This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSt-4GucVoqsAtGOSSSl0_UBioA.roa
File: jSt-4GucVoqsAtGOSSSl0_UBioA.roa (raw, json)
Hash identifier: fg/lKyfI06DtU7gsWjM36eKS8v60YcoB/Rpw/X0sAxE=
Subject key identifier: 8D:2B:7E:E0:6B:9C:56:8A:AC:02:D1:8E:49:24:A5:D3:F5:01:8A:80
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019B78A249FBA30617F13B07FDF2A1B9B353
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSt-4GucVoqsAtGOSSSl0_UBioA.roa
Signing time: Thu 01 Jan 2026 08:17:40 +0000
ROA not before: Thu 01 Jan 2026 08:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 212.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:49:fb:a3:06:17:f1:3b:07:fd:f2:a1:b9:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jan 1 08:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d2b7ee06b9c568aac02d18e4924a5d3f5018a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:03:96:62:40:03:51:99:cc:d7:d2:c0:bd:
03:7a:99:f7:5e:ad:0f:2d:9b:a9:da:d9:c0:62:45:
07:fb:16:9d:06:53:40:48:45:a4:5e:3b:1b:15:93:
fb:bd:ed:4c:d7:83:60:a0:db:3c:e9:c6:61:1e:bd:
93:d9:58:90:51:82:17:8b:36:60:a6:61:b6:f5:92:
ae:93:8e:ed:53:fa:8f:1b:e5:75:97:3a:29:b4:4a:
48:16:a4:df:1c:eb:c7:41:b6:65:34:87:a9:f9:31:
d5:0c:0d:40:8e:f7:32:1a:de:f7:a5:25:3f:d8:20:
64:54:96:15:e3:2c:b4:60:2c:67:75:95:8b:80:bd:
3a:0c:d3:e0:85:5f:e0:30:de:93:ec:d7:80:86:6b:
ce:d0:2f:11:84:4d:f8:86:f7:6e:7c:df:16:cb:e5:
9c:45:36:85:c7:da:2f:dd:c1:20:30:c0:6e:87:5a:
28:52:ee:4c:ec:48:5a:d4:51:2c:6a:23:bd:90:34:
71:2c:f9:9b:f8:7d:b6:cf:6c:98:ff:dc:0d:1d:e5:
37:54:80:f9:a6:31:8a:0d:76:23:30:cf:1c:54:f1:
bc:bb:7d:2a:de:02:e8:aa:4c:2e:85:b0:49:fb:41:
5b:8d:e9:7f:c6:55:d0:17:3b:12:2b:a8:d0:68:f0:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:7E:E0:6B:9C:56:8A:AC:02:D1:8E:49:24:A5:D3:F5:01:8A:80
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/jSt-4GucVoqsAtGOSSSl0_UBioA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.255.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e3:a1:26:39:50:1e:2f:74:2f:39:eb:93:0b:f8:6e:7c:8f:
5e:f9:32:49:6e:5c:06:6e:cc:07:96:64:6d:28:b6:13:8a:98:
5e:94:b9:39:ec:d0:56:ee:b5:5f:33:d5:d2:19:2c:a9:ca:51:
32:ab:54:64:29:a9:fb:46:17:72:3e:57:ba:86:da:92:37:d7:
54:ab:35:60:72:5a:ac:da:69:ce:b8:a9:b5:0f:2b:8e:0d:0a:
f1:fe:b3:83:25:41:3b:3f:e2:ce:66:26:a6:fe:72:a1:9a:b4:
67:8d:4f:70:b2:05:35:f9:b2:73:ff:6a:db:4b:21:11:47:83:
7b:fe:d5:5c:cb:1c:3a:ee:0f:ad:63:37:b7:40:ed:ea:0b:88:
02:ea:57:22:b0:e2:e9:e9:35:c4:e5:f4:b1:5f:16:3e:b6:81:
36:e1:71:0f:be:bf:ab:26:87:19:c2:40:4a:8d:76:e6:fa:fb:
d1:bf:66:8f:a7:dc:2e:18:39:d9:aa:9e:76:74:07:3e:09:d6:
4e:93:a9:55:ca:52:a0:cc:6b:9a:cb:70:61:7d:64:9e:cc:9e:
5b:e2:25:a0:59:4c:48:79:6e:b6:7f:f6:6e:27:e0:02:4b:a0:
a7:04:af:80:e0:20:79:c6:c1:c9:b9:43:29:35:77:8a:35:93:
6e:11:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:14:53 2026 by rpki-client