This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/n2qaysiqOxYybG2o_t96d-JWP-0.roa
File: n2qaysiqOxYybG2o_t96d-JWP-0.roa (raw, json)
Hash identifier: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=
Subject key identifier: 9F:6A:9A:CA:C8:AA:3B:16:32:6C:6D:A8:FE:DF:7A:77:E2:56:3F:ED
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019B77C71D2C2C2C829B135544C2073AD6EA
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/n2qaysiqOxYybG2o_t96d-JWP-0.roa
Signing time: Thu 01 Jan 2026 04:18:16 +0000
ROA not before: Thu 01 Jan 2026 04:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198964
IP address blocks: 195.226.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:1d:2c:2c:2c:82:9b:13:55:44:c2:07:3a:d6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jan 1 04:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f6a9acac8aa3b16326c6da8fedf7a77e2563fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:98:38:87:66:f2:73:c3:c0:00:3c:6f:a4:
a6:70:23:a7:a5:cd:ea:d5:a4:eb:41:0a:81:cb:5e:
20:97:24:65:af:d5:39:fe:3c:1b:4c:23:64:ef:42:
08:cb:05:6c:9f:f3:30:74:3b:ea:2c:4d:de:c3:78:
ff:42:b0:58:af:18:ed:79:9e:17:19:53:44:70:81:
87:40:24:55:ee:c1:45:d8:7d:05:1d:c0:8f:07:1c:
39:b9:09:c0:f2:c9:7c:e0:66:23:c6:00:3d:42:1a:
e8:ef:da:83:dd:9c:61:f4:e4:d7:fd:b5:32:82:24:
1c:ee:8b:b8:f7:62:fa:51:63:c5:ba:09:7b:38:86:
bc:60:b9:56:da:26:83:ae:3b:55:46:94:0b:6f:cd:
3b:e9:0d:32:42:f4:d9:ef:86:f3:53:d3:14:85:26:
9d:2d:9e:2a:76:ce:ed:b4:e9:43:74:a9:5d:56:0a:
ff:bc:43:97:10:90:92:5a:b7:a7:61:10:43:71:96:
e5:fb:a2:50:8d:3e:e1:5a:af:1c:b2:e7:c0:95:cb:
08:2e:a0:da:3f:42:63:c1:32:e2:65:f7:61:6e:81:
d1:8b:0a:97:89:77:1d:92:48:63:10:06:93:d0:45:
21:91:94:8c:ec:46:c4:d5:33:71:a6:61:37:f1:b1:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:9A:CA:C8:AA:3B:16:32:6C:6D:A8:FE:DF:7A:77:E2:56:3F:ED
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/n2qaysiqOxYybG2o_t96d-JWP-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.95.0/24
Signature Algorithm: sha256WithRSAEncryption
02:07:b3:99:e3:c1:a8:cd:38:bf:55:73:9e:22:4c:6e:55:f5:
62:e6:ba:62:3c:18:68:09:20:1b:7a:3b:e2:55:8e:34:5e:8f:
08:12:30:83:db:12:53:07:ee:bd:61:07:07:8d:8b:6e:4c:fa:
55:60:b5:bf:84:f3:3c:99:17:20:40:45:cc:93:36:5f:1a:ec:
69:21:af:43:30:15:60:2f:cf:ba:0e:42:45:0a:db:87:59:38:
de:12:bc:a0:66:52:10:56:19:95:f6:33:1f:f9:4d:3e:6e:24:
80:c3:a1:dd:d4:96:61:5f:e2:62:82:f1:fd:fa:97:e8:5d:2c:
c1:b0:2a:a7:be:8a:a1:bc:71:b4:36:d9:3b:08:c1:0a:c2:40:
da:5e:89:76:58:42:4e:e6:fa:bc:c8:9e:92:e5:8e:79:bb:2b:
99:ba:6b:9b:e5:a9:c4:b5:d9:ac:93:28:e3:34:70:6c:86:96:
50:78:25:f6:e8:8d:6c:b2:ae:71:a3:66:eb:34:49:8b:8a:b7:
7c:e0:1f:02:f1:31:44:a5:f5:87:7c:6a:70:b7:48:f3:55:97:
7f:05:02:ec:c8:d9:c3:59:a1:ab:07:7c:2b:33:ab:1b:58:b5:
36:e3:14:84:49:c2:32:85:ac:d1:7e:30:f6:fe:08:4d:57:e9:
dc:a4:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:21:17 2026 by rpki-client