This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa
File: 9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (raw, json)
Hash identifier: vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=
Subject key identifier: F4:BD:FF:06:35:2D:FC:F9:1D:E2:53:58:35:8E:08:11:D1:BA:D8:EA
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019BEFC60519311F64C964D0D51C1E8DD5AB
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa
Signing time: Sat 24 Jan 2026 11:31:30 +0000
ROA not before: Sat 24 Jan 2026 11:31:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215462
IP address blocks: 2a05:f682::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ef:c6:05:19:31:1f:64:c9:64:d0:d5:1c:1e:8d:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 24 11:31:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4bdff06352dfcf91de25358358e0811d1bad8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:d3:d7:bf:41:ff:19:6c:be:64:04:53:e0:
d0:23:41:c0:ec:8d:ec:cf:78:06:df:a1:09:6f:1b:
8f:e8:2f:77:d3:f0:e6:3e:0b:e2:1f:76:05:73:bb:
a9:6e:49:d8:c0:0b:cb:f9:40:de:a2:9e:5f:98:21:
a1:e4:0a:49:e6:c6:05:4f:3a:32:75:9b:2a:dd:69:
18:ff:f3:1d:12:01:76:04:a5:29:3d:10:d8:24:19:
e0:31:5a:c8:02:21:c7:a1:cf:2a:d5:a8:16:08:54:
9a:bb:88:aa:9e:10:0b:81:d7:8f:30:d1:16:69:81:
36:b1:37:d9:46:8c:b9:ae:d3:24:ac:02:ab:31:48:
f2:1b:89:f8:66:5d:51:1b:dd:c9:97:01:07:91:38:
0b:e5:ad:15:ee:7f:fa:fa:ca:5e:1a:55:e0:ab:61:
82:38:37:cc:cb:0f:3a:92:87:3c:26:c1:12:15:fe:
0c:18:e3:42:7d:8d:31:35:a4:20:fe:52:b8:96:c3:
70:23:60:16:2d:ff:d2:25:ef:52:6f:06:bc:53:1e:
c8:bb:ef:ad:a2:80:ef:ee:80:04:46:95:51:ad:11:
c4:c9:cc:9c:35:ef:a4:88:09:5b:ec:95:2c:3e:4c:
ac:d4:0f:79:66:71:9f:a2:78:ce:b0:da:0e:98:90:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:FF:06:35:2D:FC:F9:1D:E2:53:58:35:8E:08:11:D1:BA:D8:EA
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f682::/32
Signature Algorithm: sha256WithRSAEncryption
9f:7c:b6:a8:54:b8:3e:2e:44:f1:ee:32:4c:31:96:39:3a:84:
2d:d8:1f:a5:c2:63:b5:6f:1f:d3:c1:64:e4:5f:37:bd:46:23:
89:34:f5:97:8a:b1:a0:1d:90:bf:e0:81:94:ec:68:75:21:37:
a0:a6:a2:76:ef:6d:7a:46:b2:0b:e6:67:5d:08:74:a0:60:6e:
f6:ff:24:55:0b:0c:d8:2c:03:95:81:d1:29:c6:97:f5:b5:5f:
9c:c8:4b:4e:24:60:2e:75:f2:bb:b5:cb:73:4b:5f:51:00:76:
bc:30:18:fc:8f:f3:7c:44:79:a9:aa:27:fd:fd:b6:31:6b:e5:
17:35:86:f9:7f:55:0c:5e:c1:ef:42:ee:45:df:46:a0:7e:19:
14:62:c5:9d:c1:01:a7:72:2f:35:d7:24:5d:ee:0c:26:30:fa:
13:78:34:04:82:ea:f5:39:c7:1e:66:f3:f9:78:5d:b2:76:cc:
bf:5c:af:63:ee:7b:b7:2a:2b:40:1f:cf:dd:60:1b:75:49:0f:
e4:9a:c6:bf:e6:d0:a2:07:90:37:7b:c6:cc:ac:c0:1b:0b:65:
47:dc:fb:04:b9:c7:5a:ef:a8:cb:a4:84:73:5e:ca:57:f5:8f:
bd:54:f7:db:86:8e:ba:1d:53:21:62:e6:57:7e:88:ea:8e:c7:
25:9a:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:02:58 2026 by rpki-client