This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa
File: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (raw, json)
Hash identifier: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=
Subject key identifier: 9B:66:45:FB:BE:11:52:7A:58:09:24:50:CE:2E:7C:24:69:6E:F7:85
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019B7D5C860B1C41277A6E78A2BB3146C99B
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa
Signing time: Fri 02 Jan 2026 06:19:34 +0000
ROA not before: Fri 02 Jan 2026 06:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205065
IP address blocks: 130.193.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:86:0b:1c:41:27:7a:6e:78:a2:bb:31:46:c9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Jan 2 06:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b6645fbbe11527a58092450ce2e7c24696ef785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:33:0a:9b:0c:b4:ed:fd:ec:ac:74:80:28:
f6:77:c3:69:db:a5:17:0f:da:0d:6d:16:89:8b:fd:
ec:7f:7d:c8:53:4f:2f:83:19:14:35:36:d3:c2:0e:
c0:69:5f:5b:b9:c6:5d:53:07:29:b0:93:d6:91:b2:
42:0c:f1:12:89:72:d4:76:01:96:dc:6e:74:2f:58:
57:26:0b:68:74:cd:00:72:0d:aa:26:db:45:a8:47:
1d:b1:d8:de:8a:b2:fe:32:a4:ff:25:26:71:65:09:
99:2a:1e:fa:41:4c:b0:90:2a:46:f5:8b:92:0a:70:
9b:72:70:82:78:fc:81:f8:be:be:99:18:50:f5:62:
eb:49:16:a0:46:5a:ca:8b:18:50:56:87:7d:e9:90:
e1:ba:ad:95:d3:70:af:4f:3e:62:a9:91:a2:c2:a4:
2e:a2:a1:80:3a:0c:e1:a3:0d:66:32:1a:a0:e4:44:
22:8f:47:6a:94:73:e7:09:b6:f5:ca:1e:ca:b4:43:
94:90:50:fe:5d:62:be:7c:e9:a9:b5:1c:bc:dd:81:
9a:85:2c:97:f3:54:ed:f6:93:00:f4:23:f9:b9:dd:
bd:fd:33:a8:95:d0:86:73:cf:fa:5e:b3:93:cf:4e:
e1:ee:9f:bf:6d:a3:84:a0:e6:0c:1f:4e:30:7c:a1:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:66:45:FB:BE:11:52:7A:58:09:24:50:CE:2E:7C:24:69:6E:F7:85
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/m2ZF-74RUnpYCSRQzi58JGlu94U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:86:57:34:04:92:ca:e3:7e:d9:18:62:49:f0:eb:ed:6a:58:
17:b6:5c:36:d6:65:3f:e6:f1:0f:4e:c2:5c:34:8e:16:91:28:
0d:e1:12:08:44:ab:39:14:6d:12:a7:f8:49:54:e0:a3:6a:ab:
28:c1:69:36:11:b3:86:8d:bc:04:dd:02:1b:b9:2c:61:ab:a5:
63:8b:2a:ce:9b:04:6f:d5:6f:e9:18:3e:2d:37:e9:d0:8b:15:
79:ed:c2:6d:69:fd:a5:ee:77:e6:36:12:ce:8e:cc:be:1a:31:
61:25:26:e5:d3:9f:f3:ec:c2:f2:a8:b2:4f:e3:2d:4c:1e:e6:
ec:01:dc:8d:3c:22:6f:9f:69:13:8e:40:a1:28:cf:e6:e1:f6:
ad:0d:e4:a6:23:69:dc:1a:83:01:94:96:39:5c:28:53:74:eb:
56:6d:9a:bb:56:c7:20:69:a1:5e:0b:96:08:82:37:e4:30:1c:
81:b3:5a:ac:11:c8:aa:cd:f9:91:55:26:78:0a:bf:05:27:19:
79:fa:d5:68:95:5e:8b:ae:84:8d:09:38:6a:ee:ad:27:c9:b9:
f5:3d:12:01:fa:19:53:ef:b3:29:86:d2:8d:18:39:8e:21:3c:
c4:22:e7:7b:d1:7b:9b:00:d6:4c:64:f0:1d:d8:6d:9d:37:2e:
83:27:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:28 2026 by rpki-client