This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JitIdhxLv8tRo-6fUHuO9TNH4MY.roa
File: JitIdhxLv8tRo-6fUHuO9TNH4MY.roa (raw, json)
Hash identifier: rxjinbON0AlF0HUaexYRbVeuN/+oKpIUrSXJyiLI8w0=
Subject key identifier: 26:2B:48:76:1C:4B:BF:CB:51:A3:EE:9F:50:7B:8E:F5:33:47:E0:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019B78A2E477BAC5E34A2F5D0D933BA59059
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JitIdhxLv8tRo-6fUHuO9TNH4MY.roa
Signing time: Thu 01 Jan 2026 08:18:19 +0000
ROA not before: Thu 01 Jan 2026 08:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 81.161.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:e4:77:ba:c5:e3:4a:2f:5d:0d:93:3b:a5:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 08:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=262b48761c4bbfcb51a3ee9f507b8ef53347e0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:37:e9:d7:f0:b1:27:fa:ee:f8:47:5d:2a:
e1:b6:05:12:71:a8:6d:34:63:27:6b:7d:8f:10:d4:
12:6d:10:bb:f1:de:28:68:cb:ee:93:55:24:81:80:
e6:7b:1b:31:e5:dc:a5:71:ab:80:a7:d1:75:b1:f8:
58:b2:dd:ec:00:7e:92:f1:1e:49:26:6a:c9:37:8d:
62:ca:bb:48:ec:af:e3:32:7b:a4:39:0d:3e:ec:6e:
9a:30:77:ec:25:90:04:55:2a:2d:b5:0d:4b:56:7b:
a3:ae:5b:16:07:89:fa:6c:08:18:b5:8b:4e:a5:9c:
c2:55:09:10:d9:5e:b7:38:03:a9:9f:b9:33:d0:93:
76:95:c5:91:64:ec:db:6e:a9:23:c7:82:d2:58:11:
d6:11:a3:69:4c:82:cf:39:c2:34:86:81:c4:b6:32:
fd:6f:87:d5:e4:8e:09:68:ca:cf:2f:89:4b:d5:68:
f6:fd:ed:3b:ad:a4:b8:55:53:ec:a7:e4:eb:d8:08:
ea:f9:0e:ec:bc:24:82:fa:97:7e:17:c3:d5:33:6d:
21:b9:ec:7a:a7:05:23:00:fd:2d:4b:59:c2:93:3f:
40:3f:cb:21:a3:ae:0a:90:1a:13:c1:35:3f:af:d1:
24:22:ef:26:36:d8:94:c2:5b:82:73:6f:89:ca:f7:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:48:76:1C:4B:BF:CB:51:A3:EE:9F:50:7B:8E:F5:33:47:E0:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/JitIdhxLv8tRo-6fUHuO9TNH4MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:74:15:5e:9b:81:3f:a6:20:1a:75:7a:9a:65:84:a2:11:52:
3e:f4:83:d1:0c:77:2e:88:50:02:c9:40:53:83:6b:40:15:5a:
0f:30:90:24:78:92:f5:f4:2e:da:b1:b6:98:68:02:56:f9:ee:
58:74:d1:66:93:ce:03:77:81:75:ca:04:a0:c3:d3:91:6f:02:
c0:38:25:31:d4:27:8e:fe:bb:cb:59:71:27:61:39:cf:e6:7e:
5b:4e:cd:64:7f:6d:3e:61:24:ce:dd:b0:59:91:7a:ab:0a:ea:
b4:96:16:0e:a5:b0:e6:db:3b:fc:5b:19:d5:f5:df:94:69:6c:
90:cd:2d:e3:60:58:7e:78:03:0f:47:95:fa:ef:5d:4a:2e:b5:
27:54:ec:c5:fe:cb:df:a6:d7:df:c1:0d:88:32:43:2b:91:5b:
a1:af:3c:94:5f:53:2d:50:62:14:6c:f2:7f:26:86:c3:30:6a:
c3:39:64:6d:3b:ee:54:f2:16:8e:c4:1e:20:74:49:a9:2a:fd:
40:8f:dc:5f:81:6c:61:03:81:c9:b8:81:77:9e:81:06:6b:f5:
65:be:a0:ab:c8:6b:aa:83:4b:b6:4a:5d:79:6b:63:93:ce:55:
15:8c:c1:19:0e:ae:b8:61:8d:01:71:c4:cd:c2:ad:09:6a:d9:
2b:bd:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:07:21 2026 by rpki-client