This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa
File: Ns0TEayHhiePChPTJ9vCIwt5XyI.roa (raw, json)
Hash identifier: Xy/xmqWwzmYADBHd+Z2Wr4OAJGAQaKgbnFraMpsTfPk=
Subject key identifier: 36:CD:13:11:AC:87:86:27:8F:0A:13:D3:27:DB:C2:23:0B:79:5F:22
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019C4335EB786DAEAA65C957174160C7C5DF
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa
Signing time: Mon 09 Feb 2026 16:22:13 +0000
ROA not before: Mon 09 Feb 2026 16:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:35:eb:78:6d:ae:aa:65:c9:57:17:41:60:c7:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 9 16:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36cd1311ac8786278f0a13d327dbc2230b795f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:f5:e6:10:2a:d7:8d:eb:61:ea:e8:96:a9:
16:e2:25:1a:c1:df:2d:ca:c8:a0:f1:13:37:3f:a1:
9d:79:19:da:58:03:b8:0e:8a:43:86:c5:50:03:6a:
b8:63:f8:e8:04:80:83:c5:18:85:27:d9:8e:c3:7c:
6d:8d:dc:1a:cc:15:8c:36:37:63:ac:72:39:9b:11:
a9:3e:6f:ab:66:a7:c5:13:99:e8:47:68:c3:76:11:
7b:5f:3c:6c:57:fd:c4:41:48:3b:55:f0:2b:e8:c4:
14:f5:9a:92:38:0c:78:60:ad:72:5f:54:8d:ba:91:
f8:58:94:9c:04:50:79:03:05:4d:b4:68:0f:03:cb:
6e:2c:c2:82:91:21:5e:2b:7e:c1:ab:97:e9:1a:c2:
24:a1:40:ed:77:53:c3:bd:5c:0b:0a:6e:a6:4b:e1:
68:29:a6:5f:66:b5:18:76:ea:79:c9:05:a4:14:70:
66:e5:9c:fc:76:18:3f:84:51:08:b1:dd:45:24:d5:
97:b7:69:dd:48:ff:cf:a5:b4:af:0b:ea:44:48:f5:
40:e4:34:bd:60:25:cd:ad:b6:41:88:de:a0:49:c1:
7d:2c:0b:12:40:6b:a7:19:21:e9:ef:1a:a8:75:9b:
0e:32:6a:43:ed:5d:8b:eb:a9:3c:c4:08:f9:94:35:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CD:13:11:AC:87:86:27:8F:0A:13:D3:27:DB:C2:23:0B:79:5F:22
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
1e:2b:00:3d:97:b6:3a:b0:17:e1:d2:ad:27:d5:7f:10:5a:ef:
2d:29:69:90:05:1e:a8:ed:cf:4a:1f:20:fb:8c:20:21:74:3b:
77:77:90:94:3b:84:6e:3f:83:2a:6f:19:4a:81:b3:94:08:39:
ed:69:a8:83:c5:64:08:01:dc:bf:c1:37:0a:60:13:8e:a2:1c:
5a:bb:20:22:2c:98:08:03:56:a9:de:bf:f5:22:7a:bc:96:4f:
a4:61:b7:fc:b5:6a:22:ab:19:8b:67:fc:1b:97:eb:f5:bc:fc:
d5:40:9e:30:5e:9e:bf:6c:bc:3b:56:99:52:dc:34:88:aa:94:
bd:24:e1:47:10:51:69:cc:5c:48:ed:5c:09:2f:05:c4:94:cf:
0d:9d:91:43:82:9c:d9:74:0e:f3:d3:4b:31:80:e1:90:ef:3a:
a8:4b:d7:c5:09:6a:ba:f6:ee:99:58:61:29:d6:0f:4b:f3:44:
f8:0a:bb:75:d3:d1:76:6e:2a:16:d6:e7:fc:d2:f8:a4:b4:ac:
6f:0a:71:c1:f0:39:da:ec:9f:3e:b6:44:85:1d:f9:08:cd:a0:
fa:b3:57:fc:5b:a5:be:08:99:4d:1f:46:69:17:6e:7a:f9:0d:
96:1c:a7:3a:18:2d:f0:a9:42:a8:58:fa:70:c1:b1:d5:df:12:
ca:f3:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 16:22:41 2026 by rpki-client