This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa
File: N9C_JWPiFkOC1j2judupgEeq0iU.roa (raw, json)
Hash identifier: onz9tBjIM6iuiH8fpkpnTg4bf4irpTsQvTxzH8Ai1N8=
Subject key identifier: 37:D0:BF:25:63:E2:16:43:82:D6:3D:A3:B9:DB:A9:80:47:AA:D2:25
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019B23255DDBB252AA761F6B83B5FE6A5224
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa
Signing time: Mon 15 Dec 2025 17:53:30 +0000
ROA not before: Mon 15 Dec 2025 17:53:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 89.106.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:23:25:5d:db:b2:52:aa:76:1f:6b:83:b5:fe:6a:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 15 17:53:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d0bf2563e2164382d63da3b9dba98047aad225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:ce:63:e3:fa:1f:4d:a8:98:e7:a2:80:e2:
1d:c1:c3:06:55:54:21:e1:69:56:60:19:93:70:29:
cc:37:ec:a8:e2:f4:e2:db:8a:8a:37:fb:58:62:ff:
05:da:59:ef:07:14:70:da:27:73:01:42:cb:1a:82:
a3:c3:6e:c2:ba:ad:4d:01:69:81:3c:b9:11:db:bd:
01:72:59:52:1a:eb:40:0b:55:e6:75:dc:32:6e:b0:
ca:91:17:25:a0:92:a6:ae:ff:b4:66:c0:93:91:ff:
f6:4f:06:07:0a:a9:18:11:08:cf:a9:43:21:a9:44:
0f:3b:c9:0d:a9:c8:a6:4d:35:a0:3d:a8:fc:a3:e6:
66:55:56:58:57:56:d3:29:12:f5:53:10:57:1a:8b:
c4:0a:9d:4b:db:4e:25:ae:2c:fa:5b:1f:0a:09:9b:
f2:fe:2c:c7:93:62:c1:ac:17:e7:a6:97:b0:cc:05:
39:b6:c7:1b:26:a2:33:95:76:7e:64:28:c3:51:e5:
47:f9:98:ca:bf:25:d8:2f:c8:9b:56:67:ac:5f:6a:
d5:b7:3f:51:7b:8f:b0:fd:3e:c3:17:0e:f9:c6:f3:
7a:ed:b5:0c:29:f9:32:81:e2:be:d2:57:76:b4:62:
70:2c:67:6b:29:66:0e:aa:ad:37:63:21:89:f9:40:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:BF:25:63:E2:16:43:82:D6:3D:A3:B9:DB:A9:80:47:AA:D2:25
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.26.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4d:9f:a4:8f:73:61:ae:51:65:5d:b7:ad:83:c0:8c:2b:6b:
aa:f1:36:f4:d2:da:ed:e8:62:cf:34:f6:11:e8:18:d1:7c:48:
fa:8b:3b:60:c0:d8:e3:b9:7e:b4:a3:7b:2e:48:19:b3:e4:d6:
dc:41:6f:db:25:77:9e:ce:d5:c0:f2:38:e1:be:01:31:96:62:
0a:c1:5f:11:e2:77:b8:42:42:70:ed:c7:77:7e:09:c8:fa:dd:
61:b1:bb:24:c8:8b:d6:ee:08:88:cc:5c:0b:5f:ad:23:32:1a:
43:8b:34:c9:93:f1:f6:cb:18:63:df:1d:ad:93:27:71:e4:83:
4c:b4:48:4d:f5:a3:3b:97:41:c8:7b:76:38:34:5e:cb:a4:06:
f4:b3:5e:52:16:03:50:75:22:f5:f3:7d:e2:fa:5f:cf:33:6f:
89:b6:0b:7a:ee:3a:a5:ee:78:fe:96:d7:c2:25:08:6b:79:43:
1f:bb:04:7a:aa:9e:3a:ad:60:3e:b5:11:27:b2:68:49:d0:5f:
c8:7c:13:9b:7a:35:66:b9:d7:76:42:b1:87:84:93:91:3c:53:
61:13:74:56:9a:f8:96:64:96:2e:1c:c8:db:99:2f:5c:e1:e6:
c7:40:19:ca:d2:e8:0f:50:aa:15:35:4d:bd:54:71:82:d9:e9:
bf:ff:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:06:47 2025 by rpki-client