This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/9c8fl-F23xypfkbqbl1n5JPG_84.roa
File: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (raw, json)
Hash identifier: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=
Subject key identifier: F5:CF:1F:97:E1:76:DF:1C:A9:7E:46:EA:6E:5D:67:E4:93:C6:FF:CE
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019B7AC7E624250819931504C8BBF043851D
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/9c8fl-F23xypfkbqbl1n5JPG_84.roa
Signing time: Thu 01 Jan 2026 18:17:59 +0000
ROA not before: Thu 01 Jan 2026 18:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 92.42.20.0/24 maxlen: 24
92.42.21.0/24 maxlen: 24
92.42.22.0/24 maxlen: 24
92.42.23.0/24 maxlen: 24
185.187.46.0/23 maxlen: 23
185.187.46.0/24 maxlen: 24
185.187.47.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e6:24:25:08:19:93:15:04:c8:bb:f0:43:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 18:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5cf1f97e176df1ca97e46ea6e5d67e493c6ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:17:e2:1a:48:bd:3c:ac:18:cb:df:96:56:
07:88:62:87:35:81:65:54:59:f8:44:d2:f1:4f:9e:
7c:cd:e7:6a:d9:3b:7a:1c:14:1b:a6:26:3c:14:4d:
ae:66:23:36:a8:0c:7f:3c:b6:24:72:7f:1b:ae:05:
7e:25:b1:5a:13:be:66:0b:f3:be:7f:d3:6d:b1:e4:
7d:dd:9e:73:81:67:5f:0e:46:a3:f0:d1:d5:63:fa:
b1:70:4b:6a:f9:2d:fe:f8:2b:26:f8:e5:a5:f7:ea:
97:27:ce:df:3b:6b:51:b9:c6:a9:31:39:1c:bb:ee:
84:bb:2a:89:00:d9:70:a1:ba:11:ba:ef:ee:f2:37:
c6:01:c9:b2:77:a3:b5:15:da:b5:21:59:32:ef:55:
f2:6f:83:7c:01:3c:b5:35:ac:ee:c4:0f:59:cd:f4:
65:a1:29:41:1e:b4:13:c1:69:73:56:f7:8f:4c:5b:
ff:cc:4c:06:4f:2f:94:b7:b7:d0:28:9a:ba:00:27:
b2:19:8a:24:91:e0:50:0f:05:67:e7:9c:54:e9:bf:
ce:7a:f2:4d:10:af:f7:9f:41:ab:9c:3f:59:43:e2:
fa:c8:01:10:dc:ad:12:66:f0:64:8a:82:3c:5d:6d:
a8:c1:a0:cb:6f:fb:bf:b3:79:d2:9a:45:b2:b3:f7:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:1F:97:E1:76:DF:1C:A9:7E:46:EA:6E:5D:67:E4:93:C6:FF:CE
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/9c8fl-F23xypfkbqbl1n5JPG_84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5e:3e:69:53:74:7e:16:ab:8b:b3:f1:0f:5d:11:53:69:f7:
65:3d:91:19:1b:a2:3c:25:47:2a:97:de:45:ba:c8:85:6b:e5:
0f:14:09:90:6e:41:27:04:4b:b1:d2:29:f7:97:15:8c:20:4e:
6c:59:af:8c:1f:95:30:1e:21:fd:5d:f1:ce:cd:13:b2:0b:d9:
bb:5c:9e:77:d4:db:0e:c3:98:c6:da:be:96:28:09:51:3a:32:
21:09:6e:bc:7a:2e:a2:c8:00:77:ca:b7:86:35:9d:af:99:a4:
ad:29:59:e8:47:b0:a0:8d:07:1d:36:71:4d:f4:80:2d:05:0f:
fe:00:b4:55:03:4c:3b:08:8e:1a:c9:a9:50:aa:3e:fd:53:be:
87:f0:ea:81:33:69:b0:53:53:e9:d6:b5:da:9a:c0:48:43:ff:
0f:92:7a:e6:55:6a:ca:e1:34:7c:7e:fe:a4:d6:e4:3c:16:be:
51:fe:93:73:37:9d:42:6e:5b:36:56:27:e6:ab:76:cb:54:ba:
48:f2:7b:c0:43:82:be:51:6d:13:16:e0:cd:ec:90:20:2a:05:
e8:2d:8a:03:4e:7b:82:37:6f:79:8e:1b:ab:e5:fb:a8:4c:47:
cd:fd:dd:4c:8e:2b:3e:20:68:34:21:1c:ab:06:6e:38:ac:cc:
07:62:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:35:52 2026 by rpki-client