This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa
File: njp42lmk79PcnKdSKL7dBNAF-pA.roa (raw, json)
Hash identifier: fNgEvWqAsrEHm2QEX+Q7tOEmushfbaHX+HahMzZ89W4=
Subject key identifier: 9E:3A:78:DA:59:A4:EF:D3:DC:9C:A7:52:28:BE:DD:04:D0:05:FA:90
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019BA829DC7994EB166273C17DBBF7ECC227
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa
Signing time: Sat 10 Jan 2026 13:47:54 +0000
ROA not before: Sat 10 Jan 2026 13:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 185.27.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a8:29:dc:79:94:eb:16:62:73:c1:7d:bb:f7:ec:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Jan 10 13:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e3a78da59a4efd3dc9ca75228bedd04d005fa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:c0:62:6d:11:36:51:fb:b4:15:74:b4:58:
6f:c6:9b:0b:e9:7e:9c:11:e2:67:e0:f6:33:37:7e:
96:61:08:64:86:55:1d:ec:c9:8c:ec:d3:21:05:50:
98:8a:fb:70:5a:ed:8a:0a:7f:76:fc:52:44:91:d9:
e4:78:15:a3:6a:bb:fb:da:c5:2f:d1:b2:67:4b:0e:
26:c9:83:bc:52:30:84:c7:08:ac:5d:5b:41:98:34:
aa:22:db:3d:50:12:4d:87:39:aa:bb:ed:bc:d9:cd:
7d:e2:05:25:c1:04:e6:92:d3:73:1c:5c:78:ce:fe:
29:8a:fd:fc:a3:a4:f9:0d:44:0b:51:77:e5:93:01:
4c:60:de:c7:ad:92:e2:72:f2:e4:8a:a3:b7:e9:6f:
f3:ac:e1:db:50:4e:8a:69:03:76:f6:c4:cc:61:89:
7a:2c:a2:b2:62:eb:d9:7f:4b:f8:47:05:eb:d0:66:
25:28:e5:07:77:7f:a1:e9:ea:aa:99:86:15:4e:d3:
a1:29:8d:95:5d:56:e5:7f:e1:f6:2c:22:af:74:6b:
b1:cc:cc:c8:93:52:70:6a:a4:17:c1:6c:b6:04:59:
69:6b:48:1d:f5:0d:dc:77:26:e3:0e:5d:12:de:d5:
73:44:22:49:ac:17:43:c5:10:ed:01:b8:a5:dd:5f:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:78:DA:59:A4:EF:D3:DC:9C:A7:52:28:BE:DD:04:D0:05:FA:90
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/njp42lmk79PcnKdSKL7dBNAF-pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.146.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:b3:de:f0:81:95:a4:92:80:fd:85:83:4f:a6:70:53:22:0e:
a6:da:3e:de:dd:d5:4a:91:6f:bd:44:df:c7:b6:c4:21:d4:93:
1b:67:6c:e0:c5:0a:0f:04:df:0a:07:d4:e5:98:07:dd:95:ca:
5a:cc:79:e2:88:b7:a0:c4:4e:2d:7a:96:8b:9e:19:1a:a4:14:
36:99:40:a1:d4:09:6a:a0:62:da:24:fd:bd:4f:28:e2:6c:6a:
42:0b:21:6e:c6:4e:00:d9:7a:93:b0:5a:2b:e2:a5:5e:9b:f6:
ce:11:50:ad:31:53:61:e6:7d:3d:8e:32:a5:ae:58:15:0d:5f:
47:c6:a2:16:20:13:ac:9a:a9:9c:3e:47:01:16:4c:e4:70:5c:
1e:bd:36:be:5f:f1:f2:ed:1e:51:be:43:3d:12:f6:9d:57:90:
2b:02:ef:9b:d9:e4:44:09:95:64:27:b8:c7:e8:f2:f2:60:a9:
f6:91:6a:f7:ed:f0:4c:71:ff:a5:d8:6b:35:6e:dc:bb:12:a4:
a7:73:46:1f:12:03:93:85:3f:02:35:7e:b2:a1:32:2d:98:5e:
76:d1:45:8b:fc:d0:e4:d5:47:eb:a7:72:69:4c:d3:36:9a:09:
3d:2b:cc:08:02:a2:2c:da:0a:a6:0b:a0:0a:af:62:67:b1:e3:
ce:f2:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 10:03:01 2026 by rpki-client