This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa
File: nRmjyxWGF6a7tV1DmVfOj7lLijI.roa (raw, json)
Hash identifier: zc3Mo+okKisvH6UwCPx7tW7bSfZdDVD88nKDTYhyQDY=
Subject key identifier: 9D:19:A3:CB:15:86:17:A6:BB:B5:5D:43:99:57:CE:8F:B9:4B:8A:32
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 019B78350BE74A2AC29DE6F24162A3D3CF12
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa
Signing time: Thu 01 Jan 2026 06:18:20 +0000
ROA not before: Thu 01 Jan 2026 06:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211339
IP address blocks: 193.228.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:0b:e7:4a:2a:c2:9d:e6:f2:41:62:a3:d3:cf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Jan 1 06:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d19a3cb158617a6bbb55d439957ce8fb94b8a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:21:a3:31:b1:31:5e:ce:fb:04:b4:76:a4:
26:83:ad:ec:86:42:2b:61:b8:d5:1a:b2:6c:ed:13:
53:fc:15:47:01:06:c4:ca:df:0e:30:eb:6c:5c:ed:
ec:fa:df:12:8f:2f:2d:c1:91:65:d9:36:7c:1c:7c:
02:f9:0d:7a:13:f6:db:8d:bc:4b:c9:94:cf:db:54:
a2:eb:2f:6d:3e:df:12:0d:66:99:1b:2f:c2:1c:c0:
eb:74:3c:44:35:1b:d0:c1:c1:a8:c3:d3:e7:83:52:
62:48:6d:2d:92:f3:22:94:dc:43:0e:0a:f1:a2:a9:
f4:9b:cf:34:f8:a7:43:ca:7d:51:f8:69:44:ba:7a:
5d:e4:4a:44:d4:6e:a7:05:f5:42:9d:b4:b6:45:80:
8e:6a:34:2a:1f:3b:87:64:34:85:ab:0c:f2:bb:42:
f3:e8:a7:d2:d6:a5:87:18:0e:62:83:8e:7a:4f:52:
50:fa:19:7b:ec:74:03:27:3f:32:04:39:67:0a:31:
90:6a:0b:e2:8d:c1:8c:6f:29:49:52:6f:25:d3:40:
a9:76:63:b1:e6:06:86:eb:14:f9:b7:09:58:fc:39:
60:40:a8:f6:b3:88:14:b8:bc:fa:07:fd:54:bc:aa:
56:20:85:2e:f7:80:28:c2:98:ec:0d:c4:0f:87:12:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:A3:CB:15:86:17:A6:BB:B5:5D:43:99:57:CE:8F:B9:4B:8A:32
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2e:2b:0b:e3:be:4f:f5:9c:69:41:17:16:86:8f:39:f3:08:
73:fb:c1:9a:30:b5:35:23:60:c6:38:b4:86:5f:df:49:3c:c7:
5b:e3:0f:81:f0:d3:72:93:6e:d9:ee:49:86:31:c7:b7:27:ca:
e0:72:8a:d5:56:8e:ad:8d:54:4b:b5:23:6e:45:af:d9:7d:f0:
a8:84:c1:0c:e8:49:dd:84:72:3c:f4:da:dd:56:7a:0a:4d:fa:
0c:e7:06:55:42:b2:7a:7e:a6:4d:81:8d:26:41:09:b9:1c:30:
f7:9f:69:52:b1:ce:b2:46:76:39:cb:42:67:08:02:c6:97:e0:
86:77:02:24:9d:14:13:66:17:71:1b:80:67:f1:93:18:56:14:
5d:56:fd:8d:74:a5:4e:6a:42:80:90:09:bb:88:93:8a:08:86:
9b:51:c3:bf:d4:24:b3:cd:03:f3:5f:50:f6:4a:29:16:49:f3:
fe:df:59:bf:52:a6:4b:bb:2d:b7:f8:a2:b4:5f:4e:f2:6b:96:
20:4d:e3:9b:c0:eb:a5:52:c7:30:d1:5c:e6:8b:09:b0:2c:65:
bf:c2:a0:70:74:40:71:da:ff:98:67:0e:31:64:71:e7:6b:e0:
b0:f2:06:1a:90:0a:f8:7f:53:67:2a:63:fb:a8:4c:91:17:3f:
aa:5e:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:28:35 2026 by rpki-client