This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/SPmuoUXoA6tsZiCS0_pV74-AIEk.roa
File: SPmuoUXoA6tsZiCS0_pV74-AIEk.roa (raw, json)
Hash identifier: S9bFhQItClU/AaCIXnbTpcvt5Rg2XY1adevUwVNVVvo=
Subject key identifier: 48:F9:AE:A1:45:E8:03:AB:6C:66:20:92:D3:FA:55:EF:8F:80:20:49
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019B7CEE58D1C16540A0168DD9A556C92DD8
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/SPmuoUXoA6tsZiCS0_pV74-AIEk.roa
Signing time: Fri 02 Jan 2026 04:19:13 +0000
ROA not before: Fri 02 Jan 2026 04:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12330
IP address blocks: 195.94.96.0/21 maxlen: 21
195.94.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:58:d1:c1:65:40:a0:16:8d:d9:a5:56:c9:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Jan 2 04:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48f9aea145e803ab6c662092d3fa55ef8f802049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:29:cf:3e:28:81:f6:72:fd:49:7b:49:fb:
0c:95:49:2d:99:61:b9:d8:b6:bb:3e:ef:2f:83:49:
53:ac:94:22:f5:5a:c4:48:24:91:8b:6e:12:2f:61:
0d:47:46:d0:f9:19:6e:26:ec:9a:25:fb:6c:ea:d2:
3e:3c:d7:c9:c1:d8:ca:b6:51:83:37:fa:26:5d:3e:
1e:70:fe:92:b6:7e:22:84:c8:9a:91:bf:bc:64:5f:
a3:24:fc:a0:08:8f:33:96:26:a2:c6:19:1a:b4:cb:
1a:01:25:20:fa:ad:82:ac:3b:fb:d4:a7:ff:6e:85:
e1:d1:31:01:53:db:ee:14:84:89:37:83:b1:25:a3:
1a:49:39:9b:0e:4e:eb:d2:8c:7e:5c:43:ed:d8:8f:
c0:8f:63:2a:e7:07:fc:d1:c8:8c:e8:a0:ac:84:49:
85:89:05:b6:e2:57:0f:f2:0c:f6:6c:1f:ef:77:92:
f0:d0:99:c7:39:06:cb:fc:59:0b:f6:4b:07:2f:36:
ba:d6:3f:25:e9:a9:a5:07:14:ed:4b:d7:c2:6a:0c:
fe:95:64:75:96:10:c7:6f:80:22:ef:6a:09:12:11:
84:43:74:34:17:2c:42:d9:35:63:26:11:de:6a:3a:
dc:bd:a4:92:7c:c6:1a:fb:4a:71:d0:67:ec:6e:68:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:AE:A1:45:E8:03:AB:6C:66:20:92:D3:FA:55:EF:8F:80:20:49
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/SPmuoUXoA6tsZiCS0_pV74-AIEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.96.0-195.94.107.255
Signature Algorithm: sha256WithRSAEncryption
1f:5b:e0:21:d1:45:2d:c1:7d:4b:7f:69:c9:06:92:7a:cc:98:
f1:b3:c4:fa:6b:69:bc:be:8e:91:f5:1d:9a:8f:56:24:f4:eb:
5d:32:53:fa:0a:2a:34:94:2c:48:0d:75:42:6f:e8:e9:cc:a7:
9f:f3:f4:e5:8f:7f:dc:1e:57:77:fd:80:4b:a1:46:65:92:d5:
d9:3b:d8:10:3b:ff:e5:38:b2:ad:29:87:58:80:91:5a:b0:00:
25:f2:62:ac:ca:41:43:b0:34:23:d9:e8:a8:db:20:c8:11:1f:
10:df:b2:50:b6:ec:27:af:f8:0d:55:76:a3:59:ff:a7:74:de:
cc:66:b6:df:d8:d6:aa:6d:9d:25:98:2c:49:b9:af:03:6d:c4:
b9:82:03:62:18:f3:f9:67:a7:c6:dd:3a:6e:06:25:ae:20:3e:
8d:fb:a6:8b:ed:4e:aa:c7:69:6b:30:55:dd:21:42:3d:be:1a:
55:62:74:05:9a:98:53:2e:b2:4f:fe:44:cd:fd:f5:74:f5:8b:
11:44:c4:4a:f2:e2:d3:53:23:94:66:20:d0:45:0d:ae:81:20:
04:11:45:c1:9d:13:be:4a:98:43:57:c7:f3:11:5f:d7:82:a0:
31:f7:a6:65:5b:2f:77:39:39:d7:01:e2:1c:9d:0a:22:8a:1e:
fd:b2:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:20 2026 by rpki-client