This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa
File: MJk2hRWFPXbWPid66y-yooVzeJI.roa (raw, json)
Hash identifier: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=
Subject key identifier: 30:99:36:85:15:85:3D:76:D6:3E:27:7A:EB:2F:B2:A2:85:73:78:92
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019B7DC983F1DDE4DD18DF37F2AE1DA0074A
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa
Signing time: Fri 02 Jan 2026 08:18:37 +0000
ROA not before: Fri 02 Jan 2026 08:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208626
IP address blocks: 178.171.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:83:f1:dd:e4:dd:18:df:37:f2:ae:1d:a0:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 08:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3099368515853d76d63e277aeb2fb2a285737892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:f1:8d:ce:d9:65:32:0c:40:13:3b:c3:03:
1d:fa:50:a4:ab:b1:b3:6d:21:03:b2:f9:1b:91:e8:
ee:b2:64:2f:98:3b:6b:a9:94:e0:27:82:53:24:02:
57:c5:d1:39:1c:1e:85:68:86:69:d9:5e:46:09:4e:
17:10:56:df:f8:02:c2:aa:5f:f5:e0:1b:fc:ed:f1:
ec:6f:b9:8d:56:7e:92:6c:9a:42:a9:20:17:53:ff:
4a:c7:56:02:34:23:a2:81:ce:91:fa:b0:52:b5:6f:
32:5d:c5:32:09:d8:8a:ff:9a:c9:7d:82:18:cf:ea:
61:ff:1d:a7:72:d0:3e:2d:06:7d:d0:62:80:67:e3:
c3:d3:5d:16:e7:8c:a6:78:2f:04:d1:9a:eb:d0:ba:
1c:f1:2c:c1:64:72:10:25:b4:7e:6f:2e:2f:b6:4c:
60:55:55:58:b5:ae:cd:e5:63:23:d4:a6:df:0e:1a:
cc:6f:89:0a:8d:a6:01:db:ca:12:ab:63:c9:9e:58:
c6:f5:d9:16:e9:d0:20:70:1f:02:18:17:1d:39:6b:
09:51:b6:42:d7:77:63:58:ff:20:bf:50:27:79:f4:
8e:e8:d6:5c:ab:5f:b8:36:a3:48:d6:bf:cc:d5:c8:
e7:96:af:42:b0:55:58:15:0c:41:75:aa:8f:02:60:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:99:36:85:15:85:3D:76:D6:3E:27:7A:EB:2F:B2:A2:85:73:78:92
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/MJk2hRWFPXbWPid66y-yooVzeJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b0:d8:3e:f2:25:19:2b:8c:dc:dd:e0:5b:6e:5e:9f:6a:06:
11:08:2a:f3:d8:e1:1d:ff:63:05:1c:82:72:c5:cf:a4:64:88:
eb:24:20:8e:7e:28:7d:11:9c:93:a7:2b:9f:05:d7:07:78:79:
69:c3:54:0a:2b:72:ce:bc:81:1e:9e:88:2d:64:a3:31:55:e4:
ef:64:f7:33:13:fb:1c:b3:77:b4:14:a4:4a:ee:45:56:e7:9a:
5e:db:e4:74:0f:b9:c3:70:79:7d:67:5f:10:90:da:29:18:e2:
ad:2c:46:6a:3c:60:7f:cf:a1:b5:cd:37:a3:fd:c4:6a:5d:e7:
c4:8c:98:4f:f9:e1:2f:bb:dd:72:d0:1c:01:a9:f5:ac:48:07:
d8:e6:89:18:e8:0a:b6:91:08:09:04:32:72:bf:2d:32:d7:ed:
a5:40:cc:98:27:cd:28:e2:fd:f4:a6:00:06:52:8a:73:87:95:
62:b1:ee:e2:cc:ee:47:41:87:ff:a6:0c:ae:68:23:bc:65:0d:
f8:28:40:c0:c2:ca:00:e1:2a:7f:f8:f7:60:40:7c:a0:8a:5a:
9b:16:b8:98:8a:7e:e5:38:52:7d:f8:b1:19:94:b5:e7:cb:ad:
a9:cc:1a:bd:9e:20:05:de:6f:71:37:21:30:62:51:81:0f:cd:
e6:3a:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:36:11 2026 by rpki-client