This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa
File: k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa (raw, json)
Hash identifier: /NoGy2Y6tDxjVqRQyw3GqgVp9/DVQaxc7eXTRGD4qk0=
Subject key identifier: 93:42:2E:96:5C:AF:D8:6C:67:C8:DD:49:3A:8F:E8:A0:E6:0F:B3:A4
Certificate issuer: /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial: 019C3D0E40F56E7F0084774B501BDED4EA7C
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa
Signing time: Sun 08 Feb 2026 11:41:10 +0000
ROA not before: Sun 08 Feb 2026 11:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 195.24.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3d:0e:40:f5:6e:7f:00:84:77:4b:50:1b:de:d4:ea:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Validity
Not Before: Feb 8 11:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93422e965cafd86c67c8dd493a8fe8a0e60fb3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:8a:cc:e8:69:01:54:55:2f:6d:00:56:22:
fb:44:3a:7a:56:2e:7c:78:df:6d:d2:75:46:fc:3f:
fd:6b:83:16:fe:de:f9:7d:2d:b5:be:72:34:55:7b:
d9:31:20:d0:d1:17:8c:a4:b9:54:3d:39:f2:b5:ec:
f9:ae:39:b6:15:52:b8:8f:35:a2:0a:16:57:8e:65:
a4:85:4c:f5:1e:7c:21:f8:f1:b0:db:62:f7:a4:ce:
26:7e:97:f2:8f:86:5b:34:fc:7e:fc:e1:13:2b:f0:
a1:3f:3b:e4:2d:27:8b:51:07:1a:07:fc:c5:f4:94:
d9:e5:1a:a9:82:49:2f:35:0a:22:ed:77:2f:a3:47:
63:5d:60:8f:21:6e:70:b7:30:6d:89:80:ab:27:ee:
f9:22:53:c2:09:df:38:5b:3d:fa:73:14:b9:d4:6d:
a5:21:9c:7c:68:af:8f:f9:03:f1:e8:9c:6d:30:34:
22:a7:ee:96:71:b2:d0:b4:80:9e:94:ca:52:4b:e5:
4b:4f:6a:12:18:28:b7:a1:2e:28:de:9e:8c:4d:0e:
01:9e:97:21:98:27:8d:1d:a9:22:d3:0e:62:c2:aa:
ed:1e:1b:be:b2:cc:46:b8:b6:74:9d:31:5c:53:1a:
a6:ac:77:fa:97:b4:8a:36:fd:1a:06:9e:be:14:14:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:2E:96:5C:AF:D8:6C:67:C8:DD:49:3A:8F:E8:A0:E6:0F:B3:A4
X509v3 Authority Key Identifier:
keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:41:e3:14:96:07:88:f5:4c:19:30:e3:3a:82:b9:d9:08:ea:
e3:6c:06:df:97:67:c6:5b:a9:21:3d:48:92:94:af:39:f1:66:
50:bc:24:c7:75:57:4c:ad:b7:f9:6b:9b:b4:ea:11:06:e1:9f:
7f:29:86:52:aa:8b:8b:39:21:01:f3:c5:05:68:4d:97:60:18:
1d:61:b6:b8:df:77:e8:54:15:21:f0:3f:db:f3:9f:82:53:18:
e1:04:23:c1:dd:82:68:8d:f5:89:6e:54:53:ab:35:b0:31:00:
b6:96:2b:54:ef:ed:33:3c:76:c4:10:68:e9:46:94:21:bd:e3:
56:51:fd:d8:f1:07:2d:bc:89:92:e8:3f:ec:01:e6:08:d0:1e:
4c:30:c9:ec:da:1d:3b:49:10:e5:88:53:e0:42:5e:b6:de:0d:
64:7c:7f:48:3d:f9:5e:5b:4a:bb:77:3e:8c:39:e2:49:69:27:
f5:f2:fa:10:da:73:66:90:8c:7c:74:65:20:06:c1:bf:58:56:
80:8c:a4:7a:c0:7f:0b:e4:e5:fe:2b:29:c1:08:1a:6d:eb:52:
98:4f:2c:9b:c8:33:7f:ff:47:2a:9e:6e:5b:9b:ee:99:8c:04:
86:32:a5:74:c7:6a:ba:c3:88:a6:83:7f:32:60:68:8f:a8:48:
cf:f0:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:58 2026 by rpki-client