This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa
File: n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa (raw, json)
Hash identifier: nnAzk/5RgBrrO3CmKUlZtLCI4l4l5DYZR2tkopYIdL8=
Subject key identifier: 9F:C6:1A:25:22:83:39:15:3E:57:57:F7:AE:2D:CC:3D:D5:34:BF:F6
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 019B7AC8F0648E9BDD9D5950C44F2C7026BB
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa
Signing time: Thu 01 Jan 2026 18:19:07 +0000
ROA not before: Thu 01 Jan 2026 18:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39449
IP address blocks: 77.95.160.0/21 maxlen: 21
88.151.80.0/21 maxlen: 21
178.20.80.0/21 maxlen: 21
185.52.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:f0:64:8e:9b:dd:9d:59:50:c4:4f:2c:70:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Jan 1 18:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc61a25228339153e5757f7ae2dcc3dd534bff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:59:7a:6b:cf:68:bd:d4:31:e5:80:20:b4:
58:26:0a:db:1b:ef:e6:09:cf:56:4e:5f:62:0f:85:
72:9f:4b:cd:31:dc:2d:48:db:88:cc:75:03:c3:20:
da:75:6f:dd:f6:59:1d:e3:8e:8a:fe:bc:76:e2:f4:
4b:06:10:0a:8b:b7:7e:00:86:3d:3a:6a:bf:1d:df:
13:4f:63:f1:ad:75:d3:3b:0f:a7:41:af:23:b0:79:
7f:21:7e:50:d7:45:e7:e6:63:64:d1:95:9c:9c:f4:
41:a3:fd:eb:a7:9b:68:fb:b6:8d:98:f8:d0:d7:3e:
b2:84:a5:28:88:52:84:23:31:65:8c:04:72:1f:5b:
10:16:af:db:be:9d:af:47:4b:56:50:08:8c:bd:ff:
65:d0:b7:b4:e5:27:64:10:f4:50:ac:87:19:0f:cd:
98:1b:9f:fa:0a:d7:b2:79:31:0c:8a:d6:af:d5:95:
e6:0f:bf:69:07:1d:54:35:71:77:12:80:c1:c7:ad:
56:29:d9:70:6c:71:61:d7:a3:87:06:1e:fc:d4:fd:
f4:70:02:37:75:d5:b5:9c:ed:3c:40:0c:4e:1f:29:
c8:89:66:1d:f4:5a:d3:b3:37:4b:38:25:e6:38:4b:
c1:14:3f:90:1f:35:e1:6d:80:e7:0d:cf:ea:b9:d9:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:1A:25:22:83:39:15:3E:57:57:F7:AE:2D:CC:3D:D5:34:BF:F6
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/n8YaJSKDORU-V1f3ri3MPdU0v_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.160.0/21
88.151.80.0/21
178.20.80.0/21
185.52.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:d1:6c:fb:49:34:45:84:2c:8c:08:bd:be:c6:55:a0:fa:eb:
cd:af:66:5a:13:78:b5:d9:13:0d:c1:ce:c8:40:74:16:40:e6:
44:5e:3c:4d:d5:2d:c5:3d:27:07:fc:1d:01:e1:dc:9c:8c:4e:
3e:a2:9e:c0:89:76:36:94:04:af:d3:07:ab:e8:8c:66:9a:73:
6a:2b:4a:64:58:08:c8:61:e2:ec:86:ab:f0:e2:86:b0:2f:1f:
15:26:5d:aa:05:f6:e1:d8:67:9c:0b:04:67:b4:ae:61:ae:8a:
33:cf:5f:62:50:09:86:31:47:18:5d:77:79:c3:d8:b8:e9:b1:
d2:79:bc:88:85:21:38:ec:a2:0d:2c:55:b4:8d:9e:be:9b:9e:
76:df:ce:d3:ff:6e:78:a0:ed:61:6d:61:68:e3:5a:7e:39:5b:
9f:eb:e4:8d:fe:43:2f:81:03:c6:18:43:08:f5:9c:0c:6b:77:
77:50:ad:50:5c:d2:38:69:18:8e:0f:60:8f:82:1f:13:19:bc:
71:d2:06:ae:0b:e8:81:33:de:98:fb:37:30:98:e7:e9:18:39:
ec:09:12:57:87:56:46:bd:b8:f4:ba:b3:f2:f3:f1:a9:c2:58:
27:06:e1:11:18:ae:46:b9:2c:97:ca:35:86:45:cc:ab:9d:04:
3d:b6:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:36 2026 by rpki-client