This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/JMihaMAdn0ZWhahng99-PNdrUaY.roa
File: JMihaMAdn0ZWhahng99-PNdrUaY.roa (raw, json)
Hash identifier: csBLW4NyC54K0QK0MKH2YJqzIewsSYbBszldoM71OBA=
Subject key identifier: 24:C8:A1:68:C0:1D:9F:46:56:85:A8:67:83:DF:7E:3C:D7:6B:51:A6
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 019B7F801185E4D05FB7A688B65F3F9AA726
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/JMihaMAdn0ZWhahng99-PNdrUaY.roa
Signing time: Fri 02 Jan 2026 16:17:38 +0000
ROA not before: Fri 02 Jan 2026 16:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44219
IP address blocks: 94.247.184.0/23 maxlen: 23
94.247.186.0/23 maxlen: 23
94.247.188.0/22 maxlen: 22
178.249.216.0/23 maxlen: 23
178.249.218.0/23 maxlen: 23
178.249.220.0/22 maxlen: 22
194.39.144.0/23 maxlen: 23
194.39.146.0/23 maxlen: 23
2a00:1cb0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:11:85:e4:d0:5f:b7:a6:88:b6:5f:3f:9a:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Jan 2 16:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24c8a168c01d9f465685a86783df7e3cd76b51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:71:a1:c7:fc:3f:94:bc:42:a3:46:ae:02:
cd:43:20:6a:4f:63:3d:d2:5f:82:7d:6c:93:90:09:
40:6b:52:7d:64:b5:20:dc:05:55:74:f2:f9:a5:a9:
f5:ed:05:2d:40:77:05:cd:13:3a:bf:7d:56:06:12:
28:cb:b5:e5:39:f1:7f:a5:a0:35:36:52:f6:3e:98:
f5:fa:45:ca:27:8d:28:84:24:88:4e:53:1a:e5:e3:
12:80:d6:47:49:d6:f5:94:96:a8:14:98:35:ed:5a:
58:66:76:8e:61:0a:ab:a1:73:1c:d5:86:48:96:4e:
77:53:5b:b9:a3:93:67:ee:f6:81:c6:94:a2:9c:27:
04:e1:7f:33:9c:6c:13:b1:20:64:7a:35:4c:34:fe:
7a:cc:8b:ca:9a:51:62:29:15:ff:e4:d6:1d:f6:ff:
ec:86:2c:dd:0e:aa:d5:ec:03:2a:7e:66:e0:13:3a:
3e:3b:12:d2:81:77:b0:a6:fa:90:3a:42:21:6c:6a:
82:f1:b9:be:d6:dd:06:f6:36:df:5b:d6:4a:8f:56:
db:c8:ce:a1:0f:c4:72:73:f8:c1:89:35:c6:04:96:
d8:4b:b7:15:b0:97:ff:3b:cb:94:11:42:94:57:49:
38:3d:bc:48:2e:67:9b:b8:21:97:d7:25:90:3b:64:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:A1:68:C0:1D:9F:46:56:85:A8:67:83:DF:7E:3C:D7:6B:51:A6
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/JMihaMAdn0ZWhahng99-PNdrUaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.184.0/21
178.249.216.0/21
194.39.144.0/22
IPv6:
2a00:1cb0::/32
Signature Algorithm: sha256WithRSAEncryption
43:8b:fe:5e:fb:84:54:46:f5:7f:ea:bb:eb:c5:57:99:5f:ee:
28:3e:d9:f0:bd:fb:65:31:72:08:cd:a5:08:22:5e:b3:14:e1:
4b:41:5d:2e:fd:33:21:55:d3:0f:4c:32:7c:0d:00:b8:8e:ba:
21:1d:56:54:ed:1a:07:ab:68:43:39:d9:7a:a8:ca:76:7e:29:
59:24:9f:cb:9e:98:2b:38:b1:45:86:bd:ec:a4:56:74:8d:dc:
66:42:72:76:27:f6:f9:24:13:61:d3:49:d8:f7:57:1b:59:1b:
ed:1a:ad:83:69:da:b1:45:2a:9b:31:e8:80:3e:c6:9d:91:ab:
5b:37:fb:6c:93:03:47:53:45:01:86:48:f7:55:74:be:aa:e7:
9d:81:83:75:e2:73:0a:c1:0f:79:ca:31:b5:54:50:20:f4:a4:
ba:e7:cf:4d:38:c4:19:9d:38:fe:ec:54:c6:c7:55:ba:0a:58:
28:25:db:69:da:e2:86:c7:cf:ff:ed:46:3e:91:d7:ca:4d:28:
9a:60:d8:37:ae:8b:f8:fb:81:5e:6d:0a:1b:86:3b:92:48:e1:
a5:79:f9:fc:ee:79:33:df:b9:6d:b1:5e:5e:55:fa:b0:b5:d7:
ce:89:5e:80:0e:d0:ed:90:2c:f6:5d:88:4b:ac:57:80:59:c9:
4f:e6:3f:57
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt/gBGF5NBft6aItl8/mqcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi
ZDg1N2QwHhcNMjYwMTAyMTYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGM4YTE2OGMwMWQ5ZjQ2NTY4NWE4Njc4M2RmN2UzY2Q3NmI1MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHhxocf8P5S8QqNGrgLNQyBqT2M9
0l+CfWyTkAlAa1J9ZLUg3AVVdPL5pan17QUtQHcFzRM6v31WBhIoy7XlOfF/paA1
NlL2Ppj1+kXKJ40ohCSITlMa5eMSgNZHSdb1lJaoFJg17VpYZnaOYQqroXMc1YZI
lk53U1u5o5Nn7vaBxpSinCcE4X8znGwTsSBkejVMNP56zIvKmlFiKRX/5NYd9v/s
hizdDqrV7AMqfmbgEzo+OxLSgXewpvqQOkIhbGqC8bm+1t0G9jbfW9ZKj1bbyM6h
D8Ryc/jBiTXGBJbYS7cVsJf/O8uUEUKUV0k4PbxILmebuCGX1yWQO2SBMQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCTIoWjAHZ9GVoWoZ4PffjzXa1GmMB8GA1UdIwQY
MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt
NmQ2ZjU1OGE3ZDY1LzEvSk1paGFNQWRuMFpXaGFobmc5OS1QTmRyVWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1
LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXve4AwQD
svnYAwQCwieQMA0EAgACMAcDBQAqABywMA0GCSqGSIb3DQEBCwUAA4IBAQBDi/5e
+4RURvV/6rvrxVeZX+4oPtnwvftlMXIIzaUIIl6zFOFLQV0u/TMhVdMPTDJ8DQC4
jrohHVZU7RoHq2hDOdl6qMp2filZJJ/LnpgrOLFFhr3spFZ0jdxmQnJ2J/b5JBNh
00nY91cbWRvtGq2DadqxRSqbMeiAPsadkatbN/tskwNHU0UBhkj3VXS+quedgYN1
4nMKwQ95yjG1VFAg9KS6589NOMQZnTj+7FTGx1W6ClgoJdtp2uKGx8//7UY+kdfK
TSiaYNg3rov4+4FebQobhjuSSOGlefn87nkz37ltsV5eVfqwtdfOiV6ADtDtkCz2
XYhLrFeAWclP5j9X
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:22:32 2026 by rpki-client