This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/JXm4LWXIpBMGqgHbvgoYihKzBVk.roa
File: JXm4LWXIpBMGqgHbvgoYihKzBVk.roa (raw, json)
Hash identifier: 5kQxFCRpZBFMUqQXhqZK+G8qNHh71Y8GlKTBlJe50XE=
Subject key identifier: 25:79:B8:2D:65:C8:A4:13:06:AA:01:DB:BE:0A:18:8A:12:B3:05:59
Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Certificate serial: 019B7E38EECD09A90F0EC9449DD451E86C8A
Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/JXm4LWXIpBMGqgHbvgoYihKzBVk.roa
Signing time: Fri 02 Jan 2026 10:20:18 +0000
ROA not before: Fri 02 Jan 2026 10:20:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60577
IP address blocks: 193.39.70.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:ee:cd:09:a9:0f:0e:c9:44:9d:d4:51:e8:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4
Validity
Not Before: Jan 2 10:20:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2579b82d65c8a41306aa01dbbe0a188a12b30559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:0b:93:fa:d7:e1:29:45:62:77:59:bf:3d:
ab:99:3d:38:67:9a:3d:b8:e2:97:df:43:56:ab:d5:
dc:39:d9:4d:69:8b:6a:2d:bc:2a:9a:bb:e5:7d:78:
c1:44:05:c7:11:60:2b:b2:fb:30:c4:7b:22:d1:37:
48:b0:5f:d4:c4:87:28:1c:22:cd:de:10:e2:c1:a5:
b2:eb:cd:aa:28:39:e6:e7:07:49:32:a8:c0:48:99:
3b:f8:84:fb:ed:cd:a5:07:2c:fa:8d:2d:df:57:3d:
a6:0a:51:c0:f7:25:2e:32:12:d1:9c:73:8c:7e:8d:
16:22:ec:ee:e4:15:82:74:5e:ec:84:2b:50:39:b7:
15:30:c5:1b:da:b7:52:94:7f:55:19:8e:f5:8b:22:
3a:0c:20:1d:bb:4f:5a:40:a7:7b:bf:b1:52:7c:e3:
39:5c:94:2b:90:29:f1:56:b0:6a:69:d5:21:a9:52:
b8:42:30:dd:df:f3:c7:db:6c:aa:a7:62:fd:c9:0b:
18:e8:eb:f6:50:21:bd:46:f7:0b:5f:79:75:34:8b:
80:cd:1c:c8:14:be:e2:31:64:d5:d5:9b:db:c5:b3:
c3:ef:d4:25:ea:a2:ad:66:66:61:19:10:b9:3e:74:
03:cb:a1:85:91:10:fa:70:63:98:67:73:c5:cf:55:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:B8:2D:65:C8:A4:13:06:AA:01:DB:BE:0A:18:8A:12:B3:05:59
X509v3 Authority Key Identifier:
keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/JXm4LWXIpBMGqgHbvgoYihKzBVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.70.0/24
Signature Algorithm: sha256WithRSAEncryption
19:eb:97:93:6f:d1:cd:ba:50:66:6f:c6:b6:08:56:30:c0:e8:
4f:31:76:d1:76:d5:19:71:54:01:94:10:15:5b:db:fd:57:b5:
87:b1:7a:8b:30:b0:76:fe:b7:93:9b:d2:ea:f0:dc:90:b2:bf:
c8:f6:f8:1d:e9:65:5e:2a:50:6d:a3:0c:de:2f:8d:f5:a4:5c:
9f:c9:43:84:fb:98:47:dc:8f:1f:c0:ed:ec:b3:eb:c7:ec:1d:
d5:89:a5:81:8a:db:cb:16:63:82:44:a3:e7:c4:b0:7d:f5:98:
d3:d0:e3:1c:2e:98:41:2f:4c:7a:38:45:ae:2e:11:e2:77:7f:
09:7d:98:06:f4:b0:fb:c7:24:ef:4c:bb:0a:8a:0f:01:0d:99:
57:bc:56:2c:8d:ce:d2:c9:0e:d3:77:10:4c:79:4c:18:96:06:
dd:d2:b7:3a:9d:c6:e8:80:49:0c:96:c0:d3:03:73:bb:4f:1a:
d8:9f:0e:a0:93:4d:7d:26:17:73:30:1f:9c:95:3d:3e:14:2b:
76:0a:22:7a:31:4b:6c:ba:52:7a:37:7e:8d:3b:74:c5:c3:ee:
b0:0b:63:79:e1:c1:80:7b:86:37:1f:80:df:23:b2:68:22:1b:
ff:c6:db:a8:33:01:60:55:b3:de:43:93:a9:fd:42:ab:db:e0:
78:8b:fa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:12 2026 by rpki-client