This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa
File: JUCo4Exam4PNRTU5sCWbfHwS54s.roa (raw, json)
Hash identifier: +CVnDhXiceqm+9Z71JNdn8epL48e8dAV3xOBv82sADY=
Subject key identifier: 25:40:A8:E0:4C:5A:9B:83:CD:45:35:39:B0:25:9B:7C:7C:12:E7:8B
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019B7C134FA022D3E68384FF31FB5D8D31D8
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa
Signing time: Fri 02 Jan 2026 00:19:58 +0000
ROA not before: Fri 02 Jan 2026 00:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 260
IP address blocks: 78.40.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:4f:a0:22:d3:e6:83:84:ff:31:fb:5d:8d:31:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jan 2 00:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2540a8e04c5a9b83cd453539b0259b7c7c12e78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:67:27:97:bd:78:43:76:45:96:4b:d0:94:
89:37:34:3f:19:96:9e:06:e7:51:89:de:0f:3a:96:
b1:51:aa:e7:56:a0:ac:3b:9f:76:8b:e0:86:2d:62:
4b:76:83:fd:32:f2:d6:00:6c:5a:f1:ce:1a:6a:57:
58:d1:98:7c:5d:e5:17:07:53:27:d3:6c:7d:dd:c0:
c3:58:4a:0f:76:f2:2a:fb:30:9b:8d:6c:bb:0e:e9:
ab:08:61:b4:3a:ce:02:8a:68:a1:8d:22:51:be:88:
bf:70:13:5c:12:21:0f:6b:70:7c:a7:83:44:24:d0:
1b:33:6a:d8:ed:68:b8:e1:3f:0a:aa:c6:97:05:fa:
35:ec:05:bb:b5:4e:e0:41:4a:d2:6c:44:ec:0f:9f:
61:bc:3c:63:32:5b:68:6e:04:c5:d6:79:b5:69:7e:
2d:40:f1:31:9c:de:05:5f:11:24:11:26:3f:41:92:
e1:d8:6c:bd:ab:0b:be:00:ac:ac:a9:af:dd:9a:09:
32:25:b4:25:ed:4f:36:fa:c5:20:b4:64:86:b7:dc:
29:83:ca:42:f1:0f:6c:11:57:20:27:00:63:66:5d:
5c:9f:6e:06:c0:c9:e9:0c:ca:75:1c:d8:ff:ad:ce:
07:38:30:e4:2b:4a:cc:de:81:ab:9f:ce:f3:e4:b9:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:A8:E0:4C:5A:9B:83:CD:45:35:39:B0:25:9B:7C:7C:12:E7:8B
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/JUCo4Exam4PNRTU5sCWbfHwS54s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:6a:4c:df:54:ec:56:78:08:02:2c:0a:f2:5a:40:d6:e9:42:
5a:cc:e3:9a:f8:6f:d6:1c:d9:38:9f:c3:ff:27:f7:23:d1:64:
ac:e6:79:fc:57:db:e2:24:a2:bb:d3:71:7d:3a:bb:c0:4a:89:
e2:03:28:7e:fe:7b:54:b7:7c:4f:f3:b9:89:67:bb:f0:1d:dd:
63:08:68:d8:a4:a8:48:bf:15:d9:24:0f:80:17:4f:da:76:4a:
30:aa:bf:32:1f:d2:8a:84:0b:d4:df:be:6a:e7:ee:a3:5b:99:
f9:3b:32:f5:1c:f0:a0:c6:58:a1:c5:8c:f5:ef:2d:c6:a4:5e:
5b:76:41:a8:af:6b:84:0a:cd:ca:99:72:a7:1d:0c:db:2b:10:
c3:7c:18:30:69:ad:c8:36:22:1f:73:e1:99:9d:cb:98:a4:ff:
0b:33:76:32:4e:99:28:cc:8c:f8:6c:68:f1:d6:b3:f5:09:dd:
d0:c2:32:70:1a:35:65:c1:14:be:df:6e:5b:45:bb:22:9f:70:
59:3c:ad:6a:48:b1:17:3d:3b:ba:9e:04:92:23:4c:47:f4:8e:
76:87:6d:1d:43:b8:df:f4:ff:4d:d5:14:5d:a3:e7:2c:9e:75:
46:69:f1:e3:a4:9d:db:9a:7e:f1:c2:1e:85:52:3e:ae:73:56:
5d:89:e4:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E0+gItPmg4T/MftdjTHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTQwYThlMDRjNWE5YjgzY2Q0NTM1MzliMDI1OWI3YzdjMTJlNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4dnJ5e9eEN2RZZL0JSJNzQ/GZae
BudRid4POpaxUarnVqCsO592i+CGLWJLdoP9MvLWAGxa8c4aaldY0Zh8XeUXB1Mn
02x93cDDWEoPdvIq+zCbjWy7DumrCGG0Os4CimihjSJRvoi/cBNcEiEPa3B8p4NE
JNAbM2rY7Wi44T8KqsaXBfo17AW7tU7gQUrSbETsD59hvDxjMltobgTF1nm1aX4t
QPExnN4FXxEkESY/QZLh2Gy9qwu+AKysqa/dmgkyJbQl7U82+sUgtGSGt9wpg8pC
8Q9sEVcgJwBjZl1cn24GwMnpDMp1HNj/rc4HODDkK0rM3oGrn87z5LkNMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVAqOBMWpuDzUU1ObAlm3x8EueLMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvSlVDbzRFeGFtNFBOUlRVNXNDV2JmSHdTNTRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTijMMA0G
CSqGSIb3DQEBCwUAA4IBAQCmakzfVOxWeAgCLAryWkDW6UJazOOa+G/WHNk4n8P/
J/cj0WSs5nn8V9viJKK703F9OrvASoniAyh+/ntUt3xP87mJZ7vwHd1jCGjYpKhI
vxXZJA+AF0/adkowqr8yH9KKhAvU375q5+6jW5n5OzL1HPCgxlihxYz17y3GpF5b
dkGor2uECs3KmXKnHQzbKxDDfBgwaa3INiIfc+GZncuYpP8LM3YyTpkozIz4bGjx
1rP1Cd3QwjJwGjVlwRS+325bRbsin3BZPK1qSLEXPTu6ngSSI0xH9I52h20dQ7jf
9P9N1RRdo+csnnVGafHjpJ3bmn7xwh6FUj6uc1ZdieQk
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:31 2026 by rpki-client