This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa
File: 9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa (raw, json)
Hash identifier: Oz17KeL/QvTihYxjOX/vDKG2jFWQLOGdnlYrSALuc3I=
Subject key identifier: F6:97:A9:4C:63:B5:01:0F:81:82:A4:0F:3E:F7:57:54:6A:3C:7E:3F
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 019B783447C50C9295610CAF355DCF5877D5
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa
Signing time: Thu 01 Jan 2026 06:17:30 +0000
ROA not before: Thu 01 Jan 2026 06:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198572
IP address blocks: 195.200.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:47:c5:0c:92:95:61:0c:af:35:5d:cf:58:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: Jan 1 06:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f697a94c63b5010f8182a40f3ef757546a3c7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:89:be:d3:ee:8c:db:0b:65:a1:46:5f:96:
77:65:f1:42:2f:65:bf:4e:bd:29:47:f3:ee:a7:99:
8f:10:5d:01:34:31:b2:c7:08:ae:de:6d:b6:cf:35:
8e:fe:8b:9e:d1:2b:62:77:25:03:e4:6a:aa:48:aa:
22:30:c3:7c:43:5a:85:66:5a:a2:0b:e3:4e:5b:be:
1f:41:ae:c6:db:b8:51:00:59:db:62:7e:8a:eb:29:
60:9d:8c:b9:cc:b5:db:64:fe:7a:cb:84:ab:55:37:
a0:2d:a4:d5:31:d5:b4:aa:c5:c6:ef:f2:76:e1:62:
21:48:e9:34:11:67:ba:9f:a8:c4:00:b5:a3:6d:f9:
6a:ac:02:89:ca:ff:2e:c9:ef:82:61:1f:9e:33:ee:
3c:f1:19:98:78:cf:7f:3b:56:ad:27:16:7e:3d:62:
ce:36:37:d0:b8:b8:99:01:02:8c:2b:41:b9:50:d7:
92:fd:ab:07:6a:76:96:0e:16:9e:0d:0b:14:53:a9:
1a:4a:54:ba:ef:21:9e:f4:42:89:ca:7e:4c:69:90:
fb:27:55:26:bf:1f:0c:5b:b0:48:d9:4f:34:e1:51:
b2:a0:3b:11:1d:f1:5d:f2:ef:45:92:fa:81:b0:f8:
06:10:c2:07:9f:15:75:64:5d:ad:6f:11:d7:98:71:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:A9:4C:63:B5:01:0F:81:82:A4:0F:3E:F7:57:54:6A:3C:7E:3F
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/9pepTGO1AQ-BgqQPPvdXVGo8fj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6a:09:1b:67:96:8f:2a:a2:a6:63:53:cb:4a:bb:40:80:ee:
66:21:44:31:3f:c6:58:e9:55:d9:01:e0:a9:64:c1:16:c2:f7:
59:f0:55:3a:41:72:fa:8f:7b:8f:c8:3b:26:bd:c2:08:4f:13:
8c:86:81:3c:55:5b:85:15:b2:f9:c5:da:dd:17:21:58:23:7e:
4c:36:69:46:4b:e2:e0:54:29:57:89:d8:4d:c7:e6:90:86:fc:
32:54:6b:ba:e8:7d:9d:4d:d4:d2:01:bc:32:c1:2a:d1:a1:d9:
38:fe:ff:1a:1d:0b:e0:77:de:f2:af:71:5e:7e:44:5e:40:39:
c0:c1:d9:e4:e5:6b:56:ee:71:25:e0:f9:c8:d2:18:e3:c4:09:
ac:ff:59:a4:d3:7e:bc:16:2a:d5:0a:5f:64:c7:7b:02:79:89:
e0:e9:f2:3e:37:98:70:b5:2f:43:ac:14:35:0e:bb:0f:22:ed:
d4:33:d2:af:da:a2:87:49:1e:ef:01:0a:53:6a:9a:0f:d6:8a:
ad:96:7e:f2:6d:20:24:87:89:38:6d:fe:56:ee:55:64:c8:d0:
12:1a:cb:27:89:43:86:07:40:fb:fb:b1:7c:ec:2f:37:56:52:
30:83:cd:2d:2b:29:fa:52:76:12:55:ad:45:36:17:72:fe:b4:
09:81:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:14 2026 by rpki-client