This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa
File: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (raw, json)
Hash identifier: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=
Subject key identifier: 4B:77:35:90:96:E4:F7:40:06:F9:3B:C4:62:74:37:14:89:DA:8E:50
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019B7FF22EA54E631FA91763ED6BE2BFAC9A
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa
Signing time: Fri 02 Jan 2026 18:22:16 +0000
ROA not before: Fri 02 Jan 2026 18:22:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21430
IP address blocks: 96.9.126.0/24 maxlen: 24
2a14:a480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:2e:a5:4e:63:1f:a9:17:63:ed:6b:e2:bf:ac:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Jan 2 18:22:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b77359096e4f74006f93bc46274371489da8e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:16:b8:43:21:53:5a:aa:46:be:e4:d4:cc:
a8:89:ae:23:f8:2e:1c:23:f5:56:3e:a8:cf:cb:7e:
1e:bd:2b:52:a0:e5:d0:85:85:59:e1:4d:0a:9d:bf:
d8:24:60:17:af:d7:ae:e1:4f:da:e1:84:79:0f:c6:
a3:10:a9:2f:f7:42:dc:4c:88:48:65:bd:dd:33:5e:
f7:0a:e5:25:a9:4f:09:8d:51:88:fc:59:0d:a9:f2:
0e:74:ff:cb:cc:32:bb:65:d7:97:70:42:36:b5:f3:
93:48:36:03:4c:65:2c:12:39:d4:ad:99:9f:52:9f:
3f:d7:f8:c1:27:fa:25:e3:1e:8d:4e:e8:2e:e0:fc:
21:40:16:28:bb:31:ef:88:17:78:76:0b:50:09:3e:
fe:95:65:a4:90:a6:e2:2c:a0:e9:e3:e6:e8:4f:46:
68:f8:af:bc:49:60:0c:33:20:71:be:70:ee:1e:3c:
a3:2e:cc:15:ff:86:96:33:64:b7:d7:91:45:59:51:
92:10:33:5d:26:f5:d0:e6:d9:a8:4d:27:13:af:81:
36:9c:1a:5c:0f:8c:2b:eb:0c:c3:4a:af:ad:ee:fe:
e9:26:d6:5e:0e:33:eb:2c:1b:e4:5f:b4:74:8f:19:
a9:92:bb:e7:ac:ac:d4:62:f1:56:57:cc:2c:90:21:
30:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:35:90:96:E4:F7:40:06:F9:3B:C4:62:74:37:14:89:DA:8E:50
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.9.126.0/24
IPv6:
2a14:a480::/48
Signature Algorithm: sha256WithRSAEncryption
70:7e:36:75:c1:be:c2:91:ce:11:2b:f0:50:43:d9:7c:7f:f1:
83:66:05:50:63:57:6a:e6:3b:58:06:cd:09:5f:71:e4:32:0a:
2e:58:49:f2:2c:4f:27:c4:bb:59:cb:5b:26:cf:5f:a6:e1:40:
15:e0:a4:81:54:d4:35:82:c7:1d:98:5d:2e:d4:e1:7e:57:55:
09:e6:ae:32:7f:11:e6:60:01:2f:0a:d3:4b:c6:45:93:d5:82:
85:a8:5c:22:74:f0:18:ee:ae:fa:3b:a8:4f:e7:bd:f7:88:69:
01:e2:44:b9:dd:12:8a:93:52:a0:58:39:f3:4d:88:5b:5a:5d:
2d:43:f6:a0:85:ad:69:21:99:e8:8a:5a:4d:08:99:6d:f8:ba:
0f:40:94:10:86:b3:a5:21:19:9d:3c:6e:24:75:c6:81:42:b6:
d5:a0:9c:5c:34:d1:55:a7:d9:00:69:33:65:fd:a0:04:c0:75:
51:57:15:1c:98:33:3c:8c:18:b2:b2:ca:80:86:c0:00:cd:cf:
c9:9f:8a:1b:a5:d3:9b:d5:05:68:32:b3:58:8f:2b:1a:e5:4f:
be:15:f6:ec:38:b7:18:cf:83:e8:71:95:e1:38:2c:72:62:df:
5f:26:73:31:f5:9d:0a:6f:8e:89:75:bc:15:21:29:42:22:04:
0d:39:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:43 2026 by rpki-client