This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N9SJly_iVwmkDpbj9fIuOkPtA8E.roa
File: N9SJly_iVwmkDpbj9fIuOkPtA8E.roa (raw, json)
Hash identifier: OOmuPWfaQlIoeFuc06EF+wS2RKHaEW6adcFSP2176rs=
Subject key identifier: 37:D4:89:97:2F:E2:57:09:A4:0E:96:E3:F5:F2:2E:3A:43:ED:03:C1
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 019B77C67B1EE7593853A9598CF6E5B65F86
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N9SJly_iVwmkDpbj9fIuOkPtA8E.roa
Signing time: Thu 01 Jan 2026 04:17:34 +0000
ROA not before: Thu 01 Jan 2026 04:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 93.152.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:7b:1e:e7:59:38:53:a9:59:8c:f6:e5:b6:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 04:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37d489972fe25709a40e96e3f5f22e3a43ed03c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:9c:b2:37:aa:f3:cc:f5:95:a9:ae:3e:bf:
e7:ac:91:a6:d3:0d:eb:22:eb:ce:df:72:ea:63:b6:
26:02:90:cb:6f:35:02:c5:f0:9f:ac:07:98:62:da:
af:dd:30:8c:9d:59:31:2e:c6:86:6a:fc:f7:4a:60:
db:f6:21:a0:48:b7:97:bc:3f:27:e1:ae:b6:3c:4f:
a3:77:da:50:79:46:e1:6d:1a:25:3f:d3:99:f1:e5:
70:ef:d1:03:54:41:a3:72:40:da:fd:89:ae:dc:35:
c1:f0:34:86:f8:d7:ca:87:9d:dc:eb:b1:de:54:4c:
27:38:cf:eb:be:21:5f:3a:c5:06:ca:2f:41:16:8e:
06:70:a7:02:72:76:b3:a9:65:cf:61:3e:25:8d:57:
74:ed:8d:4e:2a:b0:ac:43:2f:11:ab:b1:8f:ce:70:
79:b0:ea:b7:2f:84:b4:4e:57:7d:bc:fe:c5:29:b4:
23:54:b2:50:a6:46:c8:cb:fa:ed:a7:05:bd:34:2d:
17:69:7b:a8:7a:cf:1b:98:a5:21:08:61:9c:ba:ed:
56:d4:12:a8:42:34:d0:14:dd:06:91:8f:9f:bb:b9:
77:07:29:40:cc:05:da:3a:84:7d:3c:c2:26:83:b9:
79:ce:14:08:20:d4:18:2d:ab:1f:47:6d:85:1a:1d:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:89:97:2F:E2:57:09:A4:0E:96:E3:F5:F2:2E:3A:43:ED:03:C1
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/N9SJly_iVwmkDpbj9fIuOkPtA8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/24
Signature Algorithm: sha256WithRSAEncryption
13:60:30:9e:2a:44:77:56:24:d0:97:ed:24:38:64:ad:68:e3:
c8:44:67:5c:e8:75:91:8f:28:8e:eb:84:81:ab:d6:8a:6e:af:
38:d8:c7:b8:8b:33:9d:37:ed:e0:13:dd:d3:25:26:cc:40:b0:
80:3d:9a:08:f8:4d:68:4c:18:be:1a:f3:10:e0:e1:85:0c:5d:
93:3c:8e:07:50:f7:2f:25:04:97:26:62:2e:cd:09:06:9c:b6:
95:03:2e:26:d7:09:7f:19:ad:f5:29:90:f4:1a:01:cb:cd:77:
85:f5:ba:4f:5e:c4:ea:87:54:03:63:c2:95:86:c8:14:ed:07:
84:56:f2:cb:66:13:66:b0:bd:07:f1:ac:2b:93:a1:2c:5a:91:
c2:f0:66:86:64:f5:a7:05:61:72:be:dd:4d:39:3f:fe:a3:4e:
e2:f6:69:81:e3:28:ec:88:18:17:36:d6:5d:70:e8:2f:ad:a6:
0f:5d:cf:bb:19:4b:59:71:e7:14:69:f8:ce:fa:4b:0e:0c:7b:
a2:58:d7:5e:4c:f1:b9:77:7b:fb:48:58:35:d9:ac:8c:83:ad:
23:fa:d5:cd:e1:72:4c:6f:67:c3:7e:fb:56:8f:b5:a5:17:65:
cf:6b:43:40:23:b2:3d:39:98:84:d4:2b:d7:ff:bb:31:0a:62:
e1:db:60:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xnse51k4U6lZjPbltl+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q0ODk5NzJmZTI1NzA5YTQwZTk2ZTNmNWYyMmUzYTQzZWQwM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/icsjeq88z1lamuPr/nrJGm0w3r
IuvO33LqY7YmApDLbzUCxfCfrAeYYtqv3TCMnVkxLsaGavz3SmDb9iGgSLeXvD8n
4a62PE+jd9pQeUbhbRolP9OZ8eVw79EDVEGjckDa/Ymu3DXB8DSG+NfKh53c67He
VEwnOM/rviFfOsUGyi9BFo4GcKcCcnazqWXPYT4ljVd07Y1OKrCsQy8Rq7GPznB5
sOq3L4S0Tld9vP7FKbQjVLJQpkbIy/rtpwW9NC0XaXuoes8bmKUhCGGcuu1W1BKo
QjTQFN0GkY+fu7l3BylAzAXaOoR9PMImg7l5zhQIINQYLasfR22FGh0BbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfUiZcv4lcJpA6W4/XyLjpD7QPBMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvTjlTSmx5X2lWd21rRHBiajlmSXVPa1B0QThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjqMA0G
CSqGSIb3DQEBCwUAA4IBAQATYDCeKkR3ViTQl+0kOGStaOPIRGdc6HWRjyiO64SB
q9aKbq842Me4izOdN+3gE93TJSbMQLCAPZoI+E1oTBi+GvMQ4OGFDF2TPI4HUPcv
JQSXJmIuzQkGnLaVAy4m1wl/Ga31KZD0GgHLzXeF9bpPXsTqh1QDY8KVhsgU7QeE
VvLLZhNmsL0H8awrk6EsWpHC8GaGZPWnBWFyvt1NOT/+o07i9mmB4yjsiBgXNtZd
cOgvraYPXc+7GUtZcecUafjO+ksODHuiWNdeTPG5d3v7SFg12ayMg60j+tXN4XJM
b2fDfvtWj7WlF2XPa0NAI7I9OZiE1CvX/7sxCmLh22Bq
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:56:17 2026 by rpki-client