This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/mvsSWkXsoZaA1ourpWIv5ndzQus.roa
File: mvsSWkXsoZaA1ourpWIv5ndzQus.roa (raw, json)
Hash identifier: NCT6Fnjfvpm4oH5VP79wsNStA4KElS5NV2qxt3IiN5Y=
Subject key identifier: 9A:FB:12:5A:45:EC:A1:96:80:D6:8B:AB:A5:62:2F:E6:77:73:42:EB
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 019B76EAED9F5C301837777FF76A52ADCF7A
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/mvsSWkXsoZaA1ourpWIv5ndzQus.roa
Signing time: Thu 01 Jan 2026 00:17:46 +0000
ROA not before: Thu 01 Jan 2026 00:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33943
IP address blocks: 84.19.64.0/19 maxlen: 19
2a0a:8380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ed:9f:5c:30:18:37:77:7f:f7:6a:52:ad:cf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Jan 1 00:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9afb125a45eca19680d68baba5622fe6777342eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:7f:03:b3:1c:a5:45:73:ee:38:2a:1b:7b:
20:ef:f8:dc:a2:dd:6a:15:dd:05:bb:fb:b7:68:fd:
6c:06:76:c5:6f:41:aa:73:7a:64:85:ed:f8:4b:b5:
3d:29:5d:a4:50:25:81:63:6c:05:5d:79:18:4f:1f:
01:3b:2e:ba:b5:c2:e2:e5:da:4b:35:ba:50:e2:ea:
ea:d5:95:33:32:66:1f:d6:19:b5:dc:5a:5a:0a:39:
6c:88:c5:86:a5:18:d7:5f:9e:71:4d:0e:d2:1c:85:
3f:09:74:f9:47:a8:17:75:78:4a:58:26:28:5a:09:
57:b5:b5:38:16:d5:fc:6f:f2:45:25:7b:11:59:c9:
8a:a8:1f:56:28:23:aa:09:fb:db:9c:25:bf:93:f4:
40:62:ce:35:48:29:4f:ff:57:72:a2:27:bc:2f:6b:
da:2b:bf:c0:6f:1d:55:a7:55:5b:30:01:34:88:c0:
a9:5a:7f:2a:f7:9f:3b:f9:69:1d:b0:c7:92:d1:09:
9d:5c:83:9d:22:f1:4b:20:25:5f:e9:26:06:fb:22:
de:43:ef:6c:f3:16:89:10:bb:27:79:13:c1:33:6a:
c8:4c:b7:e6:42:13:53:5c:34:bd:f4:2f:6c:3f:f7:
b8:b5:db:91:88:03:12:25:2e:d9:bf:d8:ab:3a:35:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:12:5A:45:EC:A1:96:80:D6:8B:AB:A5:62:2F:E6:77:73:42:EB
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/mvsSWkXsoZaA1ourpWIv5ndzQus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.64.0/19
IPv6:
2a0a:8380::/29
Signature Algorithm: sha256WithRSAEncryption
ad:f0:d7:86:0a:01:1c:8d:13:6f:57:77:07:2e:d0:94:2c:a1:
da:bb:e4:0a:16:29:14:a8:79:22:c4:cf:5c:e5:61:cc:02:de:
5a:f5:87:97:fc:b5:55:58:91:28:0b:66:19:cb:5c:33:be:5d:
11:ec:65:d2:52:43:98:c2:a6:85:93:e4:97:46:da:ea:9e:40:
4e:07:1a:4d:55:2b:27:93:88:b4:c1:0a:a6:8f:da:0b:58:c5:
cb:cf:8d:e8:a6:75:6d:4c:43:90:90:cf:56:b6:51:08:1a:e5:
c9:8d:f9:8e:f8:e9:8b:6d:dc:a4:21:9c:61:f6:c9:fe:79:bc:
ab:45:07:aa:00:84:c4:fe:b4:3f:58:20:50:7d:f4:f2:2b:2a:
16:70:93:67:cf:7a:1f:1c:5d:16:bc:fc:d0:f4:d2:c1:ed:22:
4e:1a:27:f4:fa:f3:6d:ea:93:97:b2:39:ff:38:4f:c1:e0:d6:
b7:91:8a:fe:e2:ac:30:27:f0:0c:4c:9a:f5:34:02:8f:aa:01:
64:4b:33:69:2f:7f:fc:6e:c1:14:50:5d:6f:4a:70:3f:a0:cd:
ca:b4:64:92:5a:b4:36:b5:4e:94:19:6e:ff:72:57:18:a8:88:
fe:c5:ba:70:43:88:ea:83:43:00:dc:36:98:df:01:a4:5f:94:
7c:54:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:17 2026 by rpki-client