This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa
File: n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (raw, json)
Hash identifier: F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=
Subject key identifier: 9F:D3:69:56:D8:D0:E0:28:02:DF:8E:C3:3D:D6:41:6E:4A:E5:D6:B9
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019B7E38252B4A5551EE28598AB4ECB877E5
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa
Signing time: Fri 02 Jan 2026 10:19:27 +0000
ROA not before: Fri 02 Jan 2026 10:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25846
IP address blocks: 185.126.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:25:2b:4a:55:51:ee:28:59:8a:b4:ec:b8:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 2 10:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fd36956d8d0e02802df8ec33dd6416e4ae5d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:1f:dc:3e:10:a0:61:77:73:5a:0d:b0:00:
ca:e8:d8:f3:62:f6:fb:01:4c:09:4c:af:14:e4:52:
5f:3d:35:87:7a:cd:1e:e7:ef:05:61:d6:03:77:27:
e9:10:15:ae:57:bd:36:a1:e1:78:37:5a:0f:34:95:
2e:45:90:40:3d:60:0a:0a:99:97:1f:65:8f:c2:03:
81:d7:16:2a:39:05:ea:b9:53:56:41:0e:f0:f0:09:
34:54:6c:64:5e:a1:34:c4:65:8a:c0:5b:11:a5:36:
cc:30:18:ef:0a:93:05:60:3d:97:10:a7:20:94:6f:
b2:98:eb:a2:53:06:c1:8f:1a:17:4e:b5:e1:81:73:
7e:ce:5e:b8:c7:48:65:ca:89:a7:d4:72:3a:65:32:
ee:c6:4f:8b:47:76:5b:4a:a2:48:f1:b3:42:8e:88:
a7:e1:d9:c7:67:fe:50:a8:42:20:57:84:08:2b:96:
10:85:ed:ca:70:ac:ee:91:f6:61:71:ca:62:12:22:
f6:93:d4:51:f1:93:78:48:37:ee:2c:bd:26:91:f2:
47:b0:bf:98:bc:60:e7:7c:c4:11:9f:4f:bf:1b:71:
fd:26:2d:af:17:cf:b0:64:65:e0:be:7c:49:26:19:
0f:89:39:3b:34:bc:45:5d:3a:88:4b:92:79:2a:c0:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:69:56:D8:D0:E0:28:02:DF:8E:C3:3D:D6:41:6E:4A:E5:D6:B9
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:c8:96:97:c4:61:0c:5c:81:15:98:5b:b2:25:72:0f:fb:33:
e2:8b:e4:7e:1b:5f:dc:96:cb:ac:c5:39:31:39:62:41:79:eb:
5a:ca:78:61:d3:1c:3c:12:d6:ea:c3:5e:42:11:66:f1:d9:9f:
02:88:d0:ef:ec:35:02:71:b0:3d:f6:f0:9e:51:be:8c:17:9a:
d7:b1:22:a0:c8:62:b3:fa:57:1c:62:82:00:44:7f:fb:34:ee:
31:42:9d:fb:3f:b5:6b:07:da:11:77:5f:71:86:5f:36:2a:1d:
59:99:bf:1f:47:54:c2:8e:0f:e5:a4:7a:1e:ac:76:1e:8d:33:
c5:4c:ba:a5:4a:28:72:f6:df:65:74:27:93:13:db:f1:ad:bf:
43:cc:f2:6b:6d:dc:73:e2:02:cb:9d:e9:d4:3a:e9:6b:5d:e4:
26:ae:87:62:2b:17:17:15:58:ab:de:72:a0:50:15:15:73:e9:
98:7c:2f:69:84:e8:77:ec:fc:96:66:6e:24:a3:1e:26:53:35:
33:79:a5:ab:ac:af:de:c7:cb:ab:45:c3:65:16:e6:d5:da:a7:
89:50:c0:c5:ba:49:9e:31:47:0b:ff:e7:9c:ee:08:62:ea:63:
fe:6d:10:fb:7b:b3:9a:6b:02:89:42:96:3e:dc:9e:58:a0:9e:
21:79:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:39 2026 by rpki-client