This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa
File: j11RSuGZdP978fle7rZl9lYrLos.roa (raw, json)
Hash identifier: cc6p0W3mXzrkRQrbuZH3I0FsotddQvFdCECy4+DwMbA=
Subject key identifier: 8F:5D:51:4A:E1:99:74:FF:7B:F1:F9:5E:EE:B6:65:F6:56:2B:2E:8B
Certificate issuer: /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial: 019B79109A08889965F2A4CC5317F80E298C
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa
Signing time: Thu 01 Jan 2026 10:18:09 +0000
ROA not before: Thu 01 Jan 2026 10:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204439
IP address blocks: 185.248.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:9a:08:88:99:65:f2:a4:cc:53:17:f8:0e:29:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Validity
Not Before: Jan 1 10:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f5d514ae19974ff7bf1f95eeeb665f6562b2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:66:4d:0c:40:eb:ee:f5:f1:c6:50:e5:42:
71:fb:d0:d8:f2:11:d7:26:30:ac:1a:82:43:a5:f0:
f8:be:16:ab:db:f1:3c:5f:04:62:12:11:64:41:c8:
a3:5f:22:a2:a3:92:40:de:e9:e8:99:05:03:b8:37:
a8:69:ae:f3:79:9f:9d:f1:b2:08:3e:6c:4e:4b:bd:
3a:db:9d:34:a6:d7:ad:f9:7d:b5:54:33:0f:26:d9:
cf:a2:50:94:41:70:17:ae:c2:43:3b:ab:43:1e:a7:
59:ae:33:fb:a9:f3:f8:49:f9:51:a4:b1:03:fe:57:
58:b4:80:8e:54:41:b7:ad:dc:3c:cf:df:19:76:b1:
17:1e:53:9c:0d:6d:70:40:57:6b:99:88:b6:b0:c2:
c8:79:cf:7b:2c:0a:25:1e:45:d0:64:0c:90:ac:18:
df:a4:1e:7d:99:e5:52:bf:10:0d:af:de:9a:b3:cc:
95:b9:3d:a8:60:4c:ce:ac:1b:50:c3:0b:b7:99:b0:
82:d1:3f:e6:04:a5:82:cd:d8:49:b4:16:26:ff:82:
5a:2a:f5:9b:f5:eb:0d:7b:fa:23:14:a8:2b:46:4b:
2b:03:cf:38:52:c4:a3:ba:4b:58:42:08:46:26:2b:
0a:42:d5:9d:72:22:bf:26:4e:80:8d:25:86:a4:f1:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5D:51:4A:E1:99:74:FF:7B:F1:F9:5E:EE:B6:65:F6:56:2B:2E:8B
X509v3 Authority Key Identifier:
keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.216.0/22
Signature Algorithm: sha256WithRSAEncryption
82:00:27:9f:30:a9:e9:f0:42:27:7b:3a:b6:58:d6:e4:e7:f4:
22:63:0d:c3:f7:0f:22:b7:72:88:1d:c9:b8:2e:87:d1:5a:00:
26:39:41:52:f3:07:d1:ee:55:6b:55:80:43:2b:16:9b:3b:76:
26:2f:ce:1d:47:02:2d:35:0d:86:e0:37:e5:a9:38:cf:ee:56:
7a:96:cf:19:81:08:d1:42:ef:6f:e0:be:f3:93:16:bd:17:41:
59:97:22:56:37:29:91:80:b7:f6:55:e3:b0:f6:61:b1:aa:a8:
4d:f8:4f:49:22:e5:d6:d1:75:a2:2e:6b:e1:2b:49:76:5b:b4:
30:79:05:2b:d2:55:c2:aa:3c:ee:d5:66:6b:89:bf:3c:1d:6d:
52:19:54:c4:49:06:96:67:31:c6:3b:8a:a2:ad:1a:e5:2c:bc:
ae:7f:14:06:c3:db:80:82:4b:7a:68:92:b8:94:3e:e0:21:f2:
b8:e9:fb:27:27:33:65:8a:c9:de:72:87:c8:88:8b:ea:e2:89:
41:77:19:79:47:23:95:8e:8a:69:b8:dd:f3:54:85:c7:84:6c:
c0:29:c8:a1:7d:6c:9d:19:ba:f5:1c:27:9b:7a:69:7d:30:15:
df:9e:78:8e:3a:cc:af:80:c4:97:7f:f6:49:63:a9:15:b9:5f:
25:94:74:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EJoIiJll8qTMUxf4DimMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNGM1M2FiZDBkZGE2OGNhNjdmYzgwNjZiYzE2NWEyYjMy
ZGM4MmIwHhcNMjYwMTAxMTAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjVkNTE0YWUxOTk3NGZmN2JmMWY5NWVlZWI2NjVmNjU2MmIyZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2FmTQxA6+718cZQ5UJx+9DY8hHX
JjCsGoJDpfD4vhar2/E8XwRiEhFkQcijXyKio5JA3unomQUDuDeoaa7zeZ+d8bII
PmxOS7062500ptet+X21VDMPJtnPolCUQXAXrsJDO6tDHqdZrjP7qfP4SflRpLED
/ldYtICOVEG3rdw8z98ZdrEXHlOcDW1wQFdrmYi2sMLIec97LAolHkXQZAyQrBjf
pB59meVSvxANr96as8yVuT2oYEzOrBtQwwu3mbCC0T/mBKWCzdhJtBYm/4JaKvWb
9esNe/ojFKgrRksrA884UsSjuktYQghGJisKQtWdciK/Jk6AjSWGpPGYWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9dUUrhmXT/e/H5Xu62ZfZWKy6LMB8GA1UdIwQY
MBaAFGNMU6vQ3aaMpn/IBmvBZaKzLcgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgt
YWRkZWZhNjkxMWI5LzEvajExUlN1R1pkUDk3OGZsZTdyWmw5bFlyTG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZTk2YTMtY2U4OS00NDJlLWJjNDgtYWRkZWZhNjkxMWI5
LzEvWTB4VHE5RGRwb3ltZjhnR2E4Rmxvck10eUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufjYMA0G
CSqGSIb3DQEBCwUAA4IBAQCCACefMKnp8EInezq2WNbk5/QiYw3D9w8it3KIHcm4
LofRWgAmOUFS8wfR7lVrVYBDKxabO3YmL84dRwItNQ2G4DflqTjP7lZ6ls8ZgQjR
Qu9v4L7zkxa9F0FZlyJWNymRgLf2VeOw9mGxqqhN+E9JIuXW0XWiLmvhK0l2W7Qw
eQUr0lXCqjzu1WZrib88HW1SGVTESQaWZzHGO4qirRrlLLyufxQGw9uAgkt6aJK4
lD7gIfK46fsnJzNlisnecofIiIvq4olBdxl5RyOVjoppuN3zVIXHhGzAKcihfWyd
Gbr1HCebeml9MBXfnniOOsyvgMSXf/ZJY6kVuV8llHRb
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:54 2026 by rpki-client