This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa
File: KAMejuRA6SeFAjQoLQXU7zLjWr8.roa (raw, json)
Hash identifier: LnxIlTyZE7AtMc2QM8/mi8gslLYiHvYgSbLU2cG39As=
Subject key identifier: 28:03:1E:8E:E4:40:E9:27:85:02:34:28:2D:05:D4:EF:32:E3:5A:BF
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019B7BA3D4E2D8D6FF7A1A0DED712B31A979
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa
Signing time: Thu 01 Jan 2026 22:18:13 +0000
ROA not before: Thu 01 Jan 2026 22:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60039
IP address blocks: 185.60.236.0/24 maxlen: 24
185.98.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:d4:e2:d8:d6:ff:7a:1a:0d:ed:71:2b:31:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 1 22:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28031e8ee440e927850234282d05d4ef32e35abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:29:70:31:8f:bd:53:27:87:18:3a:b0:5d:
1e:47:17:5d:81:70:2c:63:62:19:6b:63:28:f9:54:
b4:31:35:42:63:20:98:14:c6:43:83:53:62:7c:60:
74:24:be:a6:7f:39:7c:ec:cc:0e:9a:a6:63:84:c2:
d5:be:a9:f7:79:66:e8:d9:5f:2a:81:fe:29:e1:c3:
ad:3e:aa:67:f0:a8:04:10:55:ec:9c:4e:d9:7d:ab:
ee:65:f2:f7:26:35:a4:33:aa:80:b3:91:53:07:9b:
1c:58:04:34:2d:a6:cd:ba:3c:a0:7a:c7:5b:fd:22:
9d:6e:cb:60:43:55:7c:8d:83:d8:a1:aa:e0:41:f5:
7c:41:49:62:dc:c0:2b:a6:ff:88:e3:85:3f:52:27:
1c:b2:7e:47:7e:5c:e9:a6:b5:de:49:1f:d1:b3:2d:
06:91:75:8a:6b:5d:70:43:0b:87:3e:fc:89:c2:d6:
2e:71:b3:08:6a:78:20:88:44:96:33:a0:e2:40:2b:
b0:60:94:c9:91:4d:b2:5b:eb:17:ea:a7:53:e9:d0:
2f:e3:3b:af:26:11:70:a0:18:c9:03:f7:1c:cc:81:
33:2a:c6:71:a1:ed:2d:fe:59:b7:78:9d:9d:08:13:
39:a7:d4:71:29:e6:d1:39:71:af:cd:fe:7b:36:d6:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:03:1E:8E:E4:40:E9:27:85:02:34:28:2D:05:D4:EF:32:E3:5A:BF
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/KAMejuRA6SeFAjQoLQXU7zLjWr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.236.0/24
185.98.104.0/24
Signature Algorithm: sha256WithRSAEncryption
33:31:46:df:14:94:f6:92:e4:47:49:1f:3e:82:94:cf:dd:74:
72:8b:0a:c7:bf:2d:3a:7e:b4:09:24:a7:8a:65:45:5a:b7:cc:
ba:9a:c2:c0:8c:ef:e5:30:1c:65:20:c4:50:8d:a9:c7:36:a9:
8e:cf:97:18:aa:31:19:df:9a:3f:0b:8b:cb:43:e2:c1:0b:79:
bb:bc:de:19:6b:50:02:59:7b:93:b3:3f:d3:6b:04:15:8e:85:
fb:4c:1c:f4:1f:d6:65:d2:9f:07:5a:a6:35:b3:51:70:38:c9:
6b:14:60:a5:7d:e7:27:00:ac:a7:df:29:7e:c7:85:3c:a8:e1:
a8:1c:33:0a:f0:dc:5d:f3:b2:44:ea:85:83:5b:70:af:3e:4c:
a0:c9:34:69:2b:4b:2b:27:40:fd:06:ee:b4:6a:90:9a:ff:10:
cf:58:30:36:72:d2:88:62:40:50:ba:01:cc:5c:e1:aa:b7:cf:
7e:a1:b4:98:b8:a7:dd:46:b5:ed:68:62:aa:c4:7e:f6:3d:ba:
d6:90:15:54:14:47:60:3b:19:c3:69:08:4c:76:76:dc:76:b4:
54:71:34:b3:5b:34:18:e8:ac:84:d6:e9:ad:3a:e3:8d:84:da:
3a:28:91:c3:bc:72:21:c1:f6:2a:d3:56:ed:19:e9:7a:21:5e:
61:c9:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:03 2026 by rpki-client