This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/9F2fGaXqkwYq7hsidHwhVUABVT0.roa
File: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (raw, json)
Hash identifier: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=
Subject key identifier: F4:5D:9F:19:A5:EA:93:06:2A:EE:1B:22:74:7C:21:55:40:01:55:3D
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 019B7C12EEE57DB967B43EFF2FB0CDDF409F
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/9F2fGaXqkwYq7hsidHwhVUABVT0.roa
Signing time: Fri 02 Jan 2026 00:19:34 +0000
ROA not before: Fri 02 Jan 2026 00:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9208
IP address blocks: 193.53.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:ee:e5:7d:b9:67:b4:3e:ff:2f:b0:cd:df:40:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Jan 2 00:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f45d9f19a5ea93062aee1b22747c21554001553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:60:4c:51:d2:46:6f:47:f8:20:59:cd:ee:
03:25:dd:f3:ae:0a:db:ac:18:73:d0:44:00:64:46:
ef:fc:5b:0c:3f:de:a7:b6:03:d5:1a:48:e1:f6:36:
5b:e0:d1:b5:3a:ac:40:46:b2:5c:5c:9b:63:04:ce:
f7:6d:5f:07:17:8c:b9:5c:5c:4c:a9:9f:fa:f3:b2:
13:5c:84:fa:45:86:7e:ee:4c:85:eb:39:0e:8c:b6:
4d:0f:d0:82:59:3d:a4:ba:d7:ef:35:a7:13:cc:47:
7e:4c:bd:5d:f8:e0:c2:f9:ab:94:34:b5:57:61:26:
7e:32:99:9e:5c:06:ee:60:1d:5a:ea:4e:53:38:69:
fb:0d:bc:4e:7c:97:3c:85:0b:a2:eb:28:4c:9d:50:
ba:c3:8a:ca:48:d8:b3:fe:6e:1b:4c:92:ab:07:25:
8b:32:be:ce:e5:f0:ad:a9:ff:86:16:28:3f:84:13:
9b:fc:1c:d8:6b:8e:93:a9:99:92:c5:de:1f:92:83:
f0:4b:ab:30:a2:38:04:11:4d:08:53:aa:4a:cf:aa:
ab:78:dc:f3:66:79:0f:90:36:b4:c5:b2:ed:07:ca:
70:d7:d6:a6:09:e5:8b:10:97:de:1f:76:d5:29:dc:
3f:55:c2:cc:35:03:5a:ee:a7:26:a4:92:00:d0:33:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:9F:19:A5:EA:93:06:2A:EE:1B:22:74:7C:21:55:40:01:55:3D
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/9F2fGaXqkwYq7hsidHwhVUABVT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.125.0/24
Signature Algorithm: sha256WithRSAEncryption
48:17:8b:01:ca:b9:1b:e2:6f:d4:61:26:e4:5e:ce:ad:13:b2:
2b:60:cf:c6:05:57:54:11:67:9b:e4:21:b0:12:3e:be:f9:cb:
c5:e5:91:6f:5e:fb:76:64:f9:b0:10:8c:0f:94:64:77:51:f9:
78:07:88:c5:e2:3f:1f:11:b3:5c:8d:81:4e:74:27:54:79:63:
4f:90:37:50:54:74:9a:8b:ff:00:d1:81:26:93:a9:71:5a:fd:
81:6a:bf:3c:13:40:4e:43:9a:8d:a7:9f:07:67:39:c7:bc:43:
09:f0:2f:5f:27:00:ba:ab:ff:27:a0:24:98:b3:78:45:27:4c:
e8:9c:f4:08:d8:01:5a:31:d1:b5:d2:7f:0f:83:dc:f0:7d:15:
b2:a7:8f:0e:40:14:dd:d7:86:3b:99:de:18:4b:1b:a2:3b:57:
2f:15:d1:ec:15:2c:cf:5d:60:05:f5:5e:4c:cf:b2:9a:59:f7:
f3:48:1f:a0:42:1d:86:a2:5d:d4:10:70:89:e0:4e:35:d6:dc:
ed:93:26:c7:e2:b7:5f:c3:38:f6:79:61:75:37:59:27:8c:85:
45:16:c2:a7:aa:08:0d:cd:8d:99:bd:cb:69:3d:3f:f3:b1:fb:
35:83:91:06:e9:a1:bf:4d:9d:d3:7f:03:b6:f8:94:f4:e5:44:
c1:6c:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:02 2026 by rpki-client