This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/je3iKJCV3wr3RPW999jnQpZYgak.roa
File: je3iKJCV3wr3RPW999jnQpZYgak.roa (raw, json)
Hash identifier: 2EnBr3PRlTCWtEqCVUKVxi0nx0bUz+10exriD4ddLq0=
Subject key identifier: 8D:ED:E2:28:90:95:DF:0A:F7:44:F5:BD:F7:D8:E7:42:96:58:81:A9
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019B7BA40C58817808BA9802E99DFE7FFC62
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/je3iKJCV3wr3RPW999jnQpZYgak.roa
Signing time: Thu 01 Jan 2026 22:18:27 +0000
ROA not before: Thu 01 Jan 2026 22:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202578
IP address blocks: 185.233.201.0/24 maxlen: 24
193.34.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:0c:58:81:78:08:ba:98:02:e9:9d:fe:7f:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jan 1 22:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dede2289095df0af744f5bdf7d8e742965881a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:f8:d2:77:69:af:67:4b:49:45:53:0b:44:
fe:b4:8e:4b:cc:85:34:b6:06:03:a7:7c:9d:61:b4:
32:4f:9a:34:0e:06:ce:a8:e4:b5:ab:14:94:44:3d:
fc:5f:ff:ad:25:6a:75:4d:06:d8:64:78:ea:cb:c0:
c9:00:31:bb:e3:46:45:2b:a0:dd:c0:89:60:29:1c:
2b:e7:a6:3a:43:af:a8:59:02:0c:db:b1:be:7c:90:
43:ae:04:4a:e6:65:7f:de:20:5d:a9:87:0b:71:70:
30:d7:77:b0:21:d3:de:cb:7e:db:a0:90:c5:1a:58:
da:a2:68:d8:53:53:fe:f1:a1:06:02:a3:b2:a6:69:
93:ac:23:c0:72:60:ad:17:30:46:41:26:54:de:cc:
f7:4e:47:7e:d9:d1:6a:51:11:ed:bb:51:2e:73:aa:
ab:7d:de:55:ef:09:5f:8e:5c:af:55:b6:7a:f4:43:
6d:e8:b0:b2:d9:da:4d:c1:76:71:a9:0f:0a:74:f9:
34:23:bb:96:04:92:84:83:86:17:0d:02:d5:d5:8f:
aa:b7:1a:75:34:23:c1:47:06:44:e8:1f:c1:f3:68:
93:30:07:ce:22:aa:70:36:c5:14:46:2e:5d:49:1e:
4b:75:3c:77:e4:92:57:4e:ce:40:52:46:34:6a:92:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:E2:28:90:95:DF:0A:F7:44:F5:BD:F7:D8:E7:42:96:58:81:A9
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/je3iKJCV3wr3RPW999jnQpZYgak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ae:7a:53:94:38:21:b1:48:1a:3f:e2:2f:99:62:48:69:90:
d2:c8:3c:7c:00:cc:eb:32:3d:cf:28:c2:b5:42:a1:40:86:bc:
14:e2:c6:2b:f2:81:1f:50:d8:8f:35:f0:d3:a6:d1:55:4d:1b:
a0:95:51:7e:b0:4f:e6:fa:08:6c:04:1c:8a:b8:2e:6c:88:20:
27:39:94:9b:76:e5:e7:80:cc:41:d2:e8:07:86:9d:72:ef:1f:
a7:34:54:98:fe:dd:ec:5b:dc:2e:a5:2d:18:a6:7d:35:26:60:
eb:e7:1c:f3:57:37:5b:ac:b4:1b:86:d4:f2:b8:51:a5:86:16:
d2:bb:70:d7:7c:a1:e5:6a:b2:49:31:90:96:1e:a3:fa:11:59:
eb:09:6c:0a:fd:76:e3:eb:49:9d:5f:85:c7:05:2e:a4:a2:70:
26:51:e2:a9:52:13:c2:8c:30:38:35:56:af:7a:92:e5:bb:82:
70:f0:e5:a7:91:b4:6e:06:dc:9c:8e:1d:e8:53:04:17:2b:d0:
65:bc:d0:ef:4a:9d:cb:66:1a:06:25:16:58:bd:63:71:cf:1d:
13:30:7f:c2:c2:13:fe:d9:ef:97:31:4e:8f:19:1b:92:6c:ba:
13:49:fd:cb:75:09:2a:8a:88:05:a8:c2:ef:fa:69:3a:0d:dc:
c0:ce:73:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7pAxYgXgIupgC6Z3+f/xiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3
Mjc4MmEwHhcNMjYwMTAxMjIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGVkZTIyODkwOTVkZjBhZjc0NGY1YmRmN2Q4ZTc0Mjk2NTg4MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtb40ndpr2dLSUVTC0T+tI5LzIU0
tgYDp3ydYbQyT5o0DgbOqOS1qxSURD38X/+tJWp1TQbYZHjqy8DJADG740ZFK6Dd
wIlgKRwr56Y6Q6+oWQIM27G+fJBDrgRK5mV/3iBdqYcLcXAw13ewIdPey37boJDF
GljaomjYU1P+8aEGAqOypmmTrCPAcmCtFzBGQSZU3sz3Tkd+2dFqURHtu1Euc6qr
fd5V7wlfjlyvVbZ69ENt6LCy2dpNwXZxqQ8KdPk0I7uWBJKEg4YXDQLV1Y+qtxp1
NCPBRwZE6B/B82iTMAfOIqpwNsUURi5dSR5LdTx35JJXTs5AUkY0apKm9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI3t4iiQld8K90T1vffY50KWWIGpMB8GA1UdIwQY
MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvamUzaUtKQ1Yzd3IzUlBXOTk5am5RcFpZZ2FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuenJAwQA
wSLqMA0GCSqGSIb3DQEBCwUAA4IBAQB+rnpTlDghsUgaP+IvmWJIaZDSyDx8AMzr
Mj3PKMK1QqFAhrwU4sYr8oEfUNiPNfDTptFVTRuglVF+sE/m+ghsBByKuC5siCAn
OZSbduXngMxB0ugHhp1y7x+nNFSY/t3sW9wupS0Ypn01JmDr5xzzVzdbrLQbhtTy
uFGlhhbSu3DXfKHlarJJMZCWHqP6EVnrCWwK/Xbj60mdX4XHBS6konAmUeKpUhPC
jDA4NVavepLlu4Jw8OWnkbRuBtycjh3oUwQXK9BlvNDvSp3LZhoGJRZYvWNxzx0T
MH/CwhP+2e+XMU6PGRuSbLoTSf3LdQkqiogFqMLv+mk6DdzAznNA
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:55 2026 by rpki-client