This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa
File: jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa (raw, json)
Hash identifier: NFrj/OLNRqiAhcTOxCMOPhXsniRxRJ7HRzSqYahvwnI=
Subject key identifier: 8C:2D:54:32:1C:DD:DE:1D:50:DD:AB:4A:8E:D4:E7:94:D1:5D:A6:C0
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 019B7758D587EA618D2FC232B0F2B761A7F4
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa
Signing time: Thu 01 Jan 2026 02:17:49 +0000
ROA not before: Thu 01 Jan 2026 02:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50010
IP address blocks: 62.231.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:d5:87:ea:61:8d:2f:c2:32:b0:f2:b7:61:a7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Jan 1 02:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c2d54321cddde1d50ddab4a8ed4e794d15da6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:61:42:1e:83:27:67:45:81:da:91:5f:03:f8:
fe:86:41:c5:a7:01:af:ae:19:8f:03:06:d9:62:40:
3b:c7:40:de:96:ec:82:ee:b3:8f:18:9a:2f:7e:10:
9f:eb:d8:3f:4c:96:43:86:e6:8d:97:50:1e:0c:44:
ee:b5:3b:4b:59:89:66:dc:39:ca:76:26:6c:22:d3:
18:0b:84:4e:da:a8:e9:8f:1d:74:62:20:3c:04:59:
eb:ec:e4:71:14:fd:df:bc:20:14:be:78:31:e6:61:
2a:6e:98:e3:2a:21:8d:63:5a:c7:31:02:5b:dc:f3:
34:be:18:5f:d1:fa:74:ab:66:89:a8:88:e9:b6:a7:
8d:1f:c1:95:7a:aa:f7:86:8b:30:d4:a8:f0:d8:06:
60:98:62:78:c8:4e:25:ce:dc:cc:73:de:ad:6b:1e:
e5:91:44:3a:9f:5e:f3:3d:ab:69:88:43:b3:3d:52:
6d:85:d4:c3:e1:37:0a:17:ab:8d:03:40:b5:8e:fa:
04:b0:54:6b:db:ce:57:cc:8a:d7:72:8b:b0:f0:d9:
c3:2d:08:f9:78:af:6f:57:b9:9b:24:0f:1a:ae:c1:
5d:b2:4e:b1:28:b2:93:e5:fa:ea:99:0a:e5:db:43:
80:44:23:db:08:b3:9b:ca:a1:3c:eb:fb:31:6a:6b:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:54:32:1C:DD:DE:1D:50:DD:AB:4A:8E:D4:E7:94:D1:5D:A6:C0
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.248.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:44:98:7c:fd:54:a0:fc:9b:bb:c7:78:2a:9b:39:5e:58:
08:14:84:3e:04:02:19:f1:c9:d1:c6:79:e1:bf:8f:5e:7c:18:
38:6b:13:6d:72:2c:a3:2b:07:65:79:0b:de:78:ad:b7:ea:4a:
0a:c4:0c:3d:de:79:16:13:9f:88:3e:2c:11:39:a6:d7:dd:09:
e5:09:67:f3:13:9f:32:6f:d6:cc:28:c1:c2:4f:61:26:9c:89:
a1:dd:42:db:15:b3:04:3f:28:1e:c0:60:07:d4:08:ce:f2:a7:
ae:58:c6:8d:f4:8f:0b:c5:23:92:79:0a:d2:d8:90:4a:48:60:
ac:6a:2f:82:a4:72:f7:e0:58:c8:3c:85:f2:dc:ed:23:42:69:
64:44:3e:cd:f7:68:04:d7:c9:ab:c0:f1:c3:dd:28:a9:ac:67:
c8:ab:e4:36:5d:3f:df:2e:fe:7a:c5:91:19:22:60:08:d8:2e:
f1:c4:c9:84:78:28:c6:e4:a4:60:ea:a8:6f:77:96:b9:31:52:
61:25:28:08:dd:7a:8f:93:78:65:ef:55:32:85:b9:45:6e:03:
31:c0:3a:a0:5a:6c:9b:5a:c4:0f:db:19:c6:74:24:03:67:85:
cc:13:f7:53:a4:3f:58:24:60:1c:54:e5:26:50:ba:6f:8b:44:
50:1c:ea:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WNWH6mGNL8IysPK3Yaf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzQwNjhiNWU5ZjczMTQyNzdlMmJlOTcyNmM3MzIxMzFi
MTc1NmMwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzJkNTQzMjFjZGRkZTFkNTBkZGFiNGE4ZWQ0ZTc5NGQxNWRhNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWFCHoMnZ0WB2pFfA/j+hkHFpwGv
rhmPAwbZYkA7x0DeluyC7rOPGJovfhCf69g/TJZDhuaNl1AeDETutTtLWYlm3DnK
diZsItMYC4RO2qjpjx10YiA8BFnr7ORxFP3fvCAUvngx5mEqbpjjKiGNY1rHMQJb
3PM0vhhf0fp0q2aJqIjptqeNH8GVeqr3hosw1Kjw2AZgmGJ4yE4lztzMc96tax7l
kUQ6n17zPatpiEOzPVJthdTD4TcKF6uNA0C1jvoEsFRr285XzIrXcouw8NnDLQj5
eK9vV7mbJA8arsFdsk6xKLKT5frqmQrl20OARCPbCLObyqE86/sxamtCywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwtVDIc3d4dUN2rSo7U55TRXabAMB8GA1UdIwQY
MBaAFBA0Boten3MUJ34r6XJscyExsXVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYt
MTAzZDkzZDI1MWFiLzEvakMxVU1oemQzaDFRM2F0S2p0VG5sTkZkcHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYtMTAzZDkzZDI1MWFi
LzEvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuf4MA0G
CSqGSIb3DQEBCwUAA4IBAQCZsUSYfP1UoPybu8d4Kps5XlgIFIQ+BAIZ8cnRxnnh
v49efBg4axNtciyjKwdleQveeK236koKxAw93nkWE5+IPiwROabX3QnlCWfzE58y
b9bMKMHCT2EmnImh3ULbFbMEPygewGAH1AjO8qeuWMaN9I8LxSOSeQrS2JBKSGCs
ai+CpHL34FjIPIXy3O0jQmlkRD7N92gE18mrwPHD3SiprGfIq+Q2XT/fLv56xZEZ
ImAI2C7xxMmEeCjG5KRg6qhvd5a5MVJhJSgI3XqPk3hl71UyhblFbgMxwDqgWmyb
WsQP2xnGdCQDZ4XME/dTpD9YJGAcVOUmULpvi0RQHOqU
-----END CERTIFICATE-----
Generated at Tue Jan 20 04:47:36 2026 by rpki-client