This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/9EY388q_8N1ByylpLUNJcoEQmNc.roa
File: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (raw, json)
Hash identifier: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=
Subject key identifier: F4:46:37:F3:CA:BF:F0:DD:41:CB:29:69:2D:43:49:72:81:10:98:D7
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019B7BA4D53DEE23D27975AC4EF2A36ADD1B
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/9EY388q_8N1ByylpLUNJcoEQmNc.roa
Signing time: Thu 01 Jan 2026 22:19:18 +0000
ROA not before: Thu 01 Jan 2026 22:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42198
IP address blocks: 194.26.237.0/24 maxlen: 24
2a11:c7c1:deec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:d5:3d:ee:23:d2:79:75:ac:4e:f2:a3:6a:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Jan 1 22:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f44637f3cabff0dd41cb29692d434972811098d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:69:e7:54:fc:62:0a:23:03:54:dc:01:70:
78:aa:56:3d:ad:77:61:5e:7b:bd:bb:86:b3:69:53:
49:a4:ca:23:16:75:71:36:1b:40:cc:9c:b4:35:22:
ed:11:26:11:94:47:af:f2:aa:e8:38:29:aa:d1:d8:
c3:d5:f4:11:cb:db:69:e5:cb:4b:0c:b2:d6:9b:d2:
7b:a0:71:99:1e:70:ca:aa:2c:20:cf:d6:b4:b4:76:
b9:3a:a8:a4:9f:cb:3b:34:0b:87:f3:30:1e:a7:b2:
6f:24:cb:77:05:1b:b9:1a:7d:40:12:fd:f2:ff:9f:
54:bc:08:cf:b8:c2:8a:5d:d1:eb:7b:f7:a4:aa:a3:
e3:12:10:ed:d0:28:d0:03:25:55:63:9c:28:13:75:
13:6e:7a:aa:c8:00:78:5d:a6:7d:e2:84:21:cb:b6:
c9:4e:d6:d2:b2:6c:4f:e6:d2:57:47:dd:e2:91:46:
c5:19:68:92:5d:44:56:b5:94:79:3c:9c:b3:47:08:
dd:2c:bd:ab:ad:b4:7e:59:48:79:52:46:e9:72:10:
03:ca:d3:6d:d5:70:ca:70:6a:28:52:9a:47:bf:ad:
26:00:b0:34:79:9d:6f:10:ac:2e:a9:c8:ab:53:3d:
f3:31:a6:d4:da:fc:c9:a4:6c:95:28:2d:10:48:72:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:37:F3:CA:BF:F0:DD:41:CB:29:69:2D:43:49:72:81:10:98:D7
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/9EY388q_8N1ByylpLUNJcoEQmNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.237.0/24
IPv6:
2a11:c7c1:deec::/48
Signature Algorithm: sha256WithRSAEncryption
5d:89:91:fc:c5:ca:b6:75:59:07:06:8b:f9:27:41:6e:58:a8:
ef:51:05:52:bf:d9:6d:af:d2:5e:1a:61:40:ae:0f:5b:db:b0:
6f:c4:5c:5a:90:a0:ce:f8:4f:2a:1a:ca:c5:71:86:30:01:6b:
98:ce:f4:f5:f5:3d:23:27:f2:bb:ba:88:3f:85:92:2d:b0:2c:
ca:92:8f:17:09:a4:2b:a1:51:6b:b7:80:95:c5:bf:5c:2e:77:
09:62:da:57:9f:ad:12:41:f4:4c:e8:58:7e:e6:8d:4a:81:5d:
ba:3a:06:f1:3a:4b:3b:a0:dd:04:1f:af:46:03:61:17:92:d4:
31:35:63:24:22:3f:1f:35:97:be:97:4f:a3:e5:d9:50:55:4e:
7e:f0:a4:03:34:32:8a:29:3d:26:3a:ca:d9:bb:90:a8:66:f0:
bd:88:d8:78:d4:9d:7f:35:0b:9b:ae:18:ce:88:0f:8c:1a:73:
80:05:b3:06:d9:25:aa:fb:2c:e2:f7:9b:da:9d:9a:e4:a9:da:
ff:67:f3:06:18:66:e4:56:75:56:18:d5:44:60:8d:ea:1f:2c:
e5:21:46:af:6e:69:69:b7:f0:d3:41:0a:91:1f:31:5e:40:6e:
d3:c4:67:da:a5:08:0a:6c:7a:e0:f5:1a:90:8a:59:d9:15:f6:
f9:d2:95:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt7pNU97iPSeXWsTvKjat0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjYwMTAxMjIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ2MzdmM2NhYmZmMGRkNDFjYjI5NjkyZDQzNDk3MjgxMTA5OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVhp51T8YgojA1TcAXB4qlY9rXdh
Xnu9u4azaVNJpMojFnVxNhtAzJy0NSLtESYRlEev8qroOCmq0djD1fQRy9tp5ctL
DLLWm9J7oHGZHnDKqiwgz9a0tHa5Oqikn8s7NAuH8zAep7JvJMt3BRu5Gn1AEv3y
/59UvAjPuMKKXdHre/ekqqPjEhDt0CjQAyVVY5woE3UTbnqqyAB4XaZ94oQhy7bJ
TtbSsmxP5tJXR93ikUbFGWiSXURWtZR5PJyzRwjdLL2rrbR+WUh5UkbpchADytNt
1XDKcGooUppHv60mALA0eZ1vEKwuqcirUz3zMabU2vzJpGyVKC0QSHIKkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPRGN/PKv/DdQcspaS1DSXKBEJjXMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvOUVZMzg4cV84TjFCeXlscExVTkpjb0VRbU5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwhrtMA8E
AgACMAkDBwAqEcfB3uwwDQYJKoZIhvcNAQELBQADggEBAF2JkfzFyrZ1WQcGi/kn
QW5YqO9RBVK/2W2v0l4aYUCuD1vbsG/EXFqQoM74TyoaysVxhjABa5jO9PX1PSMn
8ru6iD+Fki2wLMqSjxcJpCuhUWu3gJXFv1wudwli2lefrRJB9EzoWH7mjUqBXbo6
BvE6Szug3QQfr0YDYReS1DE1YyQiPx81l76XT6Pl2VBVTn7wpAM0MoopPSY6ytm7
kKhm8L2I2HjUnX81C5uuGM6ID4wac4AFswbZJar7LOL3m9qdmuSp2v9n8wYYZuRW
dVYY1URgjeofLOUhRq9uaWm38NNBCpEfMV5AbtPEZ9qlCApseuD1GpCKWdkV9vnS
lRE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:33:26 2026 by rpki-client