This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa
File: JjIMrvVuKdrMt7Dh9L4byjfOnew.roa (raw, json)
Hash identifier: ZrZ5z4Qgu4QNS9KSQ9fIhwk5Z3MXkjPYh6C1NAf0JJc=
Subject key identifier: 26:32:0C:AE:F5:6E:29:DA:CC:B7:B0:E1:F4:BE:1B:CA:37:CE:9D:EC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019B7C13276FF38C8C2118A8F0C7729967C3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa
Signing time: Fri 02 Jan 2026 00:19:48 +0000
ROA not before: Fri 02 Jan 2026 00:19:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52356
IP address blocks: 181.41.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:27:6f:f3:8c:8c:21:18:a8:f0:c7:72:99:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 00:19:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26320caef56e29daccb7b0e1f4be1bca37ce9dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:73:b5:af:63:11:66:d7:fa:1d:c3:7a:26:
37:e7:f8:47:b5:03:49:d0:58:d7:07:fb:89:7a:8a:
5b:f3:ff:2e:69:15:09:15:7f:32:9b:d7:a4:77:53:
e2:42:e1:7f:07:76:af:93:b5:15:ed:90:44:0d:9f:
74:1f:94:c7:2a:11:82:2b:13:0f:a4:d0:5a:8c:91:
d4:b4:9c:e6:b5:f8:76:cd:78:bd:45:ab:17:c2:29:
ac:65:7e:34:91:b5:7b:51:f0:2f:b6:a0:fe:20:c1:
7d:c0:55:84:9e:ca:af:c0:32:f1:67:5e:5f:b3:24:
cc:58:9f:9c:5a:30:78:2e:d6:e2:88:5d:04:ea:2b:
fc:b8:40:87:32:97:1d:10:ad:c0:37:4c:96:f1:99:
52:69:43:84:51:1c:11:56:fb:f4:3e:4a:1b:aa:2e:
a4:d8:40:60:94:7b:ca:02:d1:21:8a:8b:06:32:59:
d0:3a:96:6a:47:ed:f4:00:9c:a8:de:0a:9e:09:00:
29:bc:7f:8b:64:ca:3b:7f:96:ae:00:ad:72:23:bd:
21:91:fe:a6:de:45:12:09:2f:4b:e6:5e:45:81:c5:
d2:1d:3e:c8:fb:4a:c8:a0:99:82:e7:ec:ef:74:d7:
48:1a:38:55:5e:99:4b:24:aa:46:1b:7e:5a:e9:43:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:0C:AE:F5:6E:29:DA:CC:B7:B0:E1:F4:BE:1B:CA:37:CE:9D:EC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/JjIMrvVuKdrMt7Dh9L4byjfOnew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b3:8b:5e:af:93:55:5e:59:c0:46:3c:24:c1:2c:d0:85:c3:
7b:50:08:f9:84:c3:b2:36:65:e3:34:6f:3d:df:fa:ea:f6:57:
77:93:f3:58:4f:88:4c:73:f9:8e:43:1c:bb:30:f2:c4:13:a3:
b7:81:b1:22:f3:8e:15:9f:6d:b3:89:f1:3d:68:94:4c:05:cb:
06:ab:b3:e6:e5:09:79:09:ff:06:4c:15:5e:94:46:b0:6c:76:
37:f1:70:0f:4d:ea:d1:a3:64:5a:51:66:f7:57:3a:1d:11:8c:
42:f9:b5:83:db:11:da:17:94:df:4a:6a:e7:26:d7:3c:19:be:
81:06:49:a3:19:54:c4:ff:c3:d4:79:56:03:89:12:e5:c7:dd:
82:89:a9:f2:09:db:48:4c:0c:59:20:9c:ac:df:9b:21:17:18:
07:70:e5:b3:03:f3:e3:88:58:ae:95:a1:27:68:ee:09:ee:f5:
ff:34:30:15:bb:b7:67:09:b6:cd:97:41:7b:d4:70:dd:82:93:
96:54:d7:be:74:44:24:81:05:54:f4:52:f9:ab:bc:a0:86:b0:
e4:00:3d:5c:47:d8:9e:da:41:93:b2:aa:84:52:9e:5d:90:88:
b0:37:5d:3f:c8:dd:1b:2b:de:b1:07:55:b8:65:bb:bc:3b:85:
57:69:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:19 2026 by rpki-client