This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa
File: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (raw, json)
Hash identifier: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=
Subject key identifier: 26:F0:AA:9C:38:27:1B:F3:4C:50:51:82:4D:52:60:CD:E7:1F:0F:B7
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019B7C7F63623B3E09A8CD10785D05D50418
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa
Signing time: Fri 02 Jan 2026 02:18:01 +0000
ROA not before: Fri 02 Jan 2026 02:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 185.9.36.0/24 maxlen: 24
185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
217.70.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:63:62:3b:3e:09:a8:cd:10:78:5d:05:d5:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Jan 2 02:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26f0aa9c38271bf34c5051824d5260cde71f0fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:cf:da:f9:c8:ae:0b:3b:71:84:5b:56:41:
25:6f:85:74:52:f2:d2:bb:2a:70:09:82:b8:33:85:
5d:71:63:c1:01:ba:66:11:8b:ce:69:63:5f:b1:e4:
b2:6e:32:f9:dd:b5:ad:34:b7:1d:b8:d8:70:c5:95:
b7:18:21:1a:8e:b6:1e:a3:a8:e8:7f:63:1e:8f:0a:
62:ce:9f:dc:d6:b0:2f:7f:19:89:a1:79:86:a9:25:
65:17:2f:7b:97:b5:fb:84:64:06:cf:04:de:5f:85:
ae:b2:86:2a:75:6a:d3:0a:f0:e6:32:c7:20:dc:3a:
8c:5e:12:b3:46:bf:e6:f4:97:7f:07:2b:90:b3:96:
8c:ef:02:0b:c4:44:a6:40:7e:df:a4:d8:45:04:9d:
a8:43:25:5c:2e:27:e0:e0:22:d8:a1:ef:53:19:a2:
2a:f3:b5:a9:8e:07:db:5a:c3:a0:b5:b8:15:69:3e:
8e:43:4c:02:f8:59:ec:7c:5f:e0:8c:aa:ce:4a:f2:
9a:6a:af:0a:2c:f5:88:3d:b7:6d:9c:e4:37:bd:3b:
94:8e:15:4d:e2:bc:69:de:da:57:db:bc:3b:66:db:
2c:1e:b6:c7:08:62:a3:51:ba:30:cf:bc:df:a0:89:
4d:7c:63:5f:10:cc:aa:a4:73:78:61:ff:f2:f5:29:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F0:AA:9C:38:27:1B:F3:4C:50:51:82:4D:52:60:CD:E7:1F:0F:B7
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/JvCqnDgnG_NMUFGCTVJgzecfD7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
217.70.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:76:b5:d8:3a:dd:b0:38:a4:bc:54:ce:21:1a:55:d3:10:d4:
9c:e4:53:22:4e:44:95:6e:dd:b1:b8:7d:09:c6:fa:1b:22:a0:
25:12:e4:cf:47:26:b4:d4:5b:be:b2:bf:27:dd:02:b6:26:a3:
2a:4f:68:bd:5c:f3:26:69:7e:0d:2f:b4:89:07:dc:e8:91:ed:
fc:64:a1:a6:25:f1:7d:dc:cb:79:e0:50:5e:2b:d6:92:39:54:
93:03:45:aa:54:16:4b:7d:94:d4:42:e9:6d:84:be:da:10:ac:
97:06:41:00:19:a4:29:a7:84:bb:31:2f:eb:b4:d9:48:b2:ce:
a0:69:a1:ed:b5:ee:55:83:f8:4d:52:21:6c:24:be:e0:e9:72:
78:ac:6d:a3:d5:eb:cc:33:d4:20:86:74:a1:0b:61:60:7a:8d:
79:be:05:e6:bf:2d:7e:27:5b:50:67:27:84:0a:4d:6c:32:58:
15:cc:ee:ef:ba:50:90:4f:0f:55:cd:96:e3:d9:6f:82:ca:a3:
f2:4b:dd:a8:5d:44:b6:c5:52:99:39:05:3a:f2:8c:4e:1a:35:
13:4c:6a:25:1e:ff:26:aa:23:db:27:b1:cf:2d:d2:cc:97:8d:
1c:5d:ad:3d:74:87:a0:ac:fb:ab:fc:e9:f6:c4:14:a6:2b:fb:
11:40:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:52:06 2026 by rpki-client