This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/0jmv6E6nQfihp67UOSMcz_xDPcw.roa
File: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (raw, json)
Hash identifier: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=
Subject key identifier: D2:39:AF:E8:4E:A7:41:F8:A1:A7:AE:D4:39:23:1C:CF:FC:43:3D:CC
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 019B7B368D1429C702837E3F53CFB9167DD0
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/0jmv6E6nQfihp67UOSMcz_xDPcw.roa
Signing time: Thu 01 Jan 2026 20:18:51 +0000
ROA not before: Thu 01 Jan 2026 20:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29549
IP address blocks: 195.177.206.0/24 maxlen: 24
195.177.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:8d:14:29:c7:02:83:7e:3f:53:cf:b9:16:7d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jan 1 20:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d239afe84ea741f8a1a7aed439231ccffc433dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:f9:88:04:c8:9f:8a:ee:6b:48:75:89:52:
d4:ac:8b:b3:4c:5b:68:ff:b2:aa:06:7a:4c:40:98:
b9:aa:42:f8:1f:6c:b8:82:a5:79:68:fd:75:3b:08:
6e:48:09:3c:89:ed:d6:67:7b:d9:d0:b8:8d:27:27:
d6:1a:0e:ba:c9:0b:a2:c0:65:7f:7c:ed:c9:98:e8:
a4:bd:86:2c:ff:44:76:ab:00:55:de:bf:38:df:f0:
9a:4a:78:19:f7:4f:f3:00:e5:19:d9:22:07:27:49:
e4:84:2d:6f:aa:96:5f:54:68:1b:22:65:3d:c8:79:
8a:fc:e9:91:65:cf:ad:22:d4:2c:10:07:52:e4:e9:
f5:96:e3:0f:03:5d:7d:c0:9f:59:44:a4:1d:24:05:
43:b7:71:e5:98:df:c4:01:5f:4b:cd:18:c4:d9:49:
4a:58:b7:a4:e6:d1:e4:28:b7:f5:12:d6:5c:95:f9:
74:9f:52:36:7d:89:d0:e7:85:57:ab:7f:b6:e5:c4:
ec:05:e0:94:0e:dd:40:1c:79:2c:79:dd:97:43:1e:
10:0d:79:35:90:a4:62:83:60:42:ba:2c:18:9a:77:
df:27:8b:91:bb:1e:7a:d2:9f:8f:30:d9:18:ef:9d:
aa:9c:cd:bf:76:1f:d8:16:46:af:71:65:79:d8:5d:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:AF:E8:4E:A7:41:F8:A1:A7:AE:D4:39:23:1C:CF:FC:43:3D:CC
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/0jmv6E6nQfihp67UOSMcz_xDPcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.206.0/23
Signature Algorithm: sha256WithRSAEncryption
77:77:44:e2:cc:8c:af:8c:8e:00:54:25:71:50:c7:ac:d9:16:
9b:f9:fb:a7:c8:d1:9e:72:87:f8:b0:70:4b:a4:e5:9b:e3:63:
59:23:89:09:80:b0:b1:9e:98:34:07:cb:0e:5c:ea:ad:30:be:
5b:df:60:16:f1:24:02:3b:20:cb:a3:00:43:50:8d:94:a1:4c:
3f:80:43:ba:42:7e:4e:a9:5f:4d:b4:d7:ab:15:69:cc:b7:f4:
da:87:0e:89:da:2b:e2:d5:7d:e9:5e:e0:8e:b5:03:88:11:b0:
fc:d3:ba:f9:3a:c5:fe:99:89:0e:fb:7b:3d:cb:39:82:a4:c7:
dd:ba:8e:df:35:7a:82:46:2c:3c:e8:db:ef:a5:dd:8d:a2:0a:
5b:96:53:87:7a:da:22:62:69:dd:3c:f3:c9:77:fb:9a:4a:56:
04:ae:85:45:93:cc:45:6f:08:67:d4:ef:01:83:a3:e1:27:2b:
60:7b:2e:c4:08:2d:76:8b:cc:bf:c0:a5:f4:de:5b:c8:2f:d4:
e1:71:50:c3:e7:81:a2:8b:92:5d:ac:4c:2c:a5:0b:7a:31:f6:
07:b5:11:92:aa:0b:f0:94:25:54:2d:0a:ce:ee:08:e3:5d:8b:
02:fb:e1:a5:b1:c3:2e:6e:50:52:fa:49:f1:dc:82:b8:38:4d:
66:0b:81:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7No0UKccCg34/U8+5Fn3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmYwNzQ3NGYxMmY3YTMzZTVjMjFiYzJmZmJiMDc1YTE3
YmQxM2YwHhcNMjYwMTAxMjAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM5YWZlODRlYTc0MWY4YTFhN2FlZDQzOTIzMWNjZmZjNDMzZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAT5iATIn4rua0h1iVLUrIuzTFto
/7KqBnpMQJi5qkL4H2y4gqV5aP11OwhuSAk8ie3WZ3vZ0LiNJyfWGg66yQuiwGV/
fO3JmOikvYYs/0R2qwBV3r843/CaSngZ90/zAOUZ2SIHJ0nkhC1vqpZfVGgbImU9
yHmK/OmRZc+tItQsEAdS5On1luMPA119wJ9ZRKQdJAVDt3HlmN/EAV9LzRjE2UlK
WLek5tHkKLf1EtZclfl0n1I2fYnQ54VXq3+25cTsBeCUDt1AHHksed2XQx4QDXk1
kKRig2BCuiwYmnffJ4uRux560p+PMNkY752qnM2/dh/YFkavcWV52F3q/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNI5r+hOp0H4oaeu1DkjHM/8Qz3MMB8GA1UdIwQY
MBaAFBtvB0dPEvejPlwhvC/7sHWhe9E/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGIt
MDJjNDdiOWVhNDlkLzEvMGptdjZFNm5RZmlocDY3VU9TTWN6X3hEUGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82NTUwMDYtNjI3NS00ZDI0LWIzZGItMDJjNDdiOWVhNDlk
LzEvRzI4SFIwOFM5Nk0tWENHOExfdXdkYUY3MFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7HOMA0G
CSqGSIb3DQEBCwUAA4IBAQB3d0TizIyvjI4AVCVxUMes2Rab+funyNGecof4sHBL
pOWb42NZI4kJgLCxnpg0B8sOXOqtML5b32AW8SQCOyDLowBDUI2UoUw/gEO6Qn5O
qV9NtNerFWnMt/Tahw6J2ivi1X3pXuCOtQOIEbD807r5OsX+mYkO+3s9yzmCpMfd
uo7fNXqCRiw86Nvvpd2NogpbllOHetoiYmndPPPJd/uaSlYEroVFk8xFbwhn1O8B
g6PhJytgey7ECC12i8y/wKX03lvIL9ThcVDD54Gii5JdrEwspQt6MfYHtRGSqgvw
lCVULQrO7gjjXYsC++GlscMublBS+knx3IK4OE1mC4Fk
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:55 2026 by rpki-client