This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/_J-j7B7EBVpS6iWSIcOV728Uk0g.roa
File: _J-j7B7EBVpS6iWSIcOV728Uk0g.roa (raw, json)
Hash identifier: +Uy6WqqggKFrmTGgRkmBqe1HnPUwyMjAxaGGze9f2+I=
Subject key identifier: FC:9F:A3:EC:1E:C4:05:5A:52:EA:25:92:21:C3:95:EF:6F:14:93:48
Certificate issuer: /CN=306134bcf59f581d6b76630cfa87867876a29215
Certificate serial: 019B7F148BD8DABFD9AE1D72D0D6F4B625E0
Authority key identifier: 30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/_J-j7B7EBVpS6iWSIcOV728Uk0g.roa
Signing time: Fri 02 Jan 2026 14:20:11 +0000
ROA not before: Fri 02 Jan 2026 14:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5500
IP address blocks: 193.93.203.0/24 maxlen: 24
2a02:56c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:8b:d8:da:bf:d9:ae:1d:72:d0:d6:f4:b6:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306134bcf59f581d6b76630cfa87867876a29215
Validity
Not Before: Jan 2 14:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc9fa3ec1ec4055a52ea259221c395ef6f149348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:2e:45:33:8a:e2:b3:db:b3:4a:c2:22:f0:
e6:40:0e:68:89:ec:d5:58:ca:32:b0:a4:da:36:98:
03:08:2f:c9:40:9a:c1:0c:55:c3:0b:2a:85:e5:49:
eb:d7:7c:52:86:7e:5c:e1:50:0c:13:97:c0:fc:c7:
3a:56:d5:38:60:4c:64:ba:e6:f0:cd:32:45:3c:73:
d5:7c:6e:fd:ca:45:26:2d:73:73:d8:5f:85:63:ff:
52:e7:87:81:e2:dc:88:48:7a:cc:60:6b:c3:89:0f:
98:15:ae:b8:7a:50:a6:b6:83:7c:ab:4e:48:5f:56:
41:cf:dd:58:5d:53:72:20:8d:80:d2:21:c6:3c:99:
64:20:f5:75:99:34:e8:5d:52:e1:1f:aa:bc:34:7a:
e4:6b:fc:9f:ef:66:5d:d0:9a:c7:eb:1b:b2:ba:bb:
b1:ca:32:5b:c7:a3:ec:05:97:84:c5:0e:58:32:56:
f1:ee:ff:f7:91:d3:81:47:39:a3:1e:e0:a8:1d:03:
75:57:e1:f1:9d:80:c8:93:f7:ce:11:ba:46:86:19:
1a:94:a2:3b:32:7e:7d:cf:c5:f6:7a:f8:fa:7f:44:
30:c4:46:fa:1f:f7:5e:a9:b2:3c:45:6e:19:7e:e8:
b4:0b:50:84:91:07:dd:4b:d7:03:08:9e:63:bc:34:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:A3:EC:1E:C4:05:5A:52:EA:25:92:21:C3:95:EF:6F:14:93:48
X509v3 Authority Key Identifier:
keyid:30:61:34:BC:F5:9F:58:1D:6B:76:63:0C:FA:87:86:78:76:A2:92:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGE0vPWfWB1rdmMM-oeGeHaikhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/_J-j7B7EBVpS6iWSIcOV728Uk0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a8941a-7250-48ec-aaf8-6d8ea9d1cd73/1/MGE0vPWfWB1rdmMM-oeGeHaikhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.203.0/24
IPv6:
2a02:56c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:1d:02:43:d5:68:48:7e:03:a0:2d:29:7d:ad:8f:d7:69:f0:
ed:7e:b5:3a:d3:73:8f:ef:2b:f3:0e:81:b7:5b:57:b4:9c:88:
ab:54:78:87:2f:f5:91:bb:f6:d9:9e:b9:bc:b5:4c:4f:e6:0e:
c7:1a:7b:8e:92:b7:21:73:c7:a0:83:71:b9:23:66:42:ab:af:
97:eb:9f:c8:b2:75:33:61:63:3e:2c:22:35:c7:5d:2b:ca:6e:
e3:0f:d4:b4:5b:b4:5b:cb:73:b4:fc:01:74:e8:e3:4b:55:e3:
d3:03:25:71:58:cd:a2:27:24:57:b9:fa:a9:fc:2a:8b:21:93:
8e:3a:90:a3:d2:81:59:cc:bb:7d:46:58:85:d7:f8:31:84:96:
e9:b9:9e:5f:38:95:0e:d6:cb:fb:07:fd:d9:e4:dd:69:9d:95:
de:62:f2:b1:a9:fd:13:b0:70:82:eb:0d:cf:ef:d5:a5:2f:51:
f8:00:ef:20:0a:f1:13:51:d7:d4:5f:03:7e:68:b7:1a:96:36:
11:ca:9d:ab:96:30:dc:03:b7:95:7d:39:d0:e1:62:9f:f1:d0:
1a:d9:6f:a3:16:9c:4f:74:e4:d2:ea:64:bc:0a:ee:9a:41:27:
0a:df:bf:a3:3c:5a:50:09:8e:c9:6b:5f:0c:47:e0:a1:d7:17:
78:b9:10:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:33:32 2026 by rpki-client