This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa
File: jCuo6545oiKxunzEzdjn4KWAwKk.roa (raw, json)
Hash identifier: feub2xmiSI1LpIG2NYiyuel10Qun7eDdOaL8sGSW3Wo=
Subject key identifier: 8C:2B:A8:EB:9E:39:A2:22:B1:BA:7C:C4:CD:D8:E7:E0:A5:80:C0:A9
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019A9CBC4E8072A15A4D70B42E7DCC8569D6
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa
Signing time: Wed 19 Nov 2025 15:29:37 +0000
ROA not before: Wed 19 Nov 2025 15:29:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 85.8.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:9c:bc:4e:80:72:a1:5a:4d:70:b4:2e:7d:cc:85:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Nov 19 15:29:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c2ba8eb9e39a222b1ba7cc4cdd8e7e0a580c0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:37:f0:cc:75:55:d4:1f:27:61:b1:15:6e:
e9:33:3a:a7:fb:e6:17:45:4a:90:70:ed:d6:cb:a6:
20:1d:5c:d3:7d:e5:b9:f0:60:da:f2:d6:c6:85:2f:
76:d9:e2:a6:5c:10:d3:8b:b4:d8:27:c0:70:78:ff:
09:e5:13:2d:39:cb:6a:e6:7f:f9:c5:4d:29:1f:27:
4a:70:1b:88:b6:af:db:2e:39:a1:fb:09:26:44:ef:
bb:f9:2f:7d:1d:88:d6:8c:3c:1c:7f:7d:69:51:81:
17:fa:b1:83:2b:08:13:75:cf:cd:78:a6:1a:1c:69:
69:62:28:7e:54:cc:4a:1a:1d:4a:37:51:8f:33:dd:
78:b2:0f:93:7e:21:7a:cc:fc:77:21:5e:0d:71:fd:
83:3f:f6:84:5b:08:b3:49:a5:7e:de:40:cf:24:17:
a9:ee:ce:5f:21:16:f1:cd:c4:f2:f2:df:e8:79:d5:
b0:73:cc:12:6d:42:a8:8a:65:ed:bd:fb:44:e5:3f:
4c:93:f8:82:95:4e:02:90:60:86:9f:21:8f:4e:02:
e3:18:36:fe:76:f1:28:67:38:99:62:33:d8:f5:f9:
ae:eb:6d:fa:2c:aa:96:46:5c:c4:db:71:b0:f9:b4:
9f:07:e1:46:cd:e0:a1:5e:65:89:95:23:36:d6:7d:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:A8:EB:9E:39:A2:22:B1:BA:7C:C4:CD:D8:E7:E0:A5:80:C0:A9
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jCuo6545oiKxunzEzdjn4KWAwKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
49:1b:8b:dd:8e:1b:07:77:1c:28:65:f8:af:f4:4d:30:ca:54:
3d:7c:fe:23:4e:e1:73:90:f0:dc:21:d3:00:e8:e8:86:8d:b0:
e6:1a:25:0b:ab:9a:f8:31:67:5a:65:59:67:9a:80:2c:8d:33:
2a:56:36:1b:1e:42:7e:73:35:4a:4e:12:d6:b5:b2:9b:25:54:
4e:f6:e4:31:fe:ce:a3:ea:df:76:84:f0:33:f2:f4:58:65:ff:
2b:d3:2f:63:3a:5a:82:42:c9:56:75:8b:82:08:96:d5:c6:a4:
83:be:2a:ab:01:34:07:40:e4:c7:a7:8f:73:1e:62:c5:f3:e3:
1e:80:54:a8:4d:94:f1:ad:d2:fc:0f:a7:21:69:6e:db:3d:50:
38:2d:f0:e1:44:84:01:fa:c7:d4:5d:78:7f:e8:2c:39:33:56:
56:ae:e4:00:1d:2a:66:ac:2b:c2:65:d4:51:68:88:99:7d:5a:
0d:11:38:f1:d6:d1:ad:0f:7b:b9:d0:fd:d1:29:56:26:1d:c9:
bc:ad:d2:5e:f7:79:54:d9:8f:07:6b:57:8c:57:f0:04:04:45:
69:60:a0:80:6b:e0:34:3a:5f:6c:48:d2:42:db:26:28:1b:3b:
ed:38:34:b2:19:91:9f:a4:61:75:dd:32:55:5b:a9:f5:93:30:
01:45:be:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqcvE6AcqFaTXC0Ln3MhWnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4
Y2RhNmUwHhcNMjUxMTE5MTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzJiYThlYjllMzlhMjIyYjFiYTdjYzRjZGQ4ZTdlMGE1ODBjMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8U38Mx1VdQfJ2GxFW7pMzqn++YX
RUqQcO3Wy6YgHVzTfeW58GDa8tbGhS922eKmXBDTi7TYJ8BweP8J5RMtOctq5n/5
xU0pHydKcBuItq/bLjmh+wkmRO+7+S99HYjWjDwcf31pUYEX+rGDKwgTdc/NeKYa
HGlpYih+VMxKGh1KN1GPM914sg+TfiF6zPx3IV4Ncf2DP/aEWwizSaV+3kDPJBep
7s5fIRbxzcTy8t/oedWwc8wSbUKoimXtvftE5T9Mk/iClU4CkGCGnyGPTgLjGDb+
dvEoZziZYjPY9fmu6236LKqWRlzE23Gw+bSfB+FGzeChXmWJlSM21n2AGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwrqOueOaIisbp8xM3Y5+ClgMCpMB8GA1UdIwQY
MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt
NjUzMzJiNDdmNWViLzEvakN1bzY1NDVvaUt4dW56RXpkam40S1dBd0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi
LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVQi2MA0G
CSqGSIb3DQEBCwUAA4IBAQBJG4vdjhsHdxwoZfiv9E0wylQ9fP4jTuFzkPDcIdMA
6OiGjbDmGiULq5r4MWdaZVlnmoAsjTMqVjYbHkJ+czVKThLWtbKbJVRO9uQx/s6j
6t92hPAz8vRYZf8r0y9jOlqCQslWdYuCCJbVxqSDviqrATQHQOTHp49zHmLF8+Me
gFSoTZTxrdL8D6chaW7bPVA4LfDhRIQB+sfUXXh/6Cw5M1ZWruQAHSpmrCvCZdRR
aIiZfVoNETjx1tGtD3u50P3RKVYmHcm8rdJe93lU2Y8Ha1eMV/AEBEVpYKCAa+A0
Ol9sSNJC2yYoGzvtODSyGZGfpGF13TJVW6n1kzABRb5X
-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:37 2025 by rpki-client