This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa
File: JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa (raw, json)
Hash identifier: fVzsbnVjjWl2LyjA+I2JSODFF87TDP7Iwxo6m2pjCvM=
Subject key identifier: 24:90:8E:D5:04:EA:F8:03:9A:51:BA:C0:F8:C9:14:A5:F7:42:D5:C1
Certificate issuer: /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial: 019B7DC967EBE448DAF1E625F9E754D52667
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa
Signing time: Fri 02 Jan 2026 08:18:29 +0000
ROA not before: Fri 02 Jan 2026 08:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24641
IP address blocks: 91.224.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:67:eb:e4:48:da:f1:e6:25:f9:e7:54:d5:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Validity
Not Before: Jan 2 08:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24908ed504eaf8039a51bac0f8c914a5f742d5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:eb:6a:97:d3:1a:5f:70:d4:a2:51:1d:c0:
1b:23:23:46:06:e2:a4:c4:e3:f7:4d:e8:27:a9:09:
2f:57:6c:39:0a:52:d3:5e:c3:d3:d1:0c:ff:a2:16:
15:2b:b4:d3:63:92:ce:83:10:51:95:c2:e5:ad:4b:
c8:49:d5:fc:3b:03:1f:05:8a:0d:11:2d:4d:f5:d1:
25:22:26:59:3d:6d:63:cf:aa:25:a7:ee:09:8c:f0:
53:b7:a3:be:b1:53:6a:03:8d:73:78:b0:29:c6:90:
11:b7:13:14:e2:17:1a:47:bf:52:9e:c5:31:f1:6a:
34:b0:ce:e4:c0:11:2d:98:f6:1a:16:ab:29:c1:de:
e4:04:6c:b6:ea:8c:3c:ae:b6:16:57:7c:04:a3:a1:
d0:77:c8:48:ba:c8:09:22:69:ad:d1:fd:d4:e6:0e:
1c:81:8d:66:4e:ca:ce:2b:62:f9:a6:a5:25:af:a7:
61:d8:d5:10:53:ce:ef:cf:c3:0e:d5:58:e4:64:be:
ea:34:3d:ae:e2:d5:e1:db:49:a6:1b:fc:b2:b9:18:
5c:11:56:70:2a:be:84:17:89:01:bb:60:c9:65:46:
37:6e:a2:1d:88:71:36:2c:fa:00:e2:94:f2:15:fa:
d2:36:66:7f:ca:24:d7:ac:da:ac:c3:0d:68:b4:e7:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:8E:D5:04:EA:F8:03:9A:51:BA:C0:F8:C9:14:A5:F7:42:D5:C1
X509v3 Authority Key Identifier:
keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:2d:d1:65:f0:55:25:51:b7:64:a7:f9:76:f4:03:90:38:5f:
61:69:39:98:21:71:01:5a:83:51:7a:46:ac:38:ab:a7:32:5f:
1c:cc:84:a1:c8:1f:06:b2:f3:6c:af:49:18:88:b8:b8:b9:82:
96:29:20:0e:0d:f7:e3:65:5a:08:23:6d:c3:ae:5a:19:6f:30:
ae:ba:47:d8:71:e2:d9:ea:6e:5e:45:d8:2b:9d:11:d3:d3:6b:
d9:97:64:db:7c:96:de:fb:df:0a:bc:38:f6:b9:29:ab:06:d4:
03:46:5c:e5:e8:37:03:b7:16:54:90:52:78:de:52:74:7b:7b:
68:e0:89:a0:6c:02:28:c1:18:c5:e0:d0:c0:21:21:fc:60:44:
ea:8f:6a:d3:10:26:5a:25:f2:00:2c:9c:26:f0:77:2c:ec:a1:
0f:04:f3:c4:45:55:db:c1:87:88:5c:68:a4:16:e9:f7:8f:b9:
d7:70:82:71:fd:b9:ab:fd:16:b0:6c:8e:b2:a5:b7:41:95:05:
d4:a6:b4:22:96:03:ee:88:63:a4:d2:dd:5c:ea:72:c5:c5:db:
98:17:40:4d:dc:bc:78:37:7b:fd:1f:f2:a8:06:7c:d1:23:1a:
58:26:b6:b4:0a:e2:76:a5:e9:95:dc:5a:20:67:45:6d:f4:e1:
39:34:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:07:10 2026 by rpki-client