This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa
File: kj9ql8RD4BaCDh5-_M73OwgTWbs.roa (raw, json)
Hash identifier: jzhcUtv+MxlXKawfYrhFAm0TnRIuov89FILEyM8GEDQ=
Subject key identifier: 92:3F:6A:97:C4:43:E0:16:82:0E:1E:7E:FC:CE:F7:3B:08:13:59:BB
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 019B06F0986A38A590C40216C47FCD4ABC8D
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa
Signing time: Wed 10 Dec 2025 06:26:29 +0000
ROA not before: Wed 10 Dec 2025 06:26:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197453
IP address blocks: 46.183.176.0/21 maxlen: 21
91.200.86.0/23 maxlen: 23
178.57.80.0/21 maxlen: 21
178.57.88.0/22 maxlen: 22
178.57.93.0/24 maxlen: 24
178.57.95.0/24 maxlen: 24
185.9.84.0/22 maxlen: 22
185.162.232.0/24 maxlen: 24
185.195.243.0/24 maxlen: 24
185.196.116.0/24 maxlen: 24
185.218.182.0/23 maxlen: 23
185.218.182.1/32 maxlen: 32
185.218.182.2/32 maxlen: 32
185.218.183.1/32 maxlen: 32
193.47.154.0/24 maxlen: 24
212.74.228.0/24 maxlen: 24
212.74.229.0/24 maxlen: 24
212.74.230.0/24 maxlen: 24
213.5.224.0/23 maxlen: 23
217.72.0.0/23 maxlen: 23
2a01:bc40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:f0:98:6a:38:a5:90:c4:02:16:c4:7f:cd:4a:bc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Dec 10 06:26:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=923f6a97c443e016820e1e7efccef73b081359bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:cb:4d:99:38:83:92:99:f8:9f:98:0a:76:
87:e4:38:bb:7c:88:af:8a:58:75:f2:a1:34:b6:93:
cf:17:fa:ea:b0:57:27:08:ef:e5:f2:9f:68:6f:fc:
2e:1f:6b:94:45:d2:bf:d9:53:44:2d:e9:63:95:27:
31:33:44:7e:9a:9c:a4:8b:76:17:81:f9:a7:89:94:
dd:2c:61:ce:fd:39:5a:48:a3:cd:1b:87:fb:8e:90:
ef:75:5d:46:0f:83:26:e3:7b:be:09:73:c1:24:1b:
12:cd:97:05:e0:b7:e0:02:2f:f4:6a:e1:af:1c:45:
a3:2f:4e:7a:2f:65:37:9b:6e:4c:14:22:b4:2a:b0:
4a:29:3f:45:12:b7:28:60:fa:c4:c7:55:fa:0c:84:
9e:2d:b5:d6:39:fd:f5:34:30:89:3c:63:a9:9f:ed:
28:b4:e7:4a:4e:32:46:42:5a:d3:21:4f:2e:f4:aa:
08:ae:4c:a6:e6:a6:a4:8e:63:e4:92:2c:bd:bd:5e:
2e:df:05:af:54:bf:5d:7e:aa:5d:cd:7d:cf:99:95:
09:a2:b6:6e:d7:88:f4:8a:09:e4:1c:2b:a0:25:c5:
c4:fc:14:c3:3c:8b:a7:7c:3e:c5:db:0a:cf:49:1c:
05:0c:83:1c:68:68:85:5b:34:bc:a2:66:a6:f0:ea:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:6A:97:C4:43:E0:16:82:0E:1E:7E:FC:CE:F7:3B:08:13:59:BB
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/kj9ql8RD4BaCDh5-_M73OwgTWbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.176.0/21
91.200.86.0/23
178.57.80.0-178.57.91.255
178.57.93.0/24
178.57.95.0/24
185.9.84.0/22
185.162.232.0/24
185.195.243.0/24
185.196.116.0/24
185.218.182.0/23
193.47.154.0/24
212.74.228.0-212.74.230.255
213.5.224.0/23
217.72.0.0/23
IPv6:
2a01:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
92:e2:36:6a:d8:56:c3:33:39:8e:4b:3d:84:88:3a:7f:b4:fd:
eb:52:3e:05:55:9b:bc:f2:20:ce:de:57:ca:ff:12:f2:c7:11:
bc:16:41:82:59:76:65:c6:5b:2c:47:ed:31:1c:51:a3:0c:26:
da:a9:a8:ed:9c:31:ad:fc:8e:8c:95:ee:68:84:69:61:96:5f:
f6:06:17:e1:bc:ff:68:4e:23:8d:f0:53:33:14:9a:5f:ef:82:
a8:90:6d:d3:96:9c:58:b6:68:d7:d9:57:3f:70:36:ee:6c:a6:
1b:d7:04:51:54:0c:6f:fb:da:5a:85:f7:b6:cc:48:33:38:33:
41:e0:d0:40:39:c2:a3:fc:97:74:32:b3:18:18:ab:6b:e3:71:
93:40:5e:3e:c7:e6:69:1f:f2:1a:47:bf:24:7a:33:b8:74:38:
b4:f9:72:d7:ed:0d:f4:3b:1e:75:ce:4b:ce:82:eb:20:53:bb:
74:e4:1b:fb:4d:e4:46:dc:94:53:2c:b2:9c:ff:7e:97:44:c5:
8f:94:c4:c1:87:ef:02:23:8b:84:28:02:67:f6:02:b9:f5:67:
f0:a4:46:12:44:92:7e:72:a1:53:83:05:e8:72:55:c9:ff:6e:
ea:7d:6f:90:c2:f6:45:16:91:b4:7b:6c:af:18:18:08:30:3f:
0c:f9:5d:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:24:53 2025 by rpki-client