This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa
File: svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa (raw, json)
Hash identifier: 1Gdov46zDBd4IfBZ7HkYYkXCBemGU+SkHwwE4d+buOo=
Subject key identifier: B2:F2:88:C7:E5:7A:33:CF:83:82:F9:BC:FB:27:67:6E:C3:E1:7E:5D
Certificate issuer: /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial: 019B7CED3B2DC6F3C1B7C3D23AB71BE4B28A
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa
Signing time: Fri 02 Jan 2026 04:18:00 +0000
ROA not before: Fri 02 Jan 2026 04:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208597
IP address blocks: 45.93.208.0/22 maxlen: 23
2a0e:28c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:3b:2d:c6:f3:c1:b7:c3:d2:3a:b7:1b:e4:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Validity
Not Before: Jan 2 04:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f288c7e57a33cf8382f9bcfb27676ec3e17e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:2d:ff:6a:8d:0c:ca:5b:63:ef:76:11:71:
3b:e0:0a:96:7e:43:9d:39:ca:9d:ac:3a:c0:5a:c6:
93:1b:9f:5a:02:a4:76:6e:cc:3b:9a:0c:89:5c:df:
f6:01:62:0b:a2:c0:98:bf:a8:0f:f3:ce:ce:6f:c9:
81:51:b3:f8:50:85:ba:e6:0f:2d:66:8f:dc:05:c4:
10:26:21:06:8c:92:34:32:e0:cb:c5:3b:9f:17:f5:
13:c1:5d:cf:cb:19:dc:58:55:24:57:6e:7f:92:10:
56:e5:fc:a8:ba:f2:b9:75:44:59:e8:72:4b:39:bc:
e4:a3:01:a3:aa:a7:f0:99:5c:df:49:d4:c4:96:b8:
fe:0d:36:a5:bf:cb:1c:86:f2:5f:e4:38:78:d7:38:
15:7d:c1:3f:8c:43:9b:59:ae:8b:e2:44:c3:0f:99:
a6:5c:1b:e3:10:0d:c3:6b:66:56:a0:d1:d9:73:c8:
97:96:a4:99:b9:59:eb:ea:33:d6:51:1e:cb:29:a6:
50:d7:e0:b7:91:b0:7d:42:6b:f4:2f:80:ec:b0:dc:
65:25:62:61:c1:e5:ca:1b:cc:06:1d:2f:ac:cc:18:
b7:38:2f:4a:01:c8:c5:78:d9:dd:bc:84:ac:84:e7:
f5:8b:2b:cf:86:e3:4a:92:ef:67:9f:5a:fe:44:17:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F2:88:C7:E5:7A:33:CF:83:82:F9:BC:FB:27:67:6E:C3:E1:7E:5D
X509v3 Authority Key Identifier:
keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/svKIx-V6M8-Dgvm8-ydnbsPhfl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.208.0/22
IPv6:
2a0e:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ee:e4:ec:a0:95:1c:59:a1:4c:5d:05:58:eb:cc:1a:5d:a2:
83:23:fa:9b:2a:09:86:c7:9b:c7:d3:42:88:59:f2:5e:bb:96:
9c:96:a3:ea:1b:cc:62:93:02:98:d2:8a:4c:4c:cd:4a:04:f4:
ca:a3:3f:6f:0b:92:df:18:83:52:5f:57:0c:98:66:d0:5a:fd:
b5:fe:96:2b:69:7b:80:ce:9d:5a:97:a0:c4:49:8e:45:b5:3f:
a2:32:28:75:c9:1c:21:2c:b9:e5:5c:06:40:b6:73:7e:05:6d:
6a:af:b8:6f:15:0c:db:5d:4c:f2:64:8b:db:56:d2:09:a6:5b:
54:45:dc:7c:b4:c1:90:34:45:88:c4:f4:19:95:d1:74:d3:ba:
f0:05:db:b9:bb:ae:b2:9d:bc:66:63:2d:58:9f:2a:37:a0:6b:
dd:87:d6:05:f5:c4:c3:b0:56:5a:7f:8e:30:79:f4:63:2b:94:
12:99:b3:d8:d6:a8:78:d7:9d:9c:56:44:55:16:1d:e8:2d:0f:
b4:90:a6:d5:26:76:48:0e:cf:74:04:39:8e:16:13:8e:ba:8a:
24:10:3d:0f:f5:d9:e6:77:24:99:10:90:42:20:b3:a7:d2:98:
d8:62:1c:a5:9a:dc:bd:08:13:13:db:6d:f6:6f:2e:1e:45:de:
4e:f2:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:07:41 2026 by rpki-client