This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/Jv3FrbaSeXZke2UP27JZQguG_qc.roa
File: Jv3FrbaSeXZke2UP27JZQguG_qc.roa (raw, json)
Hash identifier: dePpEEDTqP/enapSxKmHvz68yt/UQtEn5OCz1CdZVCI=
Subject key identifier: 26:FD:C5:AD:B6:92:79:76:64:7B:65:0F:DB:B2:59:42:0B:86:FE:A7
Certificate issuer: /CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Certificate serial: 019B7C12C5AAF29AC9CFA8E29138DF6793C9
Authority key identifier: 0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/Jv3FrbaSeXZke2UP27JZQguG_qc.roa
Signing time: Fri 02 Jan 2026 00:19:23 +0000
ROA not before: Fri 02 Jan 2026 00:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203818
IP address blocks: 185.113.92.0/24 maxlen: 24
185.113.93.0/24 maxlen: 24
185.113.94.0/24 maxlen: 24
185.113.95.0/24 maxlen: 24
185.122.208.0/24 maxlen: 24
185.122.209.0/24 maxlen: 24
185.122.210.0/24 maxlen: 24
185.122.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:c5:aa:f2:9a:c9:cf:a8:e2:91:38:df:67:93:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdcf0ec7baf349e892d51115c22c0dbd4350b8e
Validity
Not Before: Jan 2 00:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26fdc5adb6927976647b650fdbb259420b86fea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:cb:e5:0a:2c:d5:64:b3:f2:e7:9d:56:38:
88:31:84:de:1f:10:22:cf:0e:68:8b:b7:83:b3:1c:
28:29:d9:fc:f2:03:da:c6:3e:a0:46:6e:24:38:e2:
71:e7:70:0b:30:e0:98:0e:fb:89:67:22:74:57:fe:
70:a0:21:8c:0e:52:e4:9b:b3:51:44:fe:7e:f7:74:
aa:bd:8a:9e:42:43:a8:25:da:a6:68:6c:48:0d:5f:
ba:1d:cd:2e:fb:86:5e:f8:1c:9d:37:9c:b4:9c:61:
e5:e9:66:5a:84:51:6e:d1:6b:08:b2:8f:30:1f:09:
36:bf:8a:8d:4f:24:d7:cb:0f:44:8d:4d:28:93:d1:
07:63:63:fe:e5:23:89:bb:c3:5a:71:e9:70:cf:98:
40:7b:14:18:1c:00:d9:ab:f2:c4:f0:98:60:4c:f3:
92:43:48:4a:92:5a:15:c9:2a:86:10:e0:ef:c4:50:
74:42:1d:13:0f:73:8e:86:e5:c0:70:0f:cf:38:89:
e6:6a:ea:91:9b:2a:40:be:bb:07:a0:7c:5b:28:96:
fb:c3:54:22:7b:63:50:54:f6:6a:08:52:5b:58:1b:
ed:54:6b:9d:9b:35:1e:b1:0c:f6:96:66:11:b5:85:
fb:09:d6:d6:b2:f0:eb:f0:ca:45:32:44:1d:c4:f3:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:C5:AD:B6:92:79:76:64:7B:65:0F:DB:B2:59:42:0B:86:FE:A7
X509v3 Authority Key Identifier:
keyid:0F:DC:F0:EC:7B:AF:34:9E:89:2D:51:11:5C:22:C0:DB:D4:35:0B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9zw7HuvNJ6JLVERXCLA29Q1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/Jv3FrbaSeXZke2UP27JZQguG_qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2482ba-41ce-409a-8e7e-b295838abbd9/1/D9zw7HuvNJ6JLVERXCLA29Q1C44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.92.0/22
185.122.208.0/22
Signature Algorithm: sha256WithRSAEncryption
48:c8:f5:8c:3f:37:d1:af:07:b1:4c:3b:55:3e:71:9c:3a:e5:
43:30:48:bd:30:4f:4f:e5:a9:9b:d5:31:b7:4e:1e:33:48:9f:
5d:a5:e8:42:0d:8f:20:7e:fb:11:ae:d9:b5:09:e7:d6:10:53:
2b:02:6c:75:63:7d:08:4b:8d:33:26:fe:71:a5:42:8b:f2:06:
6b:83:26:7d:da:2a:63:2a:9c:35:25:5b:2a:a5:60:cd:a5:b6:
4a:96:a1:2b:70:cd:bf:76:e4:0a:76:80:69:31:8f:94:5f:66:
39:e9:4c:65:37:f4:a4:df:86:eb:87:bd:2f:cb:e6:26:70:da:
fe:84:e8:71:ae:09:54:87:48:14:7d:61:36:54:20:38:e5:46:
2d:a5:3d:ab:a4:f8:b2:2b:20:47:eb:7b:73:d8:2d:84:8d:2a:
c0:05:c2:a5:24:ac:93:2c:fc:fd:3a:ef:61:b0:f2:9b:3d:1a:
3a:3d:1f:49:57:a5:9b:fa:62:c3:b5:bb:b6:90:17:6a:57:28:
4d:df:8a:a1:7e:6b:2c:86:2f:fe:d7:6a:17:f0:30:c8:f1:81:
85:70:06:cc:5b:8c:70:c9:b9:b2:69:d1:bb:73:a8:60:7d:32:
71:5e:dc:03:82:cc:17:9c:21:48:80:90:b0:4e:b4:e5:c9:15:
80:72:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:44:51 2026 by rpki-client