This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa
File: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (raw, json)
Hash identifier: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=
Subject key identifier: 8F:6E:17:9F:53:95:0F:39:91:73:46:07:7A:38:CE:97:30:26:81:19
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019B78A2643A5205AA1DC5DA86659E8A5887
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa
Signing time: Thu 01 Jan 2026 08:17:46 +0000
ROA not before: Thu 01 Jan 2026 08:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 91.224.108.0/24 maxlen: 24
194.33.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:64:3a:52:05:aa:1d:c5:da:86:65:9e:8a:58:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 1 08:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f6e179f53950f39917346077a38ce9730268119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:89:90:24:95:01:be:0a:53:25:1f:86:b0:
e0:9e:99:14:a6:10:72:e4:1c:ce:2a:06:d4:61:bd:
06:c2:f6:87:d6:4c:0c:88:33:2f:43:1d:e9:ab:76:
64:0d:24:29:52:05:b1:22:dd:e3:e4:e4:b7:da:e7:
d0:fa:5a:dc:1d:17:e6:05:92:16:a0:90:f0:d0:aa:
09:ec:c8:66:22:81:5f:bc:38:83:e9:b0:42:cd:70:
86:f0:31:12:8a:73:66:71:95:1b:eb:5e:62:83:1a:
64:a8:dd:34:21:8b:1b:32:df:9e:00:c8:c4:bd:92:
69:a7:66:ba:04:07:b2:45:0b:9b:e7:88:d5:97:18:
f6:f7:b5:6f:3e:d0:91:f8:56:bf:c5:4e:ee:14:e2:
0c:43:d5:05:d4:d6:80:7f:75:fa:7a:f7:56:26:7e:
d1:67:54:1e:2a:2a:63:0f:62:0b:8e:56:fa:39:3f:
f3:19:a4:02:2c:f4:2c:4d:d3:7a:9a:3c:f9:9c:c8:
82:d7:ec:69:60:a9:32:94:14:fa:7c:eb:41:f9:27:
be:1e:c3:b3:bf:fc:60:1c:87:e5:d3:97:48:dc:56:
55:0a:ce:dd:6b:f7:71:8b:c7:2e:00:41:af:03:ba:
48:3d:7a:83:95:89:ed:d7:f4:75:f5:a3:93:01:11:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:17:9F:53:95:0F:39:91:73:46:07:7A:38:CE:97:30:26:81:19
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/j24Xn1OVDzmRc0YHejjOlzAmgRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.108.0/24
194.33.58.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ea:72:89:9b:b6:09:8f:5a:8f:c5:b6:f5:8b:ad:f8:ec:9f:
1f:ed:dc:13:b2:0c:da:84:3e:3c:56:81:a2:99:da:7a:82:e6:
d4:22:50:b4:74:3b:ab:b3:22:60:dd:a0:38:7e:bf:98:6e:03:
86:43:4c:80:32:f2:38:e1:47:25:a2:72:ce:cf:eb:c5:ea:f5:
35:6e:9c:d5:bc:87:27:14:13:94:82:df:39:9c:1b:dd:4a:9f:
95:55:37:56:68:8e:ec:de:dd:70:69:0f:41:96:1f:9c:4b:1f:
09:92:ad:06:3b:dc:a9:f4:c5:e9:c6:c2:7a:71:10:f5:87:eb:
97:5e:f9:0b:a9:6c:a2:9a:f4:5f:8f:9f:61:22:e8:fd:43:b7:
42:9f:60:b2:90:bc:63:07:7f:09:70:e1:8a:9f:69:0c:57:36:
b9:ee:00:9a:e2:b8:a1:70:12:15:54:49:ae:12:c8:dc:0c:3a:
fa:d9:f8:6d:00:33:73:b4:ce:38:ef:0a:28:a1:26:aa:1f:49:
7d:93:d4:8a:c5:bf:1e:ea:27:68:31:c9:02:03:b4:5c:ce:c2:
5c:7c:9a:5d:7f:fe:03:49:fb:a4:26:d7:7d:b6:fc:33:d6:1a:
8e:ce:8e:ae:db:a6:83:ed:9a:fa:fe:c9:bf:04:b2:a0:dc:72:
14:c5:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:29 2026 by rpki-client