This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa
File: JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa (raw, json)
Hash identifier: Vl0xLqESsMyxlanXnevOLg/LtIR0/LLBMgnk3RuFu6Q=
Subject key identifier: 24:B7:68:18:CC:D0:A3:70:1E:B8:B2:50:7D:1B:91:D4:6E:0D:74:17
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 019B7D5CE9D0DAE7D7074BB8A1CFC5DD80C5
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa
Signing time: Fri 02 Jan 2026 06:19:59 +0000
ROA not before: Fri 02 Jan 2026 06:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42085
IP address blocks: 195.64.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:e9:d0:da:e7:d7:07:4b:b8:a1:cf:c5:dd:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Jan 2 06:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b76818ccd0a3701eb8b2507d1b91d46e0d7417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:74:a2:cc:c3:c7:9d:8b:01:a7:3a:b1:d4:
5d:ca:ba:f6:e1:ab:6c:b6:c3:cd:a9:34:3a:32:b3:
5f:8e:a0:6a:ea:33:37:03:16:39:6a:5b:cc:58:c8:
49:cb:f7:0a:34:ef:e4:45:31:57:5f:7c:74:57:d7:
b3:99:43:67:75:26:f7:fd:12:50:59:7d:d8:70:c6:
64:dd:ec:0a:1f:ac:76:d9:1a:f4:40:41:a2:bf:5a:
02:7c:8b:e7:f0:02:d6:de:2e:32:1b:9a:e3:c5:62:
95:c1:2c:f0:52:c0:98:b6:86:a2:37:dd:57:13:9f:
f0:30:4b:bc:d9:f8:09:45:eb:33:59:93:ff:73:c8:
d9:1f:89:4f:dd:02:29:84:bb:24:e9:8d:c0:87:a0:
bb:6c:c7:d9:3b:9a:bb:4e:ec:0f:6d:69:34:b6:e3:
86:84:d6:09:2f:e4:ec:0b:58:ff:3d:52:2c:9e:4b:
24:88:0d:b0:f5:64:5b:5f:8d:75:86:b1:65:0a:12:
04:0f:cb:7f:7d:8b:5f:de:4e:2b:44:16:41:24:18:
9b:7e:75:51:30:ee:65:ea:f1:40:f9:f4:a2:43:1d:
eb:c8:04:5f:9a:7e:f0:0e:f8:f3:92:39:b3:68:10:
fd:5d:ba:bd:08:99:d1:51:0b:bf:4f:4c:ce:b0:82:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:68:18:CC:D0:A3:70:1E:B8:B2:50:7D:1B:91:D4:6E:0D:74:17
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.138.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:72:87:27:31:d0:d6:85:ce:15:53:32:4d:7c:d9:13:00:3a:
b2:0e:66:65:d2:5e:89:e7:c6:32:ad:35:42:f2:e7:96:6e:88:
f3:72:5c:08:28:0c:e8:21:6a:3e:d4:e8:15:59:e0:51:6b:b7:
dc:9d:fc:5d:25:f0:4c:bc:07:b7:a5:03:4a:15:ec:7d:f6:9f:
80:2a:a1:e2:c8:70:08:ad:fd:84:cc:14:09:b8:ab:de:b0:c4:
1e:b0:93:4f:e7:c2:04:28:89:4d:89:5c:d3:2d:d5:ff:b2:99:
bc:ed:31:c8:73:e5:43:92:2c:12:d5:18:7b:5f:34:54:6c:84:
ae:f6:16:77:9b:25:66:53:b8:f8:bc:6d:06:f0:4f:9c:c1:cb:
b6:57:9a:95:ea:a5:c3:03:0c:12:fe:4b:45:de:d5:c6:53:d3:
08:6b:d8:7a:9c:98:93:3b:10:78:e9:37:13:98:cb:b5:14:7c:
ac:ec:73:8c:b7:03:02:a9:99:35:8b:7b:8c:eb:9f:49:5e:1c:
ae:ef:93:39:8e:f7:54:35:6d:6a:dc:8c:6d:e5:be:f1:89:62:
4b:3a:25:ba:76:2d:4c:40:7a:9e:51:34:bc:34:d4:be:dd:c4:
db:ea:12:67:e6:dd:71:8c:3f:51:d1:3b:c6:d1:27:de:e6:83:
c2:e6:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:24 2026 by rpki-client