This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa
File: jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa (raw, json)
Hash identifier: gZehYlDlKA2eaWajbV4UID9OYa/MzZBadYKKcs6PcvU=
Subject key identifier: 8D:D9:49:79:E1:F8:BC:F6:73:04:B1:8A:13:F6:59:20:4E:F5:97:39
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019B797ED37E809B52BF710BDDC8C3550EBC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa
Signing time: Thu 01 Jan 2026 12:18:33 +0000
ROA not before: Thu 01 Jan 2026 12:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200923
IP address blocks: 93.186.74.0/23 maxlen: 23
93.186.76.0/24 maxlen: 24
93.186.78.0/24 maxlen: 24
188.255.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:d3:7e:80:9b:52:bf:71:0b:dd:c8:c3:55:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 12:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dd94979e1f8bcf67304b18a13f659204ef59739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:e7:a0:01:0a:b7:28:58:bb:fc:2c:6f:17:
7c:9f:d5:ec:37:5b:46:94:73:96:ef:7a:aa:18:b3:
ed:16:7f:18:c0:21:47:a7:df:13:32:3b:ce:db:72:
68:a0:83:d2:4a:86:d1:6c:d0:a1:6f:98:0c:db:c4:
2f:42:b0:5c:51:f9:af:84:01:3f:60:a5:d8:bd:7f:
fc:ca:41:8b:43:af:a3:6c:ce:3a:52:23:f0:f1:93:
d2:3c:45:18:0d:6c:86:92:25:8e:cc:c9:1b:7f:9a:
86:cf:1f:a9:f1:56:78:ca:02:2f:09:56:03:bd:47:
fb:0c:14:d2:9c:b9:18:0a:6b:7b:62:76:9f:36:c1:
cb:7a:34:93:d7:1b:10:25:45:7c:c7:1a:b7:2c:75:
18:bb:c7:5c:9c:87:c8:03:02:21:e1:ef:55:f7:61:
a2:5c:31:af:3d:50:ca:83:d1:62:f4:ea:d3:4a:26:
39:84:de:79:0a:d0:3d:3c:1a:88:17:29:95:a8:d6:
c3:c4:f3:9a:cf:3a:4f:45:06:01:06:b5:45:60:49:
22:25:a9:9c:c9:79:6c:f9:ca:c5:6d:16:ce:7a:d0:
32:13:0e:36:64:51:cb:09:8d:5b:1e:12:92:29:22:
f8:1f:0d:98:17:0b:dc:26:b7:53:7e:0a:cb:b0:b7:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D9:49:79:E1:F8:BC:F6:73:04:B1:8A:13:F6:59:20:4E:F5:97:39
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/jdlJeeH4vPZzBLGKE_ZZIE71lzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.74.0-93.186.76.255
93.186.78.0/24
188.255.218.0/24
Signature Algorithm: sha256WithRSAEncryption
98:59:06:ee:94:64:43:b5:12:43:50:19:ff:69:d7:61:c8:ef:
33:d9:6c:c9:03:b5:5c:26:44:02:1e:a3:10:77:f0:10:65:b2:
5f:b5:74:03:a5:ce:e7:79:94:41:70:59:2f:49:14:b4:70:90:
c5:b3:36:f1:18:55:8b:8d:d2:c3:ae:36:ef:4e:28:e4:ca:60:
53:7d:5e:bb:f1:e7:e7:26:f4:db:86:d8:04:b6:45:d2:42:b2:
78:bb:cd:e4:11:b9:29:09:5d:49:cf:6b:9f:c1:54:2c:92:e6:
65:25:d7:9e:04:90:0e:67:1a:2b:f4:5c:ba:8d:84:6e:e6:a5:
5f:be:f3:82:b3:b4:2d:3c:7c:06:1f:ae:85:93:22:c1:96:8b:
df:02:68:e5:c5:3c:c1:f6:e2:54:19:25:08:bf:c2:9c:73:47:
75:00:2d:14:37:fc:e0:c9:56:99:63:ff:90:ed:d0:20:d6:ad:
c6:5a:f4:26:82:1f:6d:a9:b5:7b:c6:6a:32:f7:b4:3c:57:58:
0f:02:f9:43:19:9a:00:38:c7:01:d6:00:d1:6f:f4:35:82:33:
5a:b0:7b:e7:83:93:86:54:19:a5:07:8c:d4:45:79:c9:df:40:
7d:2f:b6:41:91:77:c9:12:09:b4:5b:1e:46:66:42:7c:f3:a6:
8f:e1:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:54:06 2026 by rpki-client