This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/T9vdxleGpuYrd7QqC418GOl3Urg.roa
File: T9vdxleGpuYrd7QqC418GOl3Urg.roa (raw, json)
Hash identifier: 1vl0AUGxgiEFPCNBbOSekLy5AIjZ5wZC8rJ+8DCO70s=
Subject key identifier: 4F:DB:DD:C6:57:86:A6:E6:2B:77:B4:2A:0B:8D:7C:18:E9:77:52:B8
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 019B78343EE17F1146E41BC2F0737FD381FC
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/T9vdxleGpuYrd7QqC418GOl3Urg.roa
Signing time: Thu 01 Jan 2026 06:17:28 +0000
ROA not before: Thu 01 Jan 2026 06:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44939
IP address blocks: 193.142.196.0/22 maxlen: 24
2a0d:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:3e:e1:7f:11:46:e4:1b:c2:f0:73:7f:d3:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jan 1 06:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fdbddc65786a6e62b77b42a0b8d7c18e97752b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:b7:54:20:3c:81:94:ec:b7:62:a8:e4:7b:
d6:a2:b6:cd:69:ce:97:b5:36:6f:63:e0:d6:df:20:
fd:a8:ff:30:5e:da:e7:80:e3:c5:eb:8f:ff:4f:cc:
0e:8d:33:71:f8:7a:7a:92:57:ae:ab:94:32:63:f3:
e6:cf:09:af:58:5d:88:c3:58:51:2c:76:3e:36:e8:
5e:34:4b:35:68:c2:96:88:0b:64:c9:e2:33:a3:0d:
73:b0:78:6a:45:d4:ca:5f:37:15:ac:48:eb:ad:3f:
47:d2:0f:ac:67:ef:5b:4d:d1:5a:6c:de:2f:52:be:
90:c9:36:cc:4d:c2:d6:fc:9c:c0:70:e7:db:1f:ea:
be:82:1f:aa:24:35:0c:fa:75:8c:41:1a:d3:9e:9f:
57:24:3a:e9:17:6a:6d:17:ac:29:6b:10:c8:dc:57:
8d:55:24:33:f9:d1:5e:80:ea:12:7c:52:70:24:60:
7b:cc:e8:53:57:c2:21:f4:b7:27:33:8b:37:a1:0b:
ac:9e:ab:8e:28:31:e2:13:d7:b8:c2:ae:b5:00:df:
9c:53:6d:16:ad:ee:fc:4e:9e:1b:88:22:1d:0f:7b:
47:c6:08:33:16:0a:9d:da:cb:2f:cc:85:74:83:2c:
ec:bb:3d:15:9f:9d:3f:82:b5:e4:90:b7:78:46:03:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:DD:C6:57:86:A6:E6:2B:77:B4:2A:0B:8D:7C:18:E9:77:52:B8
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/T9vdxleGpuYrd7QqC418GOl3Urg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.196.0/22
IPv6:
2a0d:2740::/29
Signature Algorithm: sha256WithRSAEncryption
7c:a0:18:35:69:c4:08:fc:c0:3e:50:bb:7c:c2:b7:11:9e:2b:
92:3d:44:ee:27:12:31:05:cc:8e:74:59:f8:40:63:b7:a6:f8:
9d:69:aa:80:03:6a:67:ca:58:17:de:ec:72:67:e8:57:67:19:
25:9f:bc:87:92:5a:a4:6c:86:55:db:ab:8b:4f:d8:39:45:71:
f8:d3:f7:ed:4e:44:87:e0:c4:06:66:ca:22:2e:4b:eb:b9:12:
a6:13:c6:d2:6d:b1:ef:ef:f5:bb:00:d9:f1:61:72:f5:91:c8:
40:1c:e1:00:f6:60:11:60:b4:b7:00:f9:d9:63:74:d0:c4:41:
05:df:bd:cc:b4:42:a6:c5:45:03:6d:82:05:38:38:45:79:2c:
7f:fd:0a:d3:e6:e0:c4:a0:ec:d4:83:77:28:cf:a3:47:f8:6e:
ae:ae:f1:30:05:e3:ab:95:43:29:b6:db:82:50:70:c3:1e:4e:
fa:e7:e0:20:e2:85:61:d4:6f:20:ed:55:11:bc:c9:d0:3a:ca:
a6:51:55:a1:12:37:bd:4c:74:2b:9e:76:4b:a3:ab:4f:08:92:
ed:4f:46:20:3f:e0:5a:0f:d3:54:e2:02:09:c6:23:55:24:c6:
a3:0c:d7:d6:c7:d7:82:f4:ba:ed:02:70:28:78:ec:a5:29:aa:
af:73:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:42 2026 by rpki-client