This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/jAnHcvp-J3jJ73LmJIPdJciy_zM.roa
File: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (raw, json)
Hash identifier: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=
Subject key identifier: 8C:09:C7:72:FA:7E:27:78:C9:EF:72:E6:24:83:DD:25:C8:B2:FF:33
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019B7EA749B5E2DE41FEDA92929963151DC0
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/jAnHcvp-J3jJ73LmJIPdJciy_zM.roa
Signing time: Fri 02 Jan 2026 12:20:51 +0000
ROA not before: Fri 02 Jan 2026 12:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39430
IP address blocks: 185.236.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:49:b5:e2:de:41:fe:da:92:92:99:63:15:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jan 2 12:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c09c772fa7e2778c9ef72e62483dd25c8b2ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:57:46:1a:91:63:78:97:c0:8f:83:1c:b8:
49:d7:34:21:b9:63:5e:17:82:a7:a1:17:b3:63:ed:
cd:c1:87:fb:b6:4a:55:7b:83:b6:e1:29:7b:72:15:
6f:3d:d7:ee:0f:b0:b9:4a:cc:e8:7a:7e:05:f6:9c:
f6:be:2c:4b:06:d7:73:ac:24:df:20:89:8b:9b:cf:
dc:c0:67:fc:16:22:82:50:36:dc:b1:0a:1d:56:88:
fb:0b:ef:14:f3:69:d6:9a:e3:14:40:54:ca:48:e7:
ca:07:11:f6:6d:b2:c9:3f:a7:94:10:6f:86:b8:40:
54:e7:1c:fa:31:e7:97:3a:71:1e:32:1c:ab:c5:6b:
9b:03:65:4f:d5:98:e2:be:0c:52:8c:a1:76:e3:36:
89:5d:fa:44:6e:b2:92:19:45:d7:b8:65:ca:37:06:
67:ac:b6:08:a8:22:70:4a:6b:92:2e:c1:4f:b3:8c:
4b:13:43:b2:02:d8:74:45:e2:2f:8f:01:45:3b:63:
48:64:11:dc:ed:ff:96:a9:8c:85:04:5f:f8:e6:5c:
9b:f9:4d:94:3e:c5:56:ea:c0:27:c5:31:fa:03:3a:
14:ad:71:70:c4:66:1a:29:0a:0c:25:98:7e:57:69:
b8:f6:f0:dd:71:49:f3:1a:51:1a:b5:da:16:4b:7c:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:C7:72:FA:7E:27:78:C9:EF:72:E6:24:83:DD:25:C8:B2:FF:33
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/jAnHcvp-J3jJ73LmJIPdJciy_zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:57:ea:d4:04:dd:b5:26:09:3a:c5:05:bf:f0:78:2d:08:95:
87:ab:7b:3c:2c:bf:f3:5d:0f:5e:56:37:1b:5a:dd:fc:ec:16:
7a:f8:38:55:0c:0c:a7:4f:cb:f9:fb:c8:02:78:8d:fd:e6:69:
1c:eb:33:6c:c7:c5:34:3b:18:a6:6b:ed:7e:a7:ed:56:94:2d:
19:6e:30:44:f2:7a:2c:6d:4c:75:dc:22:12:50:88:bc:7f:11:
6d:b4:3a:e1:c0:fe:cf:6a:6a:1f:3d:74:1f:a5:2c:6b:bd:cd:
73:31:45:3d:de:fd:27:71:0a:91:6c:05:91:21:2d:09:9a:dd:
51:a0:f3:a0:d6:0c:d8:e4:b0:37:3d:13:d4:4a:cd:df:fc:f4:
e0:b9:a9:f3:9b:f1:df:79:3c:68:76:a1:e7:bf:d3:f9:a0:db:
9e:de:e9:21:7d:06:24:e1:f7:83:5f:a5:a3:37:e7:d0:79:f6:
0b:d6:ed:cf:72:3e:ac:e2:6c:6c:8a:ec:9d:34:63:8a:c1:7d:
e2:b3:ed:a2:08:73:59:a5:21:5a:9b:be:e0:65:48:25:95:ec:
ac:f0:44:a8:ff:a1:a4:5b:cb:80:b4:76:2d:83:ca:73:24:32:
d3:10:da:8f:80:01:58:08:7d:d4:d1:00:ed:1a:66:85:b1:76:
10:2e:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:48 2026 by rpki-client