This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/jjX5TXmjG0znDgx0gHsc11UZHgo.roa
File: jjX5TXmjG0znDgx0gHsc11UZHgo.roa (raw, json)
Hash identifier: xQ6rZw7zcUclwGeNTNHTKDo+9jup2gmdqUUpBERqC/A=
Subject key identifier: 8E:35:F9:4D:79:A3:1B:4C:E7:0E:0C:74:80:7B:1C:D7:55:19:1E:0A
Certificate issuer: /CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Certificate serial: 019B7EA4F5E44B08D38A72E028B72780FCC9
Authority key identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/jjX5TXmjG0znDgx0gHsc11UZHgo.roa
Signing time: Fri 02 Jan 2026 12:18:18 +0000
ROA not before: Fri 02 Jan 2026 12:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204815
IP address blocks: 203.23.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:f5:e4:4b:08:d3:8a:72:e0:28:b7:27:80:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Validity
Not Before: Jan 2 12:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e35f94d79a31b4ce70e0c74807b1cd755191e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:62:25:34:11:0e:78:b2:91:63:24:5b:60:
14:be:0d:e7:15:61:69:3a:7e:6f:f5:77:42:ec:fc:
97:c6:bf:5a:bf:60:44:dd:22:0f:e7:3a:83:5c:28:
50:93:da:1b:20:d1:bb:c9:df:f9:de:b4:ff:29:26:
43:5d:1d:c1:ec:e0:41:70:ae:aa:02:af:02:39:58:
0b:8f:80:6a:30:4b:0a:c1:a7:f8:38:12:ad:dd:7e:
00:f7:42:77:f2:75:c4:57:55:89:9f:0c:dd:e0:0d:
72:4a:87:9b:25:26:16:6e:a6:1a:cb:62:70:10:ff:
81:d7:41:80:07:7d:bb:13:3a:81:1b:88:d1:c6:46:
17:e5:00:48:02:51:85:70:a4:0e:d2:75:d4:c0:e3:
8a:f1:b5:f1:38:76:fe:20:d9:94:c9:73:05:95:c9:
fa:9c:a0:0e:47:54:8d:5e:60:b0:e0:b2:46:30:a5:
18:41:b8:7d:ad:3a:39:df:04:d8:d7:bc:5a:d6:9a:
32:88:1d:ba:e3:18:0d:52:b3:30:14:dc:47:38:43:
a0:17:c1:8b:99:5d:27:ec:d9:26:d7:21:3e:51:08:
26:01:f7:91:5d:0a:7e:29:c9:3e:57:3d:d7:76:f1:
65:52:35:bf:44:f2:4e:a2:eb:a4:6e:99:6f:24:fe:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:F9:4D:79:A3:1B:4C:E7:0E:0C:74:80:7B:1C:D7:55:19:1E:0A
X509v3 Authority Key Identifier:
keyid:1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/jjX5TXmjG0znDgx0gHsc11UZHgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.23.255.0/24
Signature Algorithm: sha256WithRSAEncryption
72:90:ca:09:41:1c:60:27:11:da:12:82:07:ee:f9:cd:a1:35:
20:66:2a:c2:7c:5a:b9:97:e9:a1:96:a2:1f:79:f5:53:70:92:
57:58:1c:ab:b3:38:59:0f:22:eb:e8:66:ab:11:4c:57:77:94:
93:3d:05:f8:17:67:dc:2a:c7:88:f6:e1:e3:08:08:8e:f9:c4:
e9:2b:26:11:e4:cd:17:28:28:87:8d:cc:73:ae:cd:9c:97:8d:
41:22:1b:68:b6:78:33:62:a6:32:69:e9:6c:50:82:6d:c4:89:
62:b7:ff:c8:cb:54:fe:94:67:a4:18:6b:14:94:b7:f6:d5:94:
fc:ea:ca:66:c9:50:66:2e:03:8c:b8:0b:eb:0f:68:a6:dc:ec:
3e:4c:c7:59:59:05:c6:87:fa:28:a2:48:36:4c:3b:dc:09:fc:
48:15:55:9f:f5:89:85:26:ed:3f:da:6b:d5:88:fd:89:da:0d:
25:a0:7f:8e:b1:7b:aa:b9:00:a9:2d:74:98:66:17:8b:b7:09:
0c:00:93:4d:b6:cd:9e:41:95:fa:a4:bf:68:d0:7b:c0:53:de:
e3:5d:63:70:4f:62:5e:f7:b5:e3:d3:e7:d2:dd:32:bc:c0:70:
72:90:3d:2a:0d:cc:79:b8:1d:d9:25:4f:13:0b:4f:b2:6e:95:
d7:cc:3b:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pPXkSwjTinLgKLcngPzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmViZjQ2NTgyYTI0M2E3OThlZGRmMzVhYjIzMWY3NWVj
NWEzODIwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTM1Zjk0ZDc5YTMxYjRjZTcwZTBjNzQ4MDdiMWNkNzU1MTkxZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn5iJTQRDniykWMkW2AUvg3nFWFp
On5v9XdC7PyXxr9av2BE3SIP5zqDXChQk9obING7yd/53rT/KSZDXR3B7OBBcK6q
Aq8COVgLj4BqMEsKwaf4OBKt3X4A90J38nXEV1WJnwzd4A1ySoebJSYWbqYay2Jw
EP+B10GAB327EzqBG4jRxkYX5QBIAlGFcKQO0nXUwOOK8bXxOHb+INmUyXMFlcn6
nKAOR1SNXmCw4LJGMKUYQbh9rTo53wTY17xa1poyiB264xgNUrMwFNxHOEOgF8GL
mV0n7Nkm1yE+UQgmAfeRXQp+Kck+Vz3XdvFlUjW/RPJOouukbplvJP6FcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI41+U15oxtM5w4MdIB7HNdVGR4KMB8GA1UdIwQY
MBaAFBxuv0ZYKiQ6eY7d81qyMfdexaOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGIt
MmIzMzVhYzY2YWY1LzEvampYNVRYbWpHMHpuRGd4MGdIc2MxMVVaSGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8zMDlkMzAtYjFmNi00NDQyLWEyZGItMmIzMzVhYzY2YWY1
LzEvSEc2X1JsZ3FKRHA1anQzeldySXg5MTdGbzRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyxf/MA0G
CSqGSIb3DQEBCwUAA4IBAQBykMoJQRxgJxHaEoIH7vnNoTUgZirCfFq5l+mhlqIf
efVTcJJXWByrszhZDyLr6GarEUxXd5STPQX4F2fcKseI9uHjCAiO+cTpKyYR5M0X
KCiHjcxzrs2cl41BIhtotngzYqYyaelsUIJtxIlit//Iy1T+lGekGGsUlLf21ZT8
6spmyVBmLgOMuAvrD2im3Ow+TMdZWQXGh/oookg2TDvcCfxIFVWf9YmFJu0/2mvV
iP2J2g0loH+OsXuquQCpLXSYZheLtwkMAJNNts2eQZX6pL9o0HvAU97jXWNwT2Je
97Xj0+fS3TK8wHBykD0qDcx5uB3ZJU8TC0+ybpXXzDuy
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:06 2026 by rpki-client