This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa
File: rjjSoAat_n07PoQnlpP54238J18.roa (raw, json)
Hash identifier: 8lMbg8iLAkX/M5jc8c3TgyGl0DahY6oK1llhi2qDKko=
Subject key identifier: AE:38:D2:A0:06:AD:FE:7D:3B:3E:84:27:96:93:F9:E3:6D:FC:27:5F
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 019B76EB06A13293EC31ECA16E6CD1146335
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa
Signing time: Thu 01 Jan 2026 00:17:52 +0000
ROA not before: Thu 01 Jan 2026 00:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8899
IP address blocks: 46.245.216.0/21 maxlen: 21
87.192.128.0/18 maxlen: 24
94.31.64.0/18 maxlen: 23
94.31.67.0/24 maxlen: 24
94.31.68.0/22 maxlen: 22
94.31.72.0/22 maxlen: 22
94.31.80.0/20 maxlen: 20
94.31.92.0/23 maxlen: 23
94.31.94.0/23 maxlen: 23
94.31.96.0/20 maxlen: 20
94.31.108.0/22 maxlen: 22
94.31.112.0/23 maxlen: 23
94.31.114.0/23 maxlen: 23
94.31.116.0/22 maxlen: 22
150.5.0.0/18 maxlen: 24
185.7.196.0/22 maxlen: 22
185.22.44.0/22 maxlen: 22
185.22.44.0/24 maxlen: 24
185.22.45.0/24 maxlen: 24
185.22.140.0/22 maxlen: 22
185.113.120.0/22 maxlen: 22
185.158.40.0/22 maxlen: 22
185.158.41.0/24 maxlen: 24
2a00:1f38::/32 maxlen: 32
2a00:6020::/32 maxlen: 32
2a00:6020:0:21::/64 maxlen: 64
2a00:61e0::/32 maxlen: 32
2a03:fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:06:a1:32:93:ec:31:ec:a1:6e:6c:d1:14:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jan 1 00:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae38d2a006adfe7d3b3e84279693f9e36dfc275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:9f:50:b5:77:5a:30:cd:97:eb:7c:75:07:
fb:85:81:14:a1:92:dc:a3:5f:1b:d4:0f:26:49:78:
01:e0:33:b4:0f:0b:d2:e8:35:ed:e9:29:2e:8e:00:
66:54:f0:8a:d3:06:21:a4:a5:1a:41:78:ae:3d:5b:
0d:df:4e:ec:8f:40:b2:13:ee:f3:15:4c:41:59:9c:
72:69:1f:ae:f9:11:4a:88:f4:4c:23:20:ca:26:30:
13:ff:dd:99:39:f9:2c:92:f4:03:6f:6a:7f:f6:e2:
df:d0:dd:95:cf:c0:20:19:93:3f:c1:84:c7:74:d3:
1a:0c:d1:77:dc:4e:0b:7f:49:11:cc:d7:24:42:36:
63:42:eb:6a:4d:ec:96:b0:b4:c9:1f:26:c4:25:24:
62:90:b2:be:51:da:f4:87:2e:de:11:36:61:6a:d8:
77:86:60:ea:b5:c7:ea:97:bf:9b:a8:d1:97:33:30:
89:7e:c3:0a:dd:1e:ab:9f:11:96:02:13:88:93:66:
87:f3:77:e1:f6:2d:54:4a:45:01:0b:fe:7f:70:00:
6a:10:da:7a:fe:a0:5b:0c:d9:8e:40:06:6b:26:84:
92:a2:78:d1:9c:b9:88:f3:30:97:6a:30:e7:28:f6:
7e:0b:9e:12:b5:51:d1:01:38:1b:d5:f2:a6:20:9a:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:D2:A0:06:AD:FE:7D:3B:3E:84:27:96:93:F9:E3:6D:FC:27:5F
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.216.0/21
87.192.128.0/18
94.31.64.0/18
150.5.0.0/18
185.7.196.0/22
185.22.44.0/22
185.22.140.0/22
185.113.120.0/22
185.158.40.0/22
IPv6:
2a00:1f38::/32
2a00:6020::/32
2a00:61e0::/32
2a03:fc0::/32
Signature Algorithm: sha256WithRSAEncryption
03:ed:2c:52:83:22:41:9f:44:64:ab:17:f6:c3:8b:dd:b6:16:
d8:ba:1f:7e:5a:56:eb:02:3c:98:88:65:75:03:3c:d1:e2:d8:
9c:80:63:f1:78:b0:3d:3a:5b:e4:64:7a:90:c1:34:b3:c0:60:
9e:14:2f:ef:6f:5f:c2:b7:ec:8d:52:01:5a:0f:d4:8c:47:b0:
f2:7e:53:31:66:3d:00:28:fa:f0:5d:19:9d:d3:9b:64:53:13:
8b:f3:87:61:81:53:29:ab:0d:72:4e:c9:39:e0:57:38:1e:08:
b7:58:9d:e9:37:c7:a0:00:d1:d9:88:18:23:e7:1c:fb:1e:c3:
a6:5f:f3:dd:54:9a:62:59:8b:cb:6f:4d:dc:6c:f4:65:f6:6a:
d4:eb:99:29:2d:9f:d1:14:53:a4:17:64:67:fb:e3:0d:26:fd:
9c:1b:73:fe:c9:79:e4:17:c8:f1:ef:08:fb:07:2a:16:4e:95:
ea:41:4c:8a:c1:7d:82:9f:f9:59:76:c0:d0:4d:15:bd:87:42:
46:0b:5c:e2:70:8d:22:c4:0e:04:4b:ec:39:32:5d:f1:93:4c:
9c:4c:b8:cf:33:e2:65:63:e7:af:c3:67:5d:5d:e4:9a:55:4f:
33:55:f8:63:40:eb:3d:8b:37:f5:ef:9d:20:b7:ea:2e:e8:49:
26:3c:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:24 2026 by rpki-client