This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa
File: J8FCtrgBkWVKDExtzrqO2O610GY.roa (raw, json)
Hash identifier: lsGUe0J1f96Vp0UvOZFbLcl73ARRf2qtpySBX5Tve58=
Subject key identifier: 27:C1:42:B6:B8:01:91:65:4A:0C:4C:6D:CE:BA:8E:D8:EE:B5:D0:66
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 019B7E38A6A706568775D5B6004DBD5264DC
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa
Signing time: Fri 02 Jan 2026 10:20:00 +0000
ROA not before: Fri 02 Jan 2026 10:20:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21219
IP address blocks: 195.178.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:a6:a7:06:56:87:75:d5:b6:00:4d:bd:52:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 10:20:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27c142b6b80191654a0c4c6dceba8ed8eeb5d066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:fe:c1:bb:b1:46:12:f3:78:8d:ee:68:6b:
47:58:51:d4:f7:d1:1f:e3:e4:df:8d:da:d1:52:fd:
e8:77:c7:bd:e9:c0:cd:c0:82:04:a8:b2:18:60:d1:
14:b1:e7:76:40:1c:84:1c:8a:9b:b1:04:c1:8f:09:
c1:5a:74:05:45:16:e0:bd:1c:2d:8f:1b:21:ca:fc:
17:66:77:a9:ca:94:a6:ce:a1:fe:3a:60:0e:33:bc:
20:e7:51:9e:8e:46:f4:7e:bd:a1:11:fe:d1:b9:53:
2b:a2:86:78:b9:76:14:ae:6b:fa:66:ce:21:cf:20:
7b:e4:53:d7:96:db:96:cb:c5:91:e9:f3:a3:bd:e5:
cc:1d:e9:ea:5d:3a:28:19:3b:d3:e6:7c:cd:ee:e2:
76:fe:97:1e:e8:64:e8:05:85:c3:02:5a:93:e7:c5:
4d:77:dd:d0:6e:04:b5:2e:c9:67:ee:cc:70:80:ad:
ae:0f:b6:85:55:62:ec:f0:91:4f:8a:00:a2:4c:8a:
8d:4d:dc:24:c3:f7:e8:f2:c3:96:b2:ba:c2:0c:d3:
92:41:be:60:b5:dd:15:e6:62:65:cf:56:b0:83:fc:
86:c2:be:7e:48:ef:65:21:88:91:b5:26:e1:d7:80:
bd:a4:04:61:c9:25:97:37:e5:2e:de:f1:37:64:c5:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:42:B6:B8:01:91:65:4A:0C:4C:6D:CE:BA:8E:D8:EE:B5:D0:66
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/J8FCtrgBkWVKDExtzrqO2O610GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:06:77:80:c4:64:04:68:72:00:0f:45:e2:d8:22:0c:fa:bb:
2b:95:a7:9f:bb:d2:87:6b:f2:88:c3:4c:b0:e4:49:c0:b2:f0:
e8:90:c7:e6:76:78:03:c5:3a:7b:ed:05:53:b4:63:97:01:07:
da:6e:01:e0:87:fd:c2:14:c5:1d:f0:b2:2e:07:e8:5b:a4:52:
9a:20:02:a2:56:ea:af:e3:5d:f4:ca:7c:ae:00:3b:19:08:e1:
fe:68:29:32:6c:14:7b:38:bf:6e:1e:98:fe:5b:dc:78:50:48:
d7:23:34:63:f1:9c:57:48:5c:f9:42:87:fe:16:72:00:f9:05:
c4:ed:cf:30:32:7d:49:c0:80:37:7a:de:2e:71:33:89:ec:74:
fa:b7:86:d6:7f:a1:4d:de:78:be:1b:82:9f:12:37:10:62:4a:
23:cb:fb:a7:7f:33:6d:27:5f:de:f4:12:ab:56:a9:61:50:39:
bd:7c:60:ba:af:7a:dd:92:2e:cc:7c:53:0d:f7:84:ef:20:8a:
49:c2:e0:54:c9:be:19:6a:b7:9d:fc:dc:61:d8:54:8f:0a:49:
cb:3a:c1:67:4c:53:ad:59:1f:d7:e3:31:65:f0:0f:6c:59:9b:
18:97:cf:a6:ae:8c:c3:90:d6:e5:a1:fa:16:99:e7:94:b6:38:
0d:28:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:58:13 2026 by rpki-client