This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa
File: n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa (raw, json)
Hash identifier: vxSCI94X5gLK34ETwzNqc8WiUEXZwqWPkOKd99kM8vc=
Subject key identifier: 9F:84:A7:D2:72:4D:C4:9A:88:25:19:60:2B:2F:EA:FE:D9:9F:C3:E5
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019B78A35158DD2EA28267EEBDBDE4533B0F
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa
Signing time: Thu 01 Jan 2026 08:18:47 +0000
ROA not before: Thu 01 Jan 2026 08:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15542
IP address blocks: 193.177.166.0/24 maxlen: 24
2001:67c:45c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:51:58:dd:2e:a2:82:67:ee:bd:bd:e4:53:3b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Jan 1 08:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f84a7d2724dc49a882519602b2feafed99fc3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:92:17:bb:51:c9:69:d5:6a:31:37:38:34:
50:31:13:99:ae:cb:73:0e:7e:d0:95:aa:10:62:11:
27:56:c2:aa:cd:b9:37:db:97:73:a7:ec:70:55:2b:
79:3f:3d:90:38:a4:8a:d0:72:cc:72:fe:ad:7e:90:
f3:f3:cc:5a:a9:78:a7:fe:4d:8a:d2:5d:1b:86:0d:
a7:74:66:68:2e:a0:53:68:31:49:60:43:26:91:2d:
6d:45:3d:d8:81:03:b6:b3:0c:91:58:b3:2b:f7:1f:
eb:37:a4:53:02:9a:dc:a0:47:1e:95:ff:e6:fb:13:
aa:c2:dd:a6:e7:4d:7a:70:af:18:0f:59:0e:ba:03:
b3:fa:73:ab:fb:90:c5:d4:4d:9b:10:80:b4:83:9d:
9f:3b:e9:4d:21:7b:cf:f8:bc:e0:b3:6f:52:7b:ef:
a9:f4:18:77:78:dc:94:79:57:29:fa:97:5a:8c:7b:
c5:7e:7d:90:73:6e:35:2c:ca:82:c8:30:79:e5:97:
10:b5:be:d8:50:9f:08:16:84:63:ee:f3:0c:2b:fe:
93:aa:77:70:c6:dd:c8:ff:1e:3d:88:5a:cc:81:d8:
f0:1d:ae:dc:e7:78:37:5c:2d:77:8b:5f:74:f1:e9:
bc:79:1a:f8:69:62:b7:cd:f8:62:37:03:c3:5e:02:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:84:A7:D2:72:4D:C4:9A:88:25:19:60:2B:2F:EA:FE:D9:9F:C3:E5
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/n4Sn0nJNxJqIJRlgKy_q_tmfw-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.177.166.0/24
IPv6:
2001:67c:45c::/48
Signature Algorithm: sha256WithRSAEncryption
70:9d:44:74:2c:6a:68:30:1c:b7:66:96:61:1c:5f:6a:db:0e:
63:19:31:03:5f:a2:4d:b0:3b:6f:32:b2:d8:bf:ef:02:28:50:
d9:02:8a:84:14:db:4d:9f:ff:2c:d7:c7:62:c3:5d:eb:90:77:
1f:97:95:1d:a9:11:9d:c3:3d:bc:f6:ca:bc:68:a5:93:41:63:
45:04:b6:b6:2f:2c:10:4d:65:69:47:17:3b:24:86:a9:30:b4:
91:66:42:fb:f8:6e:68:3a:51:50:bd:6e:39:5b:9c:a3:d3:6f:
89:1f:50:a2:b9:3f:07:87:ea:61:e1:91:91:f0:92:ce:36:8e:
48:b8:1e:6f:37:e6:0a:8e:e0:25:b0:d9:4e:b7:70:9f:1a:5b:
1a:35:16:44:6b:98:f8:4a:71:13:e9:f9:43:f0:73:10:0c:eb:
1d:ed:e4:e9:d4:fc:64:10:c2:e8:d8:dd:6d:90:20:11:d8:45:
ee:ed:10:16:d7:6f:97:9e:c2:f1:f4:15:81:4e:51:87:5a:7e:
a4:6f:13:88:10:97:92:ce:84:c1:78:05:61:37:df:9e:45:24:
bf:51:9d:5e:af:f6:e2:4b:09:c4:6d:cc:56:f6:0e:0f:bb:61:
c6:41:95:7f:b4:e7:72:d7:9c:06:f9:31:f5:c7:49:c7:a7:ad:
53:84:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:31:07 2026 by rpki-client