This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa
File: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (raw, json)
Hash identifier: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=
Subject key identifier: 26:9D:4E:32:7D:BA:5D:B9:79:40:1F:1C:16:AB:49:CF:28:CA:ED:BF
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019B76EAB5136F633A5412994D74E739006C
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa
Signing time: Thu 01 Jan 2026 00:17:31 +0000
ROA not before: Thu 01 Jan 2026 00:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201897
IP address blocks: 185.59.252.0/22 maxlen: 22
185.59.254.0/24 maxlen: 24
185.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:b5:13:6f:63:3a:54:12:99:4d:74:e7:39:00:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jan 1 00:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=269d4e327dba5db979401f1c16ab49cf28caedbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:6f:90:c7:a6:4e:16:04:0e:90:81:c1:9d:
9e:59:d6:4d:52:35:d0:0f:0b:e7:27:2c:d7:0f:0d:
d5:67:cf:24:c4:be:f2:af:be:37:3f:1d:64:3e:6b:
2c:27:fa:44:f2:e3:2b:0a:c8:a1:dd:62:77:c2:62:
78:ef:ea:5f:f1:f2:68:93:1c:87:c4:6d:e4:76:6c:
59:a8:76:ff:d9:9e:58:11:71:9a:e4:bf:b1:96:35:
05:ce:79:1e:48:46:29:e8:01:c8:1b:46:0e:4a:68:
93:93:1a:c0:d3:3b:12:a7:7e:52:2d:d5:3d:ef:7c:
9c:84:ee:df:26:be:9c:67:d1:e3:97:f6:4e:ee:00:
a7:63:ae:8f:af:5e:0b:e2:c6:cc:9c:97:ee:be:ab:
0c:56:e9:e9:15:55:2d:66:9c:29:43:8a:9f:58:0b:
5e:86:15:04:fc:71:21:2a:93:02:0b:a4:81:7b:80:
e4:4d:5c:5f:4d:22:ae:64:9a:f8:b0:19:51:4e:c9:
af:26:0f:0a:7c:a4:67:7e:d8:ad:09:82:8c:b4:23:
93:4f:d2:73:c0:d3:a1:e7:a4:e3:ad:1a:a9:62:1c:
b7:ee:d3:12:07:16:6f:34:5f:40:81:4a:0d:f9:0c:
ab:57:b3:3c:81:b7:15:c9:e5:42:f6:44:0e:8f:fa:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:4E:32:7D:BA:5D:B9:79:40:1F:1C:16:AB:49:CF:28:CA:ED:BF
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f5:7b:8e:51:84:31:b8:be:2f:90:0e:66:7b:2e:bb:c9:00:
34:65:71:6a:69:2a:3a:4f:56:fb:90:ca:c2:46:c0:9d:a1:7b:
24:f8:d8:82:dd:13:9b:ae:93:91:1a:68:89:fe:92:59:5e:39:
b5:4f:54:4e:46:42:6c:08:64:82:5c:c1:a2:bb:6e:ee:65:49:
e3:17:c8:06:dd:85:48:14:40:6c:61:a7:9b:01:a8:35:8a:80:
8a:f6:ff:8f:b1:51:28:76:7c:56:d8:67:4e:4d:22:45:1c:ff:
b4:09:1e:4b:ef:27:73:c1:bf:37:9b:6a:c7:6c:74:1e:8d:a8:
e6:53:c8:ff:3e:8e:c5:3c:f1:fd:88:26:4f:af:08:68:a4:b8:
20:48:41:46:4b:97:eb:e2:d4:9d:f2:02:e2:85:06:0a:7b:01:
d7:9e:51:f7:b0:2d:90:f0:0d:76:b2:07:25:3c:b1:53:d6:e4:
43:38:7a:e5:5f:68:92:4a:96:4c:b8:43:06:9b:48:a5:bb:2e:
a6:3a:fc:95:66:3f:ae:05:d0:e9:55:c5:19:e7:d4:39:a5:51:
be:48:e3:90:18:1e:81:01:42:36:17:4a:22:20:5c:d3:85:3c:
06:b5:23:e8:3d:39:d3:91:e0:58:d9:bd:13:e1:82:dd:87:f0:
19:a5:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:20 2026 by rpki-client