00:7f:1c:86:e2:b1:6f:67:ab:
eb:99:38:e1:69:9f:62:55:0a:91:41:dd:28:b1:c1:09:42:93:
bd:32:d9:87:b0:66:a1:8f:96:e6:d3:f2:f9:48:8e:fb:da:67:
e7:26:fd:5b:94:65:ce:6b:82:47:c1:ef:81:52:42:77:c2:c1:
33:31:bd:e3:6d:b9:ba:d7:22:31:ea:8c:5e:cc:c2:7a:16:fa:
be:47:1f:15:13:75:9a:ae:cf:84:8e:12:a8:15:7f:3a:86:1c:
20:37:29:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:28 2026 by rpki-client