This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/9JCvBC467iJkWVUyejrQdCcE8Vc.roa
File: 9JCvBC467iJkWVUyejrQdCcE8Vc.roa (raw, json)
Hash identifier: PZtqmEou/QOEvimRrt1u0929zRJ68Cvl3HD4b24PJ+8=
Subject key identifier: F4:90:AF:04:2E:3A:EE:22:64:59:55:32:7A:3A:D0:74:27:04:F1:57
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 019B30BA8A13586FB3D644026206A88FD1C0
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/9JCvBC467iJkWVUyejrQdCcE8Vc.roa
Signing time: Thu 18 Dec 2025 09:11:29 +0000
ROA not before: Thu 18 Dec 2025 09:11:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25227
IP address blocks: 195.151.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:30:ba:8a:13:58:6f:b3:d6:44:02:62:06:a8:8f:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Dec 18 09:11:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f490af042e3aee22645955327a3ad0742704f157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:17:4c:34:5e:70:2d:75:f1:f0:7f:5a:e9:
0d:52:01:da:52:35:cf:c5:b9:b6:a9:8b:80:d8:72:
8e:39:b0:be:06:6f:8e:95:22:a5:ba:81:99:ca:58:
c4:08:93:5d:9d:fe:cb:bb:03:4c:fa:04:88:32:0e:
cb:97:36:42:6d:2d:df:92:3d:e8:eb:09:f3:c8:84:
19:b4:90:96:81:20:69:14:fe:57:42:42:15:00:b6:
74:b3:b0:37:dc:5c:d7:57:d2:4a:db:a2:08:92:df:
2b:ff:fd:83:b5:32:d5:2c:90:06:2f:bb:05:0b:75:
48:4b:7c:ec:b3:04:fb:10:fa:a3:aa:5a:3c:40:f6:
4c:7b:0a:d8:ba:9c:d3:80:c4:f3:37:c1:14:57:0d:
0a:5b:8b:5e:34:9f:67:87:fb:48:0c:ee:9d:36:33:
3e:50:fd:98:5b:9c:61:10:3f:60:a9:61:bb:9d:ca:
7d:ee:b0:68:8f:e6:09:a5:41:3a:ce:83:cc:28:e6:
a8:05:28:86:35:c9:ad:17:88:6b:80:42:e6:6f:80:
5a:4c:dc:70:06:2f:2c:02:db:07:9c:93:56:46:b9:
b6:4c:a8:3d:1c:32:24:18:1c:3b:2c:67:29:4f:45:
99:85:7d:42:8d:f6:37:2e:28:5b:63:82:32:b6:2b:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:AF:04:2E:3A:EE:22:64:59:55:32:7A:3A:D0:74:27:04:F1:57
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/9JCvBC467iJkWVUyejrQdCcE8Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.151.41.0/24
Signature Algorithm: sha256WithRSAEncryption
af:32:26:d3:cf:4c:4b:d3:fe:b9:3a:54:25:06:18:1b:4d:c1:
c6:26:13:40:49:c0:df:df:fc:de:80:51:cc:fa:f5:23:80:3d:
45:51:3e:94:40:23:9f:81:47:06:0b:db:8b:95:33:2b:34:8a:
38:32:26:df:f5:00:16:07:5d:dc:39:69:ba:bf:37:c3:3d:d4:
58:e2:8e:b2:8d:80:fa:76:32:56:2d:c1:39:95:6f:5a:b0:63:
fe:1a:9b:8e:7a:4b:9e:6c:22:db:0c:84:bf:04:97:a0:6a:2c:
82:97:5e:71:38:5f:fd:fb:40:a1:61:81:4d:c1:e4:d0:de:d8:
8f:99:a2:3d:44:bb:ad:00:89:54:dd:aa:b3:2b:d1:b7:1a:82:
b6:bc:28:4b:ed:f3:33:ed:02:f1:9e:11:71:2f:f8:7e:1a:64:
d5:ce:bf:c4:7d:8a:fc:a5:e6:c9:18:ce:98:46:ee:ac:0f:d8:
f0:00:8a:e2:d4:ca:b3:41:21:e2:1b:1a:c3:6a:72:24:8c:4c:
c0:e5:70:d0:fb:5a:0b:03:76:0c:5f:4b:95:66:61:04:9c:6a:
ac:90:d2:7d:05:fc:a8:ec:30:fa:46:50:f9:d3:33:24:c3:3b:
b1:77:1d:40:98:8d:44:4e:58:d5:7d:13:4f:09:f8:36:9f:2a:
e9:7e:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:36:53 2025 by rpki-client