This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa
File: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (raw, json)
Hash identifier: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=
Subject key identifier: 25:98:44:A7:E4:23:FF:1A:E6:03:E8:55:9F:3D:FB:51:43:5D:32:04
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019B7CEE2B27FA09C7A3DEA66FBB1BDBAA51
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa
Signing time: Fri 02 Jan 2026 04:19:01 +0000
ROA not before: Fri 02 Jan 2026 04:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216068
IP address blocks: 195.10.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:2b:27:fa:09:c7:a3:de:a6:6f:bb:1b:db:aa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Jan 2 04:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=259844a7e423ff1ae603e8559f3dfb51435d3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:e8:17:88:fe:43:62:03:f4:a6:c2:d9:f3:
b4:24:cf:4c:c0:72:37:21:27:59:eb:18:9b:4c:4b:
b4:fb:5a:3b:c4:d6:25:97:5e:74:b2:d0:9a:eb:37:
cd:ee:ab:d9:ca:16:b7:29:25:11:f8:5f:95:29:d6:
aa:e1:f8:a0:71:18:87:47:10:dc:2a:5c:e0:27:d0:
fc:f2:2c:9c:d1:87:5a:88:dd:2a:34:cf:e2:8d:6b:
cc:bf:14:fc:b3:3c:e7:ac:63:0f:3c:76:e3:44:af:
0f:20:9f:0c:fa:1c:cb:9f:13:3f:95:14:37:92:b8:
37:d1:29:fa:fb:22:d7:11:56:9a:6f:72:28:84:9c:
81:b8:8f:1e:d6:5e:8c:74:0d:06:5b:9c:75:7e:b8:
da:95:6b:b3:d6:83:c3:1e:ab:d9:16:5a:36:97:cb:
a3:ba:f6:76:68:e3:ec:3c:7d:55:b5:2b:6e:fc:a4:
ff:d5:f8:c9:a7:e1:f4:c6:f0:16:15:4c:f7:30:c5:
eb:f3:99:a2:76:01:ef:4f:79:a2:90:df:32:f5:85:
63:3f:3b:03:2a:6e:ac:32:1a:67:09:4a:ca:3d:75:
f4:a8:5f:38:9c:78:05:67:1d:35:74:7e:51:8a:26:
90:02:a8:7c:cd:a6:07:86:21:34:55:a9:ae:96:ab:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:44:A7:E4:23:FF:1A:E6:03:E8:55:9F:3D:FB:51:43:5D:32:04
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.193.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f7:a2:05:67:d1:72:06:7b:d6:aa:a6:ce:06:18:5c:b5:dc:
17:62:ba:c8:c9:44:83:a1:d2:5c:73:c1:5c:d8:da:e5:0b:b9:
49:bc:f6:79:64:82:fa:e7:82:d9:01:b3:4a:a1:1f:e9:7c:63:
4c:d2:a6:1a:73:bc:52:3f:cd:49:84:75:fd:0f:a4:38:07:98:
83:28:27:ed:a0:b8:0b:f7:ae:28:18:14:af:6f:47:04:6e:d4:
81:18:af:ac:ee:ec:49:50:3b:33:8d:76:15:c0:ed:2c:cb:cc:
fd:cc:6e:b1:28:a5:82:36:4c:4c:7e:b5:21:54:27:cd:a6:5a:
2f:5c:8a:9b:a2:ce:f7:f0:12:fb:20:a6:d2:05:8a:5a:26:d4:
c1:45:4f:43:44:d7:ff:cb:29:5e:dd:a4:e0:54:bf:ee:6b:98:
d2:06:35:f4:03:50:9a:e8:4d:49:d0:06:89:2b:d7:19:e5:18:
7c:86:5b:ed:5a:c7:99:40:80:50:a5:57:65:7d:f0:88:30:6b:
18:8f:f0:c5:37:76:55:1c:f7:5b:ad:d7:d3:e2:20:e0:21:92:
91:8c:52:f4:f6:d1:78:9f:7d:1f:11:55:ea:e7:ca:43:a3:67:
26:73:f7:4e:33:c3:76:86:63:04:f8:df:b0:2e:20:83:17:11:
25:f4:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:11 2026 by rpki-client