This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/nj_5MaQooSjXGiQr1BUruywSxrU.roa
File: nj_5MaQooSjXGiQr1BUruywSxrU.roa (raw, json)
Hash identifier: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=
Subject key identifier: 9E:3F:F9:31:A4:28:A1:28:D7:1A:24:2B:D4:15:2B:BB:2C:12:C6:B5
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 019B7B3628F67544C0B5B5F3EF5F5F448206
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/nj_5MaQooSjXGiQr1BUruywSxrU.roa
Signing time: Thu 01 Jan 2026 20:18:25 +0000
ROA not before: Thu 01 Jan 2026 20:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47461
IP address blocks: 195.242.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:28:f6:75:44:c0:b5:b5:f3:ef:5f:5f:44:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Jan 1 20:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3ff931a428a128d71a242bd4152bbb2c12c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:2d:5c:c5:c6:d1:9e:77:3b:5a:87:18:31:
f1:a9:45:bf:2e:0a:05:b0:8c:ff:21:c2:08:ac:b2:
f5:5f:e0:7a:5d:2f:a6:50:12:50:82:45:e8:66:a8:
4d:a5:e1:fd:21:e8:fb:d3:06:ba:1b:c7:11:f5:14:
a4:a0:45:05:a8:1f:91:dd:b0:88:71:74:ab:c5:87:
6e:01:cd:8e:c1:b7:40:a5:09:11:47:cc:b6:7d:b5:
a2:73:b1:21:96:e0:fe:65:25:c0:5b:88:ee:6a:73:
0f:cb:e8:22:18:c3:9e:01:34:89:73:a1:00:2c:39:
aa:ec:e4:bb:c2:cc:a4:ab:48:51:c6:10:9d:56:16:
1e:eb:ab:7e:fc:e8:ae:66:26:d1:0a:0c:72:37:b4:
50:72:2b:7f:c0:c6:93:d0:12:7d:18:ac:5b:f9:b6:
33:28:36:cb:1d:47:8d:a3:e5:4a:04:60:56:b7:fb:
b2:b8:40:19:a3:95:ca:7b:d3:cc:2a:e1:14:31:01:
fe:88:86:1f:62:c2:34:60:5f:fe:16:49:52:9d:26:
a3:78:7a:47:6f:b3:72:ee:55:8b:15:c5:b7:9b:49:
13:28:35:c1:90:45:7d:3f:94:be:b4:7f:99:79:5d:
b3:6b:9c:74:c2:9e:26:cf:33:eb:9a:91:b5:e9:f1:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:F9:31:A4:28:A1:28:D7:1A:24:2B:D4:15:2B:BB:2C:12:C6:B5
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/nj_5MaQooSjXGiQr1BUruywSxrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:35:a7:c7:42:35:5f:ed:dc:71:c6:e5:24:26:84:5d:53:82:
bf:bf:fe:10:99:ba:59:62:94:ca:28:00:47:56:60:a8:f4:e4:
0d:4d:c6:88:47:26:0c:2b:00:e5:e5:2d:6c:10:53:34:52:ed:
76:e7:18:96:9c:66:3f:04:a2:e1:58:34:f3:f3:50:71:51:48:
55:fd:b9:61:e4:06:d8:18:2f:4e:ed:ef:c5:5e:3f:de:b2:57:
ec:0a:d0:15:3b:f9:cd:d0:db:61:f1:23:89:ec:3d:09:4d:0c:
ec:d0:e1:9d:75:c2:32:51:39:83:79:8e:82:79:ca:61:ec:19:
0f:48:40:7d:46:a4:0f:93:89:35:11:78:ae:48:ca:7d:2b:b7:
8a:1e:be:2a:7d:b3:c9:d8:af:96:bc:b1:47:39:6d:d8:12:88:
23:07:81:27:43:e1:13:6b:a4:09:7e:31:8d:7b:4a:46:41:11:
39:2b:0e:98:38:4c:48:1c:fd:1d:17:be:ab:1e:92:31:d9:30:
53:e6:f4:f2:d8:20:4b:fc:9f:87:55:df:87:ad:cf:15:52:e5:
a4:5f:43:4b:0a:20:d1:c5:34:42:6a:88:4c:b8:a2:52:85:10:
d9:84:b2:93:fd:01:88:14:d5:ab:14:16:f3:7e:9c:17:5c:21:
4e:9e:dc:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7Nij2dUTAtbXz719fRIIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY3YmFjNjQ0ZDU5NTY3MjJlNWUxODNhMjJmYjE0NTVl
NzU1NDYwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTNmZjkzMWE0MjhhMTI4ZDcxYTI0MmJkNDE1MmJiYjJjMTJjNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOMtXMXG0Z53O1qHGDHxqUW/LgoF
sIz/IcIIrLL1X+B6XS+mUBJQgkXoZqhNpeH9Iej70wa6G8cR9RSkoEUFqB+R3bCI
cXSrxYduAc2OwbdApQkRR8y2fbWic7EhluD+ZSXAW4juanMPy+giGMOeATSJc6EA
LDmq7OS7wsykq0hRxhCdVhYe66t+/OiuZibRCgxyN7RQcit/wMaT0BJ9GKxb+bYz
KDbLHUeNo+VKBGBWt/uyuEAZo5XKe9PMKuEUMQH+iIYfYsI0YF/+FklSnSajeHpH
b7Ny7lWLFcW3m0kTKDXBkEV9P5S+tH+ZeV2za5x0wp4mzzPrmpG16fH1vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4/+TGkKKEo1xokK9QVK7ssEsa1MB8GA1UdIwQY
MBaAFNT/e6xkTVlWci5eGDoi+xRV51VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMt
ODgwYTgxYjk5Y2M1LzEvbmpfNU1hUW9vU2pYR2lRcjFCVXJ1eXdTeHJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8xNjcyZDAtNWI2ZC00MTE1LWFmYjMtODgwYTgxYjk5Y2M1
LzEvMVA5N3JHUk5XVlp5TGw0WU9pTDdGRlhuVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/KuMA0G
CSqGSIb3DQEBCwUAA4IBAQAuNafHQjVf7dxxxuUkJoRdU4K/v/4QmbpZYpTKKABH
VmCo9OQNTcaIRyYMKwDl5S1sEFM0Uu125xiWnGY/BKLhWDTz81BxUUhV/blh5AbY
GC9O7e/FXj/eslfsCtAVO/nN0Nth8SOJ7D0JTQzs0OGddcIyUTmDeY6Cecph7BkP
SEB9RqQPk4k1EXiuSMp9K7eKHr4qfbPJ2K+WvLFHOW3YEogjB4EnQ+ETa6QJfjGN
e0pGQRE5Kw6YOExIHP0dF76rHpIx2TBT5vTy2CBL/J+HVd+Hrc8VUuWkX0NLCiDR
xTRCaohMuKJShRDZhLKT/QGIFNWrFBbzfpwXXCFOntzc
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:13 2026 by rpki-client