This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa
File: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (raw, json)
Hash identifier: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=
Subject key identifier: 8F:9E:0F:F4:4E:C7:24:DC:57:9F:3C:74:73:86:65:86:02:CD:AE:69
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019B7A5B6B71F2699FFEDC10CE913742EAA5
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa
Signing time: Thu 01 Jan 2026 16:19:30 +0000
ROA not before: Thu 01 Jan 2026 16:19:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38930
IP address blocks: 94.75.196.0/24 maxlen: 24
2001:1af8:4410::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:6b:71:f2:69:9f:fe:dc:10:ce:91:37:42:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jan 1 16:19:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f9e0ff44ec724dc579f3c747386658602cdae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:ad:94:82:d4:1f:f1:db:d3:96:5f:08:1d:
f4:b9:7a:c0:4c:c8:3a:0e:f3:61:e4:6e:56:91:02:
e9:b9:8d:e6:84:d7:0a:39:85:7e:75:5a:b5:55:6a:
25:f6:81:ac:27:92:66:6c:25:dd:b0:22:21:71:a1:
c9:84:c4:4b:30:db:f8:c5:38:87:c9:6a:8b:a7:46:
66:70:f1:31:57:e5:12:7e:fd:6d:55:07:78:07:34:
34:73:d5:13:56:27:03:61:bf:be:ae:a6:78:82:f0:
47:ea:88:cc:e9:bc:89:aa:c6:3b:0c:75:e4:1e:51:
f7:76:49:c4:97:8d:13:c5:cb:89:1a:32:6a:0b:e3:
96:0b:92:ee:64:b3:6a:ea:4e:b3:53:06:74:41:ff:
f5:a6:83:f2:f9:73:bf:c0:fd:1c:c4:fe:c6:93:a3:
2e:11:36:c9:6c:94:e9:a8:2b:0f:5c:61:3a:db:f6:
b9:cd:c4:f2:cd:be:5e:04:b4:e8:b0:3f:16:3d:33:
b3:ee:6d:82:02:e8:17:a5:2e:4e:aa:3f:65:f1:5e:
0d:66:8d:30:68:44:14:ce:53:ce:92:0d:a8:bb:21:
a5:e5:92:7c:bc:7c:5c:22:d7:ab:9a:f2:2e:8b:69:
b3:0f:f2:a8:2d:07:51:f5:cc:20:62:6b:d0:7c:83:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:0F:F4:4E:C7:24:DC:57:9F:3C:74:73:86:65:86:02:CD:AE:69
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.75.196.0/24
IPv6:
2001:1af8:4410::/48
Signature Algorithm: sha256WithRSAEncryption
a4:e5:f0:0d:d5:29:1b:7e:0f:33:c8:0d:57:b4:cf:5d:12:a3:
72:06:37:01:56:62:2b:d5:b8:45:42:93:66:75:cb:b4:90:96:
48:cc:04:48:71:fd:3e:dd:5b:31:24:b5:4b:83:2b:1b:81:27:
65:78:5e:0f:f1:00:0c:68:3d:b5:f5:8f:60:14:c5:27:ad:d7:
76:ed:65:4f:8d:8f:33:5a:94:74:8b:5e:2e:f7:ea:54:d9:16:
26:fc:cb:c7:82:8c:9a:78:97:5f:a3:13:b8:42:7c:07:a4:89:
8b:08:58:14:ed:f3:e4:43:25:a6:0b:1b:7e:93:aa:4b:31:39:
a3:4f:64:52:5a:c6:ff:ce:14:e7:83:c3:31:43:6e:64:09:cb:
d3:3b:82:15:a5:34:77:d5:52:2a:e1:4a:2d:f1:a2:77:2f:58:
24:fa:82:00:3d:e0:53:7c:09:f9:04:5f:03:46:e7:9c:16:c3:
04:d1:e9:7b:31:30:d7:47:7d:6b:0f:0e:6c:b5:a6:16:52:18:
e8:17:cb:42:66:48:82:a6:95:65:a2:ee:f4:4b:ae:57:ab:d0:
bd:88:de:f6:59:81:6b:f8:90:35:90:88:18:07:ed:1b:b9:6c:
e8:66:8d:be:18:a6:2f:25:60:99:11:a2:75:8b:fe:39:6f:be:
13:b9:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:35 2026 by rpki-client