This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/JjyvVDVovIRDvh2WAPN4qcYKbB8.roa
File: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (raw, json)
Hash identifier: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=
Subject key identifier: 26:3C:AF:54:35:68:BC:84:43:BE:1D:96:00:F3:78:A9:C6:0A:6C:1F
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019B78A2735C7C9FF726EEFA6C9DE0F68465
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/JjyvVDVovIRDvh2WAPN4qcYKbB8.roa
Signing time: Thu 01 Jan 2026 08:17:50 +0000
ROA not before: Thu 01 Jan 2026 08:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201470
IP address blocks: 155.133.24.0/23 maxlen: 23
2a02:28e9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:73:5c:7c:9f:f7:26:ee:fa:6c:9d:e0:f6:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jan 1 08:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263caf543568bc8443be1d9600f378a9c60a6c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:b7:2f:64:f1:59:4f:ed:e9:4c:97:34:93:
68:4f:2f:85:37:c3:b3:be:8b:6d:4c:33:b8:9b:e8:
00:58:4c:70:b3:5b:8b:83:41:d8:45:37:b0:2a:31:
6c:85:bd:bb:e5:b0:75:70:9a:01:d3:7c:af:f6:5b:
9b:88:6f:6c:4e:04:9e:a1:42:f2:d9:81:6a:18:93:
17:3a:86:64:3e:05:8c:16:6d:d9:a3:f4:57:b1:85:
ca:fe:8f:d0:aa:a6:a8:d8:bc:6d:6e:3e:f5:26:d7:
27:fa:b6:0e:22:07:9b:da:a7:ca:fe:75:c2:ba:2d:
46:7a:9d:3f:ed:7a:b8:a8:c4:ba:d5:6c:68:23:4e:
82:9a:fc:f1:cd:de:f8:09:64:42:fc:61:f7:1f:33:
78:e9:1e:2e:fd:ee:e0:53:fa:ed:89:13:5b:35:ed:
f2:64:9d:4e:1e:04:7a:eb:df:35:12:72:a5:be:22:
72:52:c0:55:90:89:5b:99:43:f2:37:db:6d:60:49:
fd:c3:3c:74:7d:08:03:20:53:9e:37:0a:d5:e1:66:
23:9c:c5:db:4a:87:4c:6d:4f:cb:be:26:5d:50:84:
42:c8:5e:20:67:cb:b7:2f:78:ac:00:56:c6:cc:c7:
7e:eb:c9:22:aa:96:fc:23:f1:63:e7:00:2f:5a:0c:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:AF:54:35:68:BC:84:43:BE:1D:96:00:F3:78:A9:C6:0A:6C:1F
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/JjyvVDVovIRDvh2WAPN4qcYKbB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.24.0/23
IPv6:
2a02:28e9::/32
Signature Algorithm: sha256WithRSAEncryption
20:59:a0:57:a0:63:c4:6a:47:1d:b6:a6:a6:d8:60:d1:29:9a:
27:68:c8:e3:88:c9:1f:a0:90:a7:b9:9e:e3:75:e3:08:4a:04:
cb:b2:39:37:d1:74:63:97:89:2c:ae:bf:6f:20:64:5f:f2:30:
40:95:40:98:b9:b4:be:45:f3:46:51:de:35:7b:02:d0:70:1f:
35:5a:03:3c:df:2a:2c:f6:40:22:b2:26:ac:a1:58:f7:4c:04:
e9:27:2a:13:56:86:69:b3:e1:ed:35:08:c5:65:54:73:6e:d3:
59:80:88:af:b5:92:86:fc:78:dd:f5:c2:fd:83:82:37:2e:3f:
b7:71:07:5a:56:5f:81:ae:dc:df:57:79:6c:b2:09:64:5e:6c:
00:42:3d:78:cf:e5:09:21:c4:14:e8:cb:cc:f9:31:d3:bd:ba:
b8:2a:2d:08:64:9e:cc:74:e5:c2:c7:10:be:0c:84:ba:48:f8:
55:a7:72:21:49:e8:75:f6:87:0e:2f:bc:82:33:54:b8:f1:3b:
a9:62:cd:4a:50:18:fa:e8:06:9f:1e:e4:77:e2:a8:2d:8d:37:
69:af:1a:c0:ee:2f:29:ab:16:e4:69:ef:4f:34:ec:a4:7b:01:
a5:e2:9a:59:d3:e5:97:1a:af:30:d0:9a:ae:af:6d:26:d9:00:
4c:b9:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:41 2026 by rpki-client