This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa
File: M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa (raw, json)
Hash identifier: lAB0vTky9FECb8JWHkfQm6v4LaD80/MiZF2Q6KaOlC8=
Subject key identifier: 33:D8:17:87:76:1E:E9:34:BD:C5:4C:D0:A7:55:F5:78:99:E8:D1:D8
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 019B797F3087EADFD1865461B8B2F3F6C171
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa
Signing time: Thu 01 Jan 2026 12:18:57 +0000
ROA not before: Thu 01 Jan 2026 12:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35779
IP address blocks: 188.93.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:30:87:ea:df:d1:86:54:61:b8:b2:f3:f6:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 1 12:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d81787761ee934bdc54cd0a755f57899e8d1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:de:be:28:1b:19:21:85:71:be:27:32:9c:
11:2c:c8:46:53:69:5e:e3:2d:9f:c5:ad:cf:4f:d2:
59:05:65:f9:e2:16:6c:5d:21:13:dd:c5:34:95:9f:
21:30:93:e3:ea:f3:37:e6:94:6e:fb:67:6c:ea:69:
da:dd:f1:b1:c6:4e:ad:81:81:aa:b9:11:96:aa:1d:
e2:f6:40:31:e0:64:88:6d:45:88:07:7b:be:07:4c:
3c:82:23:d7:e2:81:d6:f6:3d:de:18:43:4a:c4:0a:
31:09:6d:59:58:d6:80:a1:ef:d4:6d:d9:9d:2e:a6:
bf:08:0b:03:be:c0:1d:76:6b:d1:12:50:8f:d4:0a:
c8:1b:19:34:2b:e2:3a:f3:5b:74:af:9c:31:1c:67:
f2:cb:bd:39:f7:d0:9e:48:e1:30:8a:5e:66:e4:9f:
9e:14:b9:16:82:16:3e:a3:a2:60:9a:a2:aa:8c:9f:
e8:46:53:d4:f0:26:b9:58:ea:ee:5a:c7:d1:78:ce:
ce:0f:7d:43:1c:17:cc:f7:6b:e6:49:24:37:f3:07:
ff:0f:83:c1:f0:35:5d:b8:41:99:02:05:1e:d4:2a:
64:0f:09:eb:f6:cd:54:a8:c1:35:bd:95:7a:03:77:
88:b8:73:b7:c4:4c:c9:11:3c:ec:90:f5:34:e2:15:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:17:87:76:1E:E9:34:BD:C5:4C:D0:A7:55:F5:78:99:E8:D1:D8
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/M9gXh3Ye6TS9xUzQp1X1eJno0dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:87:fe:59:ee:5c:a9:ef:9d:52:2a:dd:8a:12:2b:d3:63:dc:
86:c7:97:4f:24:48:3f:99:66:a0:59:a3:35:07:50:33:48:ff:
bc:03:92:31:c5:d2:9b:6a:fe:ba:af:13:35:5e:08:cc:ab:b3:
c5:81:d5:ab:54:ff:e6:cb:ca:e1:d2:00:9c:2e:99:6d:c0:cb:
f7:12:5a:9e:a7:92:2a:e5:e9:a1:2f:9a:1a:7f:b8:aa:29:ad:
b1:a6:90:8c:d6:18:ae:7e:ec:fa:d7:90:4b:c7:cc:1b:bb:46:
89:f6:6c:da:e0:b1:92:9c:32:26:a0:fc:6e:1d:7e:9e:f1:20:
23:7c:ab:2d:88:ea:29:a3:e5:76:de:f4:04:f8:ca:9b:ce:b4:
7e:81:f4:62:1d:36:3e:93:e8:f2:27:10:bd:59:5f:ef:52:0e:
58:64:2e:70:e4:ab:35:42:75:8c:ce:ab:5f:8b:ce:0f:02:94:
61:69:61:e8:e1:af:9c:48:f8:97:b0:61:73:6f:68:2c:c5:9f:
29:5e:ab:ec:3c:78:63:cf:a4:b1:e8:45:57:6c:94:27:d1:1b:
1d:7a:59:dd:32:73:27:5b:8b:6d:95:b2:d7:62:27:64:b1:8f:
0a:38:f2:1b:cc:26:d2:ab:df:04:cb:3e:69:a9:ef:87:ac:d9:
66:0c:4e:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fzCH6t/RhlRhuLLz9sFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Q4MTc4Nzc2MWVlOTM0YmRjNTRjZDBhNzU1ZjU3ODk5ZThkMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DjevigbGSGFcb4nMpwRLMhGU2le
4y2fxa3PT9JZBWX54hZsXSET3cU0lZ8hMJPj6vM35pRu+2ds6mna3fGxxk6tgYGq
uRGWqh3i9kAx4GSIbUWIB3u+B0w8giPX4oHW9j3eGENKxAoxCW1ZWNaAoe/Ubdmd
Lqa/CAsDvsAddmvRElCP1ArIGxk0K+I681t0r5wxHGfyy70599CeSOEwil5m5J+e
FLkWghY+o6JgmqKqjJ/oRlPU8Ca5WOruWsfReM7OD31DHBfM92vmSSQ38wf/D4PB
8DVduEGZAgUe1CpkDwnr9s1UqME1vZV6A3eIuHO3xEzJETzskPU04hVJEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPYF4d2Huk0vcVM0KdV9XiZ6NHYMB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvTTlnWGgzWWU2VFM5eFV6UXAxWDFlSm5vMGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvF16MA0G
CSqGSIb3DQEBCwUAA4IBAQBsh/5Z7lyp751SKt2KEivTY9yGx5dPJEg/mWagWaM1
B1AzSP+8A5IxxdKbav66rxM1XgjMq7PFgdWrVP/my8rh0gCcLpltwMv3Elqep5Iq
5emhL5oaf7iqKa2xppCM1hiufuz615BLx8wbu0aJ9mza4LGSnDImoPxuHX6e8SAj
fKstiOopo+V23vQE+MqbzrR+gfRiHTY+k+jyJxC9WV/vUg5YZC5w5Ks1QnWMzqtf
i84PApRhaWHo4a+cSPiXsGFzb2gsxZ8pXqvsPHhjz6Sx6EVXbJQn0RsdelndMnMn
W4ttlbLXYidksY8KOPIbzCbSq98Eyz5pqe+HrNlmDE7D
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:32 2026 by rpki-client