This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/jrXfTMtV6H8gigUiywKcsYuAQWc.roa
File: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (raw, json)
Hash identifier: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=
Subject key identifier: 8E:B5:DF:4C:CB:55:E8:7F:20:8A:05:22:CB:02:9C:B1:8B:80:41:67
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019B77C66DDDC07BA98AC8E2E9B446C77F62
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/jrXfTMtV6H8gigUiywKcsYuAQWc.roa
Signing time: Thu 01 Jan 2026 04:17:31 +0000
ROA not before: Thu 01 Jan 2026 04:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48748
IP address blocks: 195.88.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:6d:dd:c0:7b:a9:8a:c8:e2:e9:b4:46:c7:7f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Jan 1 04:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb5df4ccb55e87f208a0522cb029cb18b804167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:06:a6:f1:e7:5b:43:ca:8b:df:da:a0:c7:
3c:f8:64:73:77:7a:82:e8:5e:9b:76:78:d5:b5:b4:
a9:95:d6:fc:d0:4b:0b:67:2e:1c:b4:0e:0f:cd:8f:
25:03:ed:91:d6:9e:be:e9:97:3d:1e:d1:ab:de:2d:
65:6d:02:88:6b:0a:d3:10:25:22:0c:b6:56:9d:c6:
a6:1f:e2:79:30:78:a0:f5:4e:08:9f:08:b6:bc:e1:
4a:d2:dc:0d:eb:31:f8:3f:d4:12:ee:38:a0:1b:d7:
4d:80:79:fd:12:3b:44:e9:51:1e:8a:cb:f7:b3:57:
ae:b8:84:b6:7d:95:60:96:9e:2b:40:2a:bd:74:36:
70:37:85:a5:eb:10:c2:cb:28:1d:0e:c5:b6:52:fa:
55:ef:ac:b7:bd:94:09:11:c6:34:f1:e8:35:9d:43:
78:da:a4:12:ea:fa:27:02:f7:b2:fc:c9:db:3d:a0:
fc:50:d6:75:5b:bb:34:3e:7b:71:60:5b:75:d6:ee:
bc:1c:9a:ce:56:53:4f:ff:b1:e5:0e:db:9b:c2:58:
08:8e:92:bb:cb:8e:bc:5e:63:e2:30:ab:cd:09:0a:
11:41:1a:21:88:8b:dd:29:59:40:9f:85:01:63:30:
2a:d2:9a:f5:1d:3e:09:3a:be:f7:b6:94:48:0f:3f:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:DF:4C:CB:55:E8:7F:20:8A:05:22:CB:02:9C:B1:8B:80:41:67
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/jrXfTMtV6H8gigUiywKcsYuAQWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:47:b6:f3:78:d1:7a:5f:27:97:56:70:5d:ba:7b:5a:28:35:
0b:63:c5:af:87:84:8f:fb:2b:1a:93:36:fe:8d:21:06:fe:a8:
ac:71:71:b6:1d:65:01:87:56:91:a1:da:eb:a4:ae:49:f7:c7:
a3:7b:7f:61:63:8b:ec:5a:a1:5a:32:c2:e1:db:a2:3d:44:a0:
90:e1:37:75:9d:81:ea:93:9b:0f:63:87:35:db:cf:8a:36:18:
9a:0e:35:6c:ce:2f:2e:45:57:a4:ec:cb:c3:af:03:5e:e9:87:
ae:cc:c5:bd:7c:49:6e:d4:14:f4:20:ad:70:83:85:bd:08:54:
18:8f:83:6e:f3:df:b2:26:8a:e7:f8:f0:9e:e9:4a:3c:43:83:
dc:25:28:bd:90:3c:ef:69:75:b8:8f:51:67:00:25:6b:9a:04:
22:6d:b2:6b:23:d3:0d:07:7c:f1:6f:56:7b:54:0b:5e:ff:e2:
76:22:f8:71:30:47:c8:c3:24:58:29:85:3e:10:f6:d9:64:09:
72:e2:34:cf:c6:8d:64:b9:69:fd:90:0a:00:d3:9c:53:9b:8f:
ea:69:42:b9:77:d1:1c:4f:a2:fe:b0:33:01:38:b1:32:51:c4:
25:81:72:b1:e9:f5:78:e6:5c:9f:27:3c:c2:3e:d4:d6:68:8a:
9c:59:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:54 2026 by rpki-client