This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa
File: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (raw, json)
Hash identifier: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=
Subject key identifier: 94:D6:C6:E2:83:52:1E:88:19:8F:D6:D4:08:E9:2C:97:7B:08:88:25
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019B7A5AF5EF0D743AC76500EBE7A73C5D91
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa
Signing time: Thu 01 Jan 2026 16:18:59 +0000
ROA not before: Thu 01 Jan 2026 16:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212131
IP address blocks: 194.9.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:f5:ef:0d:74:3a:c7:65:00:eb:e7:a7:3c:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Jan 1 16:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94d6c6e283521e88198fd6d408e92c977b088825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:60:56:3b:d3:8d:54:d4:1b:ed:72:46:a6:
cb:5b:31:29:9d:ab:14:ea:3c:86:b3:3d:94:4f:e7:
7a:06:ff:92:75:93:5a:64:ce:28:30:de:da:2d:86:
bd:d6:3e:11:8e:5a:5d:5c:d9:d9:b3:5e:d9:21:90:
b0:63:cb:27:49:a1:08:e4:ac:79:96:9a:da:6e:53:
03:0f:9d:17:ec:c1:77:81:e2:a3:10:a0:41:c7:a1:
47:a9:0f:78:b0:7b:38:4c:36:2c:74:da:3a:f4:09:
ee:12:ea:f3:2f:21:b8:13:cb:61:17:cf:b3:31:29:
1e:d6:19:80:4d:be:36:eb:40:dd:2f:82:55:4e:eb:
dc:27:b9:3c:36:ce:25:85:c5:9a:60:ed:96:03:74:
70:93:0e:f6:11:89:86:b5:fc:72:3a:3a:c0:6c:06:
bb:b5:73:c2:8f:bd:17:09:75:3f:80:1c:1a:91:f0:
39:b2:ac:6d:51:3e:1a:ea:73:69:07:6a:db:da:53:
89:f5:65:54:d6:c3:be:90:9a:3f:a4:34:b4:f7:12:
a3:4a:c6:44:43:57:3c:4a:70:92:da:85:13:6d:9d:
b0:86:6c:60:82:f6:45:07:10:28:b9:eb:f4:fc:ec:
29:13:5e:3e:2e:47:6e:a3:f3:e2:d2:5f:bd:dd:88:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:C6:E2:83:52:1E:88:19:8F:D6:D4:08:E9:2C:97:7B:08:88:25
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/lNbG4oNSHogZj9bUCOksl3sIiCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.58.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a3:43:02:cf:33:f4:f7:1c:07:23:5c:d4:46:8c:32:28:31:
9f:f1:72:a6:cb:e2:a5:ce:14:c5:00:4b:3c:12:ba:f5:74:fb:
99:79:e1:24:a8:4c:f2:39:db:81:42:f8:e7:15:e0:0f:56:aa:
de:8e:74:a2:23:7f:ac:7a:2a:b3:8b:0b:47:c3:73:1d:4f:c4:
69:9a:fd:c3:85:f8:4a:d3:b0:86:ce:6a:ff:5f:bc:39:86:6c:
36:c3:36:1e:f0:a0:ed:6c:f8:e3:49:ee:26:70:a8:48:15:e0:
75:5c:31:80:1b:a8:78:f6:d6:60:80:16:69:14:1a:88:b8:72:
20:75:13:4d:b8:03:1c:01:7a:48:45:a6:84:ef:75:53:e1:94:
44:5d:cd:37:44:b4:86:82:03:10:28:2c:eb:32:f4:d1:fe:61:
82:f2:eb:aa:8b:64:5d:2a:3e:15:99:32:31:30:fd:e1:8b:21:
56:d6:e0:7b:fa:31:4f:18:51:ff:32:0d:87:69:3f:2e:ad:cb:
8a:59:b6:dc:53:ea:1f:7b:06:10:32:18:5f:9a:bd:e5:79:83:
1a:7d:a3:04:83:33:c3:f7:29:43:63:d1:07:69:17:99:a1:22:
cf:e9:cf:75:65:3c:ae:64:83:2f:ec:42:d6:44:1d:f2:a0:f8:
e8:36:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:34 2026 by rpki-client