This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa
File: jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa (raw, json)
Hash identifier: FExYJd4IW0AFEGSSJ7W+rnnUSnn7gKOoCc+pFC2Nly4=
Subject key identifier: 8D:8A:79:DE:B0:8B:F5:9E:7E:A5:36:EB:0F:17:96:BD:F2:8C:94:D5
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019B79ED4CC05B316A7BAA499E5A6CCEAE1D
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa
Signing time: Thu 01 Jan 2026 14:19:13 +0000
ROA not before: Thu 01 Jan 2026 14:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215185
IP address blocks: 45.140.181.0/24 maxlen: 24
2a0e:c5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:4c:c0:5b:31:6a:7b:aa:49:9e:5a:6c:ce:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jan 1 14:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d8a79deb08bf59e7ea536eb0f1796bdf28c94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:15:9b:d3:ca:82:19:9a:7f:a2:4a:00:96:
7d:de:ee:aa:f1:f5:30:83:72:ce:c7:1a:7e:99:51:
93:33:5f:f4:78:99:85:41:b6:95:22:76:8a:30:a2:
08:32:d2:d9:25:90:07:80:4f:f0:23:9a:18:8f:2f:
30:f7:b0:13:1f:62:3d:47:71:ea:a5:8c:fc:20:74:
1d:ef:fb:9b:a2:16:6d:0a:2b:1e:9b:cd:e0:98:84:
59:a5:df:db:e1:1d:28:ab:cc:dc:80:6a:72:92:51:
11:76:a0:88:a0:a9:a7:4e:10:19:72:0e:33:ca:64:
87:49:56:43:02:6d:f8:1c:53:64:00:de:10:71:34:
77:c4:96:7a:bb:aa:09:fc:e2:ae:4e:bb:3d:e2:e0:
8b:28:6c:59:2d:12:e0:17:68:3e:b8:2f:5d:99:b8:
be:d3:6e:34:fb:ba:55:3f:d1:99:2d:ce:19:99:a4:
07:4c:0f:80:ae:70:ed:db:4d:06:54:b8:2e:7b:33:
3b:0f:6f:96:d4:23:8a:06:5d:bf:3d:59:61:ee:3f:
c9:48:47:6b:25:74:2c:f7:df:e4:a8:2c:a9:1d:ea:
a8:7c:4c:85:8a:00:a4:b6:bd:48:5e:ae:f0:af:16:
7b:6c:44:40:0d:ff:61:5b:3d:7d:56:fb:80:a8:12:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8A:79:DE:B0:8B:F5:9E:7E:A5:36:EB:0F:17:96:BD:F2:8C:94:D5
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.181.0/24
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
08:7f:c6:a8:e0:ca:49:fe:1a:9e:24:8a:c0:bc:16:7e:82:9e:
5a:3c:84:da:41:8e:aa:5c:cc:71:45:8c:96:84:21:2e:69:16:
d5:1e:48:6b:ec:3f:aa:cd:f9:44:62:fa:12:65:c5:2b:eb:4e:
64:f6:b6:db:90:64:8d:02:98:3f:b0:53:2e:ed:7c:3d:47:fb:
5d:d2:67:fb:6a:3c:68:a2:4a:48:7c:af:f6:96:60:ef:dc:bc:
6b:dc:62:6f:79:0e:bf:60:d1:37:00:d1:fb:2f:26:7c:31:02:
d1:08:61:37:14:be:40:c5:f7:f3:15:48:21:0b:08:ec:42:34:
ad:c8:2d:ec:72:00:7b:b3:9b:df:89:87:22:fa:d2:13:00:1b:
a2:31:47:bd:6d:2e:0c:fd:1f:ef:82:76:82:05:7f:5b:4e:fa:
3d:2b:b4:3e:15:92:5e:4c:cb:0e:48:60:95:43:b9:4c:f6:24:
54:71:1e:cf:54:69:ed:d8:a7:39:69:4e:be:77:78:09:40:7b:
72:d8:1f:67:f6:d1:91:cb:a5:50:d3:ee:fe:45:a1:66:8e:7c:
ad:2f:ef:2c:1b:28:9a:38:49:11:44:92:a9:72:86:15:a9:b2:
93:3c:ca:16:1c:74:68:cd:01:ce:a5:18:03:06:6b:81:87:10:
8a:31:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:51 2026 by rpki-client