This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa
File: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (raw, json)
Hash identifier: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=
Subject key identifier: 9F:6F:5C:F9:EA:B0:75:28:59:B5:C1:0E:85:9B:F7:22:09:F5:54:6A
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 019B78A3762D49A5ED67FE2E20A6A4ADDBE0
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa
Signing time: Thu 01 Jan 2026 08:18:56 +0000
ROA not before: Thu 01 Jan 2026 08:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61047
IP address blocks: 91.220.197.0/24 maxlen: 24
185.43.44.0/22 maxlen: 24
185.71.224.0/22 maxlen: 24
185.83.96.0/22 maxlen: 24
185.124.200.0/22 maxlen: 24
185.189.188.0/22 maxlen: 24
194.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:76:2d:49:a5:ed:67:fe:2e:20:a6:a4:ad:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Jan 1 08:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f6f5cf9eab0752859b5c10e859bf72209f5546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:e0:a5:2a:ff:38:ce:8c:a1:9a:b1:10:d1:
2e:03:f1:0d:3d:3e:62:8d:3d:e6:ee:06:a1:4f:3d:
c7:f4:d3:24:bd:b4:91:c4:83:38:d8:58:77:27:13:
7a:0f:4d:a3:c6:8e:24:55:6e:9f:58:28:a8:03:ba:
3b:2f:d2:6c:46:2c:33:f5:d3:ca:09:d9:d1:2c:30:
d0:3d:05:1b:90:e5:52:b1:02:70:12:f6:87:a3:37:
b9:16:bc:a1:e9:a0:58:b7:6a:d3:47:98:8a:d6:07:
b7:59:c2:6c:83:56:83:ff:94:f2:8a:88:87:d7:76:
a1:01:f2:16:ef:5b:ae:d3:a8:df:5a:a2:f9:2d:9f:
61:7a:99:1d:73:dc:79:ce:87:b8:96:6a:e2:d3:f3:
d7:ff:85:a9:f9:9b:9b:e4:b8:f9:f4:21:62:bc:96:
a8:61:c6:a0:69:d2:d2:f2:79:4d:7d:82:92:1f:f8:
05:a8:4d:52:c2:55:51:0f:fa:d8:3f:03:a3:fb:63:
3a:ee:b4:93:fd:50:8c:15:49:05:d6:e7:ce:36:43:
c9:c6:5a:ec:87:91:aa:d2:7b:d9:c8:d0:06:98:0e:
64:c2:9c:85:c3:15:a9:3f:b3:28:c3:9d:67:8c:63:
9b:fa:82:44:aa:1c:4a:8d:47:d2:0b:4f:93:07:06:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:5C:F9:EA:B0:75:28:59:B5:C1:0E:85:9B:F7:22:09:F5:54:6A
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.197.0/24
185.43.44.0/22
185.71.224.0/22
185.83.96.0/22
185.124.200.0/22
185.189.188.0/22
194.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b7:7e:36:44:86:d4:23:c0:6d:7f:5b:e9:32:01:d5:5f:55:
09:92:49:a1:57:e9:d7:c3:dc:e9:b7:99:23:94:bd:58:fc:ee:
5f:56:1b:83:7a:80:0b:d2:e7:47:6b:f8:64:1d:e1:3a:de:b3:
d9:97:2f:b8:aa:1b:71:17:3d:a5:f5:c0:40:bb:a8:6b:54:94:
a2:94:79:40:00:51:25:b7:3c:a9:5e:bf:54:53:b1:d0:7b:53:
08:97:71:b4:31:95:7b:a8:ba:19:96:13:7b:99:df:08:52:10:
65:99:84:14:a5:4a:d9:7f:95:6f:b0:37:a0:0e:81:28:0a:19:
9a:4c:10:fd:a1:36:e5:06:b1:d9:f1:32:ed:20:7b:80:b6:33:
a7:0a:ed:af:01:e5:12:2c:92:1a:0f:36:e1:10:d4:fd:47:09:
bf:2b:04:37:3f:52:e6:3d:e1:19:45:d5:a5:fc:68:eb:9f:d3:
52:fa:c9:0a:45:94:39:2c:50:0b:d7:71:a7:7e:69:96:02:98:
55:17:88:1c:71:6b:01:1a:3b:22:bb:2f:71:2c:b1:1e:36:a2:
9b:b1:46:34:48:a8:97:25:99:06:60:e9:3c:1b:5f:f9:7e:be:
22:88:d7:99:76:5c:80:01:54:5d:36:f2:3b:a7:b2:56:fc:12:
02:d0:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:58 2026 by rpki-client