This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/jnbKsQGegNxjdm1zgvtf-2y2JHU.roa
File: jnbKsQGegNxjdm1zgvtf-2y2JHU.roa (raw, json)
Hash identifier: f0JFyB2CkMNujvorViUmIgNxI65wDl2h0L0eKcz8mXU=
Subject key identifier: 8E:76:CA:B1:01:9E:80:DC:63:76:6D:73:82:FB:5F:FB:6C:B6:24:75
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019B7C128992ACBD231E584BFC7FB11F7EBF
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/jnbKsQGegNxjdm1zgvtf-2y2JHU.roa
Signing time: Fri 02 Jan 2026 00:19:08 +0000
ROA not before: Fri 02 Jan 2026 00:19:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48708
IP address blocks: 185.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:89:92:ac:bd:23:1e:58:4b:fc:7f:b1:1f:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jan 2 00:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e76cab1019e80dc63766d7382fb5ffb6cb62475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:9c:1e:55:0e:ba:04:37:6a:81:55:57:f9:
78:d2:dd:56:ef:19:da:64:2c:c8:bc:7d:7c:04:0d:
2d:3f:11:0e:61:db:ea:dc:07:11:91:57:4e:13:37:
21:c8:44:6e:c3:82:d3:5b:a9:65:ed:46:11:6e:ab:
6a:5f:7b:c8:e8:4d:7a:2a:f5:cd:68:ea:0b:65:31:
85:05:71:d3:54:cd:71:11:05:23:a1:42:11:75:f3:
bd:41:8e:82:10:e3:a2:c0:fa:03:4f:89:56:da:90:
ad:96:a4:35:3a:07:82:1d:ea:00:3c:f2:c9:fc:ab:
f6:60:2b:1b:11:ba:bf:fb:3c:f4:81:d0:a1:98:50:
bd:fc:e3:34:54:2a:1c:68:9d:94:3e:34:1a:9a:d1:
ba:8c:24:17:f2:9f:b7:1b:1c:25:a3:06:f5:2a:cb:
95:7a:1e:6a:66:cb:5b:aa:38:e5:04:30:a6:74:71:
96:f0:6f:f4:23:b8:09:9a:82:e7:80:da:fa:f8:50:
fc:ce:14:7f:6c:cb:92:5b:0e:aa:85:0f:5b:9e:7d:
6b:6e:35:09:db:d2:e0:e9:f9:a7:46:dc:ac:7b:bd:
00:f4:59:88:d4:9c:1a:3f:4b:90:04:c0:71:d5:47:
bf:eb:2f:62:4e:46:b5:8f:dc:6d:da:6d:3c:4c:e5:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:CA:B1:01:9E:80:DC:63:76:6D:73:82:FB:5F:FB:6C:B6:24:75
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/jnbKsQGegNxjdm1zgvtf-2y2JHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.79.0/24
Signature Algorithm: sha256WithRSAEncryption
54:af:da:74:5e:94:38:2d:15:87:5b:6d:43:1a:fe:eb:e2:72:
f1:ba:1f:07:ed:47:4f:b0:b3:ec:9a:57:66:be:10:4f:ac:ce:
35:38:82:5d:ca:ab:69:96:69:3a:b2:34:26:9b:7c:8a:c2:cc:
f6:56:85:00:fa:64:93:18:27:a6:b5:97:07:32:fc:af:07:ca:
53:85:d0:07:dc:b8:23:92:04:cb:86:88:7b:08:d8:6c:bd:56:
2f:10:3e:f1:00:bc:d8:d7:cb:d8:5f:6e:40:1e:d4:7a:d7:b9:
fc:51:f4:3f:33:44:d3:57:3d:48:80:a7:a4:88:bb:6e:dd:e4:
65:d5:86:6e:1d:56:ed:70:4d:30:8f:11:c4:9d:b5:a6:7e:51:
fc:a2:af:9d:b0:c7:f9:9f:be:ea:02:75:c2:ee:69:7d:15:12:
09:d1:58:fe:ac:55:19:89:89:e6:7c:6b:80:1f:b6:f2:c9:94:
27:d8:db:c9:d0:f4:db:09:43:c6:c0:e0:3a:bd:09:f5:38:24:
3c:a1:72:28:a9:18:22:be:87:db:d2:1d:5c:96:30:c4:96:96:
2c:cb:0c:f5:4a:ff:f0:ae:15:a4:f3:a1:9e:3d:36:bb:ad:42:
c8:e0:7c:4b:87:9e:30:00:9f:2d:42:ce:2d:49:94:da:aa:55:
78:64:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:21 2026 by rpki-client