This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nAlzL-__Fklc3M3swRlAAHQbstI.roa
File: nAlzL-__Fklc3M3swRlAAHQbstI.roa (raw, json)
Hash identifier: OcVsnh1as5z+FwWYWQtf7hhn75VqLVgRncWMjL3gu0M=
Subject key identifier: 9C:09:73:2F:EF:FF:16:49:5C:DC:CD:EC:C1:19:40:00:74:1B:B2:D2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019B76EAEE38F6003C20CBF2E6DA7EB66D64
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nAlzL-__Fklc3M3swRlAAHQbstI.roa
Signing time: Thu 01 Jan 2026 00:17:46 +0000
ROA not before: Thu 01 Jan 2026 00:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48024
IP address blocks: 178.173.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ee:38:f6:00:3c:20:cb:f2:e6:da:7e:b6:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 00:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c09732fefff16495cdccdecc1194000741bb2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:9f:44:f5:57:26:df:ec:70:36:e3:ad:d0:
86:a5:7b:19:4b:ee:ae:7d:4a:db:80:20:7b:97:f8:
ec:6a:7b:91:33:f9:08:da:94:0e:c4:3a:50:8c:c1:
93:33:d4:19:21:f2:56:af:bf:aa:56:2d:be:fe:5b:
41:56:bf:7a:c4:9c:b0:b8:aa:46:13:03:93:b1:87:
96:e0:3b:fe:43:c9:58:62:17:1c:ef:d4:61:94:7d:
d8:38:ba:28:83:1f:fc:3d:b8:3f:9d:bd:b2:ee:37:
ce:67:82:f8:dc:1f:c2:4a:77:d1:e5:9d:14:f6:4d:
7e:31:a0:66:3b:fd:98:31:0b:a0:86:95:8a:a0:76:
9a:ac:3f:a8:5a:26:84:fa:ca:f1:5e:6f:8e:66:f9:
f6:5e:95:21:45:8a:e0:76:86:cb:6f:12:6d:e6:cc:
64:44:67:de:dd:27:83:2d:d8:66:0e:ac:50:a1:a2:
b3:53:67:e2:f8:70:a0:f4:4b:e4:c2:54:6c:d0:cd:
7f:bf:48:07:87:60:3b:5c:ba:1f:ce:e0:d1:a7:ae:
b6:b9:9d:d0:6d:19:ee:90:63:ba:c0:2c:d7:d4:b3:
b7:cd:55:3d:a8:ac:59:a8:ce:57:1f:2e:49:72:1a:
54:a3:80:1f:d7:34:06:1f:51:41:91:ac:95:76:65:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:73:2F:EF:FF:16:49:5C:DC:CD:EC:C1:19:40:00:74:1B:B2:D2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/nAlzL-__Fklc3M3swRlAAHQbstI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.241.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2c:83:0b:74:51:ab:4b:e3:ed:ff:33:10:31:23:f2:8c:cb:
fe:01:c1:bc:1c:a0:2e:fa:3d:ef:56:33:57:09:84:31:be:1a:
dd:be:4c:3c:fd:74:61:fc:49:94:1c:c3:c3:dc:58:22:29:a5:
52:95:be:63:1b:a7:dc:b0:de:af:0d:19:e3:e7:c0:f7:68:2e:
3a:de:26:9e:54:52:1f:3a:b9:b6:63:51:2e:19:55:66:9e:31:
39:19:59:79:9d:a8:c8:ef:62:ca:8e:a2:03:08:27:75:0c:0f:
e6:0a:e2:7b:3e:a3:ba:4a:29:f3:ae:8c:13:5a:5d:1e:bf:75:
2e:89:1e:6c:69:63:39:30:18:0a:bd:2b:14:0a:ce:eb:30:d0:
07:21:5f:b1:83:3f:b7:ce:87:2c:d3:92:ef:1b:41:0a:aa:c6:
5b:56:e9:39:5f:33:57:fc:5a:46:ef:21:0e:1f:11:fb:04:9a:
d7:66:e5:ed:43:b7:da:07:c1:ba:25:5f:51:bb:e2:b3:02:06:
e3:80:21:04:18:40:1a:d0:84:ec:28:36:0b:c3:0c:53:fb:3e:
c5:f0:98:bb:ff:64:cc:9d:f7:c3:23:a2:e3:4f:c4:fe:11:1c:
0d:76:e0:1f:92:14:b8:70:bb:c2:81:fc:9c:36:f3:a8:af:cf:
06:cd:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:57:56 2026 by rpki-client