This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/kJSjLOsWhAHko1FJjBJtE40W7yI.roa
File: kJSjLOsWhAHko1FJjBJtE40W7yI.roa (raw, json)
Hash identifier: R5x4NpWCvDVLqww0J/ygaTqJQCiT5GP/47DNzH/f1HY=
Subject key identifier: 90:94:A3:2C:EB:16:84:01:E4:A3:51:49:8C:12:6D:13:8D:16:EF:22
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019B7FF06598B31BEDDBA437E3605085AA09
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/kJSjLOsWhAHko1FJjBJtE40W7yI.roa
Signing time: Fri 02 Jan 2026 18:20:19 +0000
ROA not before: Fri 02 Jan 2026 18:20:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59595
IP address blocks: 81.161.16.0/22 maxlen: 22
81.161.20.0/23 maxlen: 23
81.161.22.0/23 maxlen: 23
81.161.24.0/24 maxlen: 24
81.161.25.0/24 maxlen: 24
81.161.26.0/23 maxlen: 23
81.161.28.0/23 maxlen: 23
81.161.30.0/23 maxlen: 23
91.227.210.0/23 maxlen: 23
91.227.210.0/24 maxlen: 24
91.227.211.0/24 maxlen: 24
91.227.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f0:65:98:b3:1b:ed:db:a4:37:e3:60:50:85:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Jan 2 18:20:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9094a32ceb168401e4a351498c126d138d16ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:dd:44:95:f8:9e:48:cf:d0:55:e1:d6:39:
34:88:3d:5d:c0:8f:7c:8a:e9:1a:33:f5:d1:33:cf:
6f:25:61:7f:cf:00:60:0b:19:f7:b0:9f:fd:ef:f2:
89:76:01:f8:dd:f5:34:a5:78:ed:b2:4b:ef:aa:85:
b3:f5:e3:6b:60:b7:86:34:d9:bf:b8:44:02:d9:80:
72:e4:fc:eb:6c:f9:2f:75:58:eb:dc:ce:22:f8:7f:
61:b6:90:a6:ab:ed:87:99:d4:09:27:0a:23:a2:17:
3f:79:ad:ef:56:c7:c9:72:1e:f3:3f:73:75:f6:ee:
83:29:f2:76:48:16:ae:61:8a:92:a0:0a:83:ae:18:
28:92:e6:df:0d:dd:6f:bd:57:e4:8c:7a:fe:c0:00:
a6:a3:3a:3b:c5:2a:97:a0:9a:3e:35:db:7a:33:40:
1e:45:4a:49:fd:19:93:03:98:b7:a9:83:55:8e:0d:
32:d6:db:8f:e6:09:fd:ea:98:b5:c7:e5:80:1b:9d:
61:6f:20:2f:46:a8:47:30:ce:6f:43:8e:66:be:3f:
e4:b7:c4:9f:e1:2b:af:9d:f8:54:ce:f6:e5:96:66:
54:d9:69:b6:da:7e:b1:ff:59:c8:0f:7e:3f:3d:d8:
bb:93:a1:f5:fa:01:25:d9:bc:21:61:78:bd:d5:9b:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:A3:2C:EB:16:84:01:E4:A3:51:49:8C:12:6D:13:8D:16:EF:22
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/kJSjLOsWhAHko1FJjBJtE40W7yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.16.0/20
91.227.210.0/23
91.227.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:76:03:65:f1:dd:9a:b4:43:54:75:03:84:b0:f8:c7:a1:58:
b4:20:0d:40:63:f4:f6:6d:a0:5e:3b:de:76:ef:3b:15:cb:85:
ed:34:44:f1:76:99:e1:2e:5e:d6:3a:d3:04:b3:a4:89:0c:6f:
41:a2:a1:54:95:d7:24:6e:e2:c3:8b:33:7f:c9:24:b1:53:37:
8c:f7:94:96:87:41:da:b3:21:37:f2:f7:ed:50:f3:e9:73:f2:
ae:d0:4e:eb:e3:b2:ca:03:58:53:77:ce:16:55:26:d0:f4:a4:
64:05:7e:b6:94:69:90:b8:19:b6:73:f3:86:5c:a4:dd:2d:f3:
ac:6c:d6:e1:6d:55:5d:ea:9e:ca:b5:89:59:b3:8b:7c:93:02:
54:37:df:d2:06:84:c0:28:91:47:5b:e0:74:c9:05:0e:92:ed:
ec:9d:2f:97:b2:b3:0f:5f:3b:5b:62:ac:5e:36:b8:78:47:a1:
26:74:25:c9:84:c8:49:8c:c2:b0:6f:b9:eb:d0:f2:a8:f1:2d:
b9:05:3a:f2:e4:21:5c:94:92:84:bf:7a:77:80:00:6a:c8:46:
3f:36:aa:90:19:8f:be:26:c3:46:37:df:de:2d:17:e4:f1:97:
5b:b0:9e:b6:8d:39:04:8d:59:cb:a3:f9:e6:bd:ee:9c:18:6c:
c8:95:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:56 2026 by rpki-client