This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa
File: nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa (raw, json)
Hash identifier: cLDk5XOKrbRl8ZowE5bT/thbho2XNAd1evvHqlHJrAE=
Subject key identifier: 9C:53:08:71:B2:E5:36:75:B3:D4:0A:AB:BB:D7:2A:CB:84:D1:16:91
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C77FDC8FA163B5796E720082F59727
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa
Signing time: Thu 01 Jan 2026 04:18:41 +0000
ROA not before: Thu 01 Jan 2026 04:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212967
IP address blocks: 5.8.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:7f:dc:8f:a1:63:b5:79:6e:72:00:82:f5:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c530871b2e53675b3d40aabbbd72acb84d11691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:18:0e:43:23:69:a6:40:24:25:04:2b:0d:
ea:64:23:16:5d:3a:ce:bd:8e:36:c4:dc:5b:a9:5d:
fe:3f:87:28:ee:4c:7f:d0:85:4b:fd:ff:9a:6f:da:
ff:bb:0c:b6:ad:93:45:9e:f4:b9:5b:ea:30:fd:5e:
ff:d8:0d:2d:78:3e:ea:8d:3d:b7:95:ae:4e:a1:1b:
d5:58:04:fb:70:42:12:04:0d:fb:e4:fe:dd:a8:8c:
40:98:69:77:eb:08:f8:84:7f:75:e9:08:bc:f2:76:
d0:37:70:b4:0e:01:f2:b1:b6:ef:76:44:4c:45:23:
67:99:a8:c0:00:76:33:3d:30:3d:51:26:26:ed:1e:
00:4e:62:0b:64:a7:91:08:b7:ed:20:eb:d5:79:a7:
cc:54:70:19:c0:db:91:87:57:1c:b5:5a:09:14:03:
97:a6:b1:c8:cb:0f:4f:d1:17:4b:dd:91:e2:53:8e:
b1:80:c3:f8:36:05:18:27:7a:01:81:f5:95:80:22:
b2:e1:39:a1:ab:55:44:79:77:1a:f0:56:d4:be:2f:
79:2f:5b:ae:1a:88:40:3d:49:df:54:19:1f:00:93:
ae:fe:f3:06:80:81:14:5a:85:e9:4b:68:b5:96:b5:
54:c4:59:14:cb:8b:03:6e:07:8b:08:33:6f:e0:49:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:08:71:B2:E5:36:75:B3:D4:0A:AB:BB:D7:2A:CB:84:D1:16:91
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.183.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e5:4b:45:d8:40:7b:a9:8e:b4:e5:9a:94:fc:e7:94:04:05:
9d:35:c2:bc:69:80:cc:1e:16:18:63:c6:a2:d5:77:5f:15:9a:
98:e2:b1:fe:f8:fa:77:65:fb:54:82:d0:e1:92:fc:f2:4a:9e:
93:37:2e:75:f6:35:55:48:0f:bb:c4:e5:2e:02:dd:c7:5c:6a:
3e:47:d0:96:ed:04:b1:33:67:6d:03:ee:47:f6:3f:b5:e6:b7:
71:78:be:be:67:35:28:f2:f3:fe:fd:9e:d1:6f:6f:36:33:7f:
b1:b0:dc:71:ae:f1:35:0b:50:71:91:28:d5:d8:37:66:5d:27:
1d:6a:e6:1f:fa:c3:f4:9c:0f:53:38:0d:c9:0d:1f:c0:f1:dc:
f8:76:fc:9a:d4:05:93:f2:cb:b4:c8:7e:ac:6b:9f:3c:97:0f:
ee:16:4a:1a:73:99:bd:b4:b2:76:51:20:cd:4f:18:f4:7b:f3:
1b:5e:9f:9b:31:cf:f0:c7:df:39:63:f3:e5:c6:71:2c:b9:1a:
b4:16:86:87:37:dc:14:42:e5:0a:9c:28:91:d8:15:06:ab:69:
4a:45:04:a7:10:91:b3:06:86:d9:b1:d6:35:eb:04:61:52:bc:
61:6e:5d:f3:09:16:87:b8:68:d7:d8:35:29:1f:31:b5:6c:05:
11:23:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:49 2026 by rpki-client