This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa
File: JPfoJXm_mqNYx2eLoY-8aQk43JI.roa (raw, json)
Hash identifier: 60bOqqx8tDTM630vxTBXKNLIi5QJRiiJ1Zd2UZ7x0Qo=
Subject key identifier: 24:F7:E8:25:79:BF:9A:A3:58:C7:67:8B:A1:8F:BC:69:09:38:DC:92
Certificate issuer: /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial: 019B7D5C137552DA3F120E6B0AF06632FF9D
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa
Signing time: Fri 02 Jan 2026 06:19:04 +0000
ROA not before: Fri 02 Jan 2026 06:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25460
IP address blocks: 88.214.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:13:75:52:da:3f:12:0e:6b:0a:f0:66:32:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Validity
Not Before: Jan 2 06:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24f7e82579bf9aa358c7678ba18fbc690938dc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:02:34:ab:41:82:11:f3:c3:27:ee:15:8e:
32:fb:fb:dc:a8:11:5a:07:d3:43:13:e3:88:97:e8:
2a:44:dc:7f:f2:5f:7d:8e:e0:19:52:5f:9d:b0:cd:
c1:7e:80:9e:23:8f:d1:70:57:f1:17:dc:c7:96:14:
65:55:8b:1b:3e:6e:e2:a3:a5:f5:16:db:db:fd:4d:
d9:c8:19:92:2d:eb:21:db:59:e3:09:e0:5c:3e:0f:
c3:a0:95:98:3c:31:5d:fd:e9:48:44:f1:14:bd:55:
08:8c:70:35:a8:30:d2:51:81:6e:f9:11:7c:6d:da:
64:86:e2:2a:be:ee:d1:5b:f9:81:07:26:78:cb:51:
b9:4e:09:3e:26:ba:b8:54:3b:4b:e2:39:f1:ed:72:
07:df:70:5d:30:d7:40:2a:6f:33:66:1e:f7:e4:2d:
35:6a:7b:c4:1d:08:4f:ac:b0:92:16:2f:7b:c5:51:
e9:5b:d5:d9:50:2e:fe:09:7e:82:cb:55:51:e6:9e:
02:88:28:05:a9:5e:d1:a4:42:1e:32:0a:10:f1:b8:
8d:87:45:a4:5b:89:8d:4d:1b:68:ba:a9:a1:d0:8d:
68:ce:b0:b4:db:d1:96:0b:94:0f:1a:83:95:b3:36:
be:b7:a0:ad:3a:e6:23:ba:b1:de:dd:b7:b6:98:64:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:E8:25:79:BF:9A:A3:58:C7:67:8B:A1:8F:BC:69:09:38:DC:92
X509v3 Authority Key Identifier:
keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/JPfoJXm_mqNYx2eLoY-8aQk43JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:41:7b:79:44:09:1f:a3:a1:1e:14:ff:50:fa:00:ac:4b:1c:
07:b2:1d:ee:f4:de:5c:3a:4d:50:f1:78:60:61:a4:a7:34:f1:
9a:7a:0b:fd:18:5b:d5:37:91:fb:ff:d2:03:bf:a7:77:46:04:
1e:a2:4b:44:e2:db:26:58:4f:45:b9:af:e6:c4:f0:8f:0d:58:
82:6e:28:f4:e9:ca:e3:52:e9:e5:eb:d2:be:d7:ab:93:e2:9e:
21:73:e4:9e:d9:7b:8a:cf:ca:ff:32:e8:34:d2:80:4a:f9:f8:
4f:87:3b:5f:72:bb:bd:e0:25:96:eb:e1:38:87:ce:8a:31:56:
00:50:c2:a4:f3:7d:9e:b3:5b:7b:26:49:d1:f4:30:f1:88:39:
46:97:5d:b3:6a:5b:a2:1e:27:94:04:70:5d:6a:28:20:b4:f5:
07:b0:ed:1b:2b:19:10:bd:43:8c:4b:f6:49:d9:d5:a1:59:75:
c1:bd:6d:83:0e:c2:e5:d3:2f:48:b1:47:7a:14:7f:ab:54:68:
c9:9b:83:ec:83:48:c6:ca:04:08:09:7f:e1:20:20:8c:3b:b0:
af:13:8e:b9:b1:f3:1a:27:3f:ec:05:37:8f:42:06:12:56:22:
18:36:64:70:f8:4f:71:4d:77:08:f3:7a:8d:07:48:ed:45:3b:
6a:4e:1d:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XBN1Uto/Eg5rCvBmMv+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTE1MzNjM2ZmOTRiMThjMzA4ZjFiMWM5NWJhNDRlYjFm
MGVjNzcwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY3ZTgyNTc5YmY5YWEzNThjNzY3OGJhMThmYmM2OTA5MzhkYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRoCNKtBghHzwyfuFY4y+/vcqBFa
B9NDE+OIl+gqRNx/8l99juAZUl+dsM3BfoCeI4/RcFfxF9zHlhRlVYsbPm7io6X1
Ftvb/U3ZyBmSLesh21njCeBcPg/DoJWYPDFd/elIRPEUvVUIjHA1qDDSUYFu+RF8
bdpkhuIqvu7RW/mBByZ4y1G5Tgk+Jrq4VDtL4jnx7XIH33BdMNdAKm8zZh735C01
anvEHQhPrLCSFi97xVHpW9XZUC7+CX6Cy1VR5p4CiCgFqV7RpEIeMgoQ8biNh0Wk
W4mNTRtouqmh0I1ozrC029GWC5QPGoOVsza+t6CtOuYjurHe3be2mGTo6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCT36CV5v5qjWMdni6GPvGkJONySMB8GA1UdIwQY
MBaAFDbhUzw/+UsYwwjxsclbpE6x8Ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUt
OTliOWYzM2RlM2IwLzEvSlBmb0pYbV9tcU5ZeDJlTG9ZLThhUWs0M0pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUtOTliOWYzM2RlM2Iw
LzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWNYkMA0G
CSqGSIb3DQEBCwUAA4IBAQAPQXt5RAkfo6EeFP9Q+gCsSxwHsh3u9N5cOk1Q8Xhg
YaSnNPGaegv9GFvVN5H7/9IDv6d3RgQeoktE4tsmWE9Fua/mxPCPDViCbij06crj
Uunl69K+16uT4p4hc+Se2XuKz8r/Mug00oBK+fhPhztfcru94CWW6+E4h86KMVYA
UMKk832es1t7JknR9DDxiDlGl12zaluiHieUBHBdaiggtPUHsO0bKxkQvUOMS/ZJ
2dWhWXXBvW2DDsLl0y9IsUd6FH+rVGjJm4Psg0jGygQICX/hICCMO7CvE465sfMa
Jz/sBTePQgYSViIYNmRw+E9xTXcI83qNB0jtRTtqTh3D
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:55 2026 by rpki-client