This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/jPYCtvg3GE_VwEQcAwSaarKrRyk.roa
File: jPYCtvg3GE_VwEQcAwSaarKrRyk.roa (raw, json)
Hash identifier: nuEwvNhdHeKFYA+Obi+z5QNV66SfmctRCyNhrFkje6E=
Subject key identifier: 8C:F6:02:B6:F8:37:18:4F:D5:C0:44:1C:03:04:9A:6A:B2:AB:47:29
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 019B7758D873B4A86CC532537F048DA006BA
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/jPYCtvg3GE_VwEQcAwSaarKrRyk.roa
Signing time: Thu 01 Jan 2026 02:17:49 +0000
ROA not before: Thu 01 Jan 2026 02:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60207
IP address blocks: 193.105.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:d8:73:b4:a8:6c:c5:32:53:7f:04:8d:a0:06:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 1 02:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cf602b6f837184fd5c0441c03049a6ab2ab4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:0a:46:ca:a9:da:59:23:2b:82:29:fa:45:
09:83:4a:b7:08:ff:b2:34:c0:72:a5:c7:91:26:97:
e1:d3:cc:fd:6b:9c:45:ac:01:74:b1:aa:bf:20:ae:
f7:97:00:e2:f0:49:56:4c:f0:00:b6:7c:9d:bf:fe:
8f:e6:23:c7:4e:91:77:bc:b6:f0:b4:8f:d0:5b:56:
9e:f3:4c:e6:35:9f:ca:e8:c4:65:96:d5:f9:81:e0:
a1:68:66:83:2b:f0:22:b6:61:68:b6:be:c7:a1:a0:
6c:3a:df:d2:5c:97:7e:b4:4e:07:e7:06:ab:bf:db:
de:a2:0a:b4:6e:27:e2:06:f1:d4:7b:73:a0:fc:74:
7e:b5:ed:ba:28:e3:fc:2a:0f:e2:b8:80:e0:8b:52:
ea:bf:52:d8:d8:2d:06:85:9e:53:01:a8:bb:7d:df:
04:8c:ca:23:3a:16:a6:19:e9:e6:04:9b:e4:9f:e6:
01:61:be:d7:b4:fa:ca:25:bd:67:8b:45:73:15:26:
f2:5d:51:77:9d:a7:35:fd:a3:6a:ae:a8:97:cf:9e:
29:bc:e2:06:5f:ee:e4:be:25:cd:d6:09:c5:28:b8:
00:5b:bc:6e:f2:ea:67:01:20:95:e0:8f:9b:a2:83:
fe:d9:31:73:39:04:a0:fa:2f:4d:eb:68:96:a4:f5:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:02:B6:F8:37:18:4F:D5:C0:44:1C:03:04:9A:6A:B2:AB:47:29
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/jPYCtvg3GE_VwEQcAwSaarKrRyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3f:ab:7e:14:92:da:66:c5:9f:7e:7e:91:f9:f0:ba:ad:5c:
66:26:77:6d:02:2d:a2:44:11:9a:1f:40:50:af:fc:9b:30:ac:
14:a0:4d:ca:16:b3:ff:ee:f8:61:ec:63:2c:be:df:c2:75:51:
6b:31:83:28:ac:e8:61:48:ab:6c:a8:94:53:fe:79:aa:d3:51:
cd:38:8d:32:da:97:75:1f:a6:4d:80:64:1c:f2:fb:b0:e5:66:
1b:e8:0d:1e:e3:e8:b5:4e:0b:77:2f:31:a0:46:60:c3:23:f5:
ae:81:19:2d:33:e8:aa:10:6a:8b:f9:8f:79:90:61:13:34:ac:
36:28:52:4c:ba:d8:19:05:19:76:68:d9:bf:f8:8d:c7:8b:aa:
e3:cc:df:4f:38:c3:d6:1f:9d:67:08:a3:17:f3:c8:67:e1:c2:
04:fa:f0:5d:ea:15:da:5c:6d:c4:ae:7d:8e:52:be:53:e9:55:
30:b1:e4:f8:22:b6:f7:f2:ed:68:e0:20:56:54:00:96:cf:67:
53:8f:ba:68:48:ca:f5:1b:4d:a3:e2:e6:b0:37:cc:2e:7a:32:
70:21:71:ed:1b:ee:d4:22:84:ee:24:53:08:ae:30:b6:9e:a7:
91:18:4d:95:64:bc:95:b4:3a:8b:75:ab:d8:87:4f:3e:dc:f0:
1d:4c:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:40 2026 by rpki-client