This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa
File: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (raw, json)
Hash identifier: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=
Subject key identifier: 27:23:AD:E5:C9:C1:E2:FD:D3:DD:46:4F:2B:0F:76:5F:4B:4D:7B:9E
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 019B7C13609D453B4824FC39A4F2479506FE
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa
Signing time: Fri 02 Jan 2026 00:20:03 +0000
ROA not before: Fri 02 Jan 2026 00:20:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210558
IP address blocks: 45.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:60:9d:45:3b:48:24:fc:39:a4:f2:47:95:06:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 2 00:20:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2723ade5c9c1e2fdd3dd464f2b0f765f4b4d7b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:56:a6:57:24:9a:9a:da:c8:ab:e9:92:75:
f4:68:d5:d5:75:2c:fd:da:db:c9:ef:df:49:92:ab:
d4:2f:94:a2:13:4b:c5:94:e5:3f:9e:81:9d:51:e0:
cb:63:5e:63:10:bf:d9:15:06:82:92:a8:2f:5d:fe:
a0:57:8d:16:5f:0e:e0:47:dd:fd:f7:24:16:89:47:
69:8a:48:f6:b9:ce:82:c4:a1:53:e6:d1:55:21:0d:
65:c5:21:63:27:19:c9:78:96:d9:1d:da:d6:57:41:
2b:51:c8:38:cb:a2:7d:cc:c6:0b:44:1b:f2:fb:42:
f3:74:85:48:68:5e:cb:52:e2:6c:45:94:18:97:fb:
c6:21:00:a9:38:ca:ee:0e:ed:a0:61:1b:2d:3c:3b:
af:79:3e:65:a7:d7:83:16:83:66:79:49:79:51:ba:
0e:b8:87:76:41:55:2e:ac:72:54:e9:b3:32:8e:73:
95:e9:19:03:11:d2:10:92:bc:4f:3f:71:96:a8:ba:
52:7b:67:5b:36:27:f4:05:bd:63:13:5e:cc:03:65:
e4:8b:b2:a7:3a:66:1b:2c:1c:a0:5b:e2:ee:46:4b:
46:34:81:cb:57:d2:99:90:cd:53:e4:77:8c:a3:32:
bf:ab:d2:80:33:d4:c9:db:af:db:74:4c:ab:aa:dc:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:AD:E5:C9:C1:E2:FD:D3:DD:46:4F:2B:0F:76:5F:4B:4D:7B:9E
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/JyOt5cnB4v3T3UZPKw92X0tNe54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:78:f9:61:8d:00:0e:ba:93:1b:4d:a6:fc:a2:49:15:47:cc:
10:8c:9e:8f:a0:79:ad:5f:8c:92:38:11:68:d8:a5:ee:c1:4f:
5d:ac:7c:9f:40:65:b8:4f:e0:12:94:eb:0c:1b:42:51:b3:6d:
8d:2e:f5:9a:ca:97:c3:b8:4c:eb:95:d9:70:38:4a:01:e1:76:
91:e1:70:c7:62:f6:59:aa:0b:5a:82:5b:71:31:47:af:8d:ae:
8c:1f:71:9d:7d:29:a2:4a:03:77:7c:61:a4:1e:60:03:6e:cd:
c5:00:46:56:49:3e:1b:e8:d7:6d:ee:27:21:d3:a9:d9:be:ce:
2e:4e:e9:24:ea:7a:42:7e:bc:48:64:77:50:55:af:5b:2c:38:
e1:76:7e:ba:b0:50:1a:cf:97:4a:f3:3e:bf:90:71:f0:8a:f4:
23:82:61:56:01:38:c0:ca:74:42:24:79:23:e6:d8:92:7e:7e:
98:e6:44:37:23:cc:12:54:33:a7:0d:4b:30:c1:5d:39:50:66:
a2:48:02:3e:5f:43:d1:10:2d:25:63:88:a7:8f:8d:61:1b:e4:
63:54:e8:be:2f:ea:80:39:a0:88:cb:0e:62:f8:3e:40:b7:bc:
a5:e9:92:21:c9:88:0c:94:49:f8:22:3a:a3:ae:5f:78:15:27:
28:74:f3:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E2CdRTtIJPw5pPJHlQb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzIzYWRlNWM5YzFlMmZkZDNkZDQ2NGYyYjBmNzY1ZjRiNGQ3YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA151WplckmprayKvpknX0aNXVdSz9
2tvJ799JkqvUL5SiE0vFlOU/noGdUeDLY15jEL/ZFQaCkqgvXf6gV40WXw7gR939
9yQWiUdpikj2uc6CxKFT5tFVIQ1lxSFjJxnJeJbZHdrWV0ErUcg4y6J9zMYLRBvy
+0LzdIVIaF7LUuJsRZQYl/vGIQCpOMruDu2gYRstPDuveT5lp9eDFoNmeUl5UboO
uId2QVUurHJU6bMyjnOV6RkDEdIQkrxPP3GWqLpSe2dbNif0Bb1jE17MA2Xki7Kn
OmYbLBygW+LuRktGNIHLV9KZkM1T5HeMozK/q9KAM9TJ26/bdEyrqtxytQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcjreXJweL9091GTysPdl9LTXueMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvSnlPdDVjbkI0djNUM1VaUEt3OTJYMHROZTU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVi6MA0G
CSqGSIb3DQEBCwUAA4IBAQB+ePlhjQAOupMbTab8okkVR8wQjJ6PoHmtX4ySOBFo
2KXuwU9drHyfQGW4T+ASlOsMG0JRs22NLvWaypfDuEzrldlwOEoB4XaR4XDHYvZZ
qgtagltxMUevja6MH3GdfSmiSgN3fGGkHmADbs3FAEZWST4b6Ndt7ich06nZvs4u
Tukk6npCfrxIZHdQVa9bLDjhdn66sFAaz5dK8z6/kHHwivQjgmFWATjAynRCJHkj
5tiSfn6Y5kQ3I8wSVDOnDUswwV05UGaiSAI+X0PREC0lY4inj41hG+RjVOi+L+qA
OaCIyw5i+D5At7yl6ZIhyYgMlEn4Ijqjrl94FScodPP5
-----END CERTIFICATE-----
Generated at Mon Jan 26 21:04:56 2026 by rpki-client