This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa
File: JMsELryrC71hTAcMzLYAc7CKRKk.roa (raw, json)
Hash identifier: rdsIPfGSMD6EsO8NTErhSi4I9C7O//GGQnV/svCoWHA=
Subject key identifier: 24:CB:04:2E:BC:AB:0B:BD:61:4C:07:0C:CC:B6:00:73:B0:8A:44:A9
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019B7D5CDA3DA2809843E7AE9372B2FC782B
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa
Signing time: Fri 02 Jan 2026 06:19:55 +0000
ROA not before: Fri 02 Jan 2026 06:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35424
IP address blocks: 45.67.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:da:3d:a2:80:98:43:e7:ae:93:72:b2:fc:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Jan 2 06:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24cb042ebcab0bbd614c070cccb60073b08a44a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:b8:ec:ff:d6:9a:69:d9:2b:26:c5:d7:a1:
70:31:f9:09:db:59:ad:8d:de:cb:c8:34:e8:d0:a1:
25:ce:07:9e:38:6c:16:d5:a4:64:42:40:bb:9e:c7:
d2:e1:ae:04:8c:63:c8:c7:11:d3:18:eb:01:a4:61:
e4:d7:ab:ee:76:dc:09:52:53:25:cb:12:7d:b6:7e:
58:81:f8:9c:e6:97:ca:91:a4:d6:50:11:f0:2b:89:
32:23:a7:e2:94:95:f5:37:35:db:be:7f:9b:d8:da:
90:ba:61:75:ee:6d:df:69:0c:b3:6b:fb:8d:8f:aa:
ae:50:c6:0e:fa:b8:f9:f0:54:ca:33:50:16:82:a7:
4b:50:8e:fa:d5:e7:03:35:f1:2e:20:ad:68:3d:59:
1d:dc:97:6a:ec:c9:0d:24:4b:de:72:11:d5:e5:98:
c4:dc:77:7d:a2:74:29:64:06:b1:04:bd:b5:38:56:
f8:b7:d8:12:ce:6b:c6:e0:ce:d1:48:4f:0f:b0:e7:
90:de:80:d8:7d:07:5c:98:cc:d2:73:8f:77:8a:75:
02:79:72:5d:df:94:e9:a4:c8:aa:33:37:a1:3e:03:
d4:6f:85:53:c9:de:80:88:5e:fb:22:0a:3d:93:7a:
a6:c6:2d:3d:35:a5:6b:28:fd:89:58:d3:ac:c4:5c:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:04:2E:BC:AB:0B:BD:61:4C:07:0C:CC:B6:00:73:B0:8A:44:A9
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/JMsELryrC71hTAcMzLYAc7CKRKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.164.0/22
Signature Algorithm: sha256WithRSAEncryption
48:75:c4:e3:fa:89:6c:be:b0:2b:5d:15:e0:b4:7d:60:67:63:
85:31:c8:e8:62:62:f2:a5:b0:65:d5:01:72:b6:e3:25:e6:9c:
1c:5a:a5:84:7a:fd:df:08:94:1b:63:f9:75:5e:32:ce:90:a8:
f9:d0:1a:ba:92:1a:49:00:af:47:66:2a:5c:df:4d:ce:ab:0a:
80:41:7a:f6:40:f0:86:a9:a8:98:18:44:41:3c:b5:a5:ed:88:
dd:fb:14:e0:f9:47:5b:9c:7e:29:6b:4a:d1:45:6e:51:37:ba:
e1:45:1b:0b:bc:fc:05:20:e3:43:e7:bd:89:f8:8b:ce:38:0c:
f0:d3:8c:dc:b5:97:58:d8:f5:5f:fc:8d:3c:e9:64:3a:81:ce:
79:3c:c1:e2:f3:8b:ca:5c:a5:17:c7:85:f6:b9:c3:26:7c:5d:
70:09:bc:c6:1d:6d:ad:65:80:dc:24:e6:af:92:cf:cf:81:0e:
1d:c9:5a:f3:34:90:c8:cd:57:fe:f0:93:65:45:d1:9a:5f:c9:
ff:d9:a0:98:50:9c:af:16:13:9b:d7:12:40:34:81:73:f2:a0:
e2:bd:e2:c8:7b:8b:b8:23:e1:0f:bb:f7:8b:1c:ed:9a:a5:ab:
6b:5f:b2:a6:40:51:b9:4e:6d:1c:7b:a1:bb:ee:4b:64:14:62:
3b:bd:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:16 2026 by rpki-client