This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/j2_V5BwB6zWowKkrqo3IR1AI3TY.roa
File: j2_V5BwB6zWowKkrqo3IR1AI3TY.roa (raw, json)
Hash identifier: v2GJYRFtHtKuk3djB+9NlbqHwSDbHuYB27XPregGwCU=
Subject key identifier: 8F:6F:D5:E4:1C:01:EB:35:A8:C0:A9:2B:AA:8D:C8:47:50:08:DD:36
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 019B7BA507B975D672C7AA8B995604F596E0
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/j2_V5BwB6zWowKkrqo3IR1AI3TY.roa
Signing time: Thu 01 Jan 2026 22:19:31 +0000
ROA not before: Thu 01 Jan 2026 22:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.168.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:07:b9:75:d6:72:c7:aa:8b:99:56:04:f5:96:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jan 1 22:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f6fd5e41c01eb35a8c0a92baa8dc8475008dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:d2:e1:e6:49:9c:25:38:3c:bb:f5:6a:fb:
72:8d:8c:01:93:10:68:03:45:a0:33:05:41:eb:a1:
9e:e7:4f:3e:7d:a6:f1:a0:c2:34:df:b0:dd:31:8f:
61:ee:0d:93:08:2d:87:08:83:1f:7d:77:88:62:b9:
96:94:22:41:d1:63:c4:e5:cc:b8:4d:54:c3:52:7c:
7e:b3:b6:8b:84:35:90:c4:5e:be:4c:07:96:9c:60:
19:d7:12:f9:3b:5f:79:25:9c:69:30:2a:48:8d:17:
ff:b7:76:b2:20:83:87:6f:94:85:4d:b4:52:79:e4:
37:b1:4b:44:1b:86:92:58:59:64:38:f5:30:75:9d:
e8:f5:56:23:28:28:ef:1a:bf:62:3b:fe:cc:73:24:
b9:fa:99:7e:d7:fe:a9:c4:c9:ea:c7:99:ac:f8:5d:
57:64:1e:1c:29:d1:02:0d:11:85:b9:3e:f2:c3:6d:
a1:13:bd:8c:7e:37:ca:5f:27:ba:e2:2e:42:80:1e:
5d:18:31:f3:28:7d:a5:74:4b:ab:ae:d5:5e:b9:82:
b0:23:3c:1a:d6:58:79:79:e7:08:a6:ca:07:3b:89:
7b:2d:0c:4f:81:db:59:ee:e2:88:ac:fd:72:25:2b:
8e:24:27:d7:9a:da:34:c8:5a:28:b5:9b:72:f1:65:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:D5:E4:1C:01:EB:35:A8:C0:A9:2B:AA:8D:C8:47:50:08:DD:36
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/j2_V5BwB6zWowKkrqo3IR1AI3TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.216.0/24
Signature Algorithm: sha256WithRSAEncryption
71:31:da:d7:8e:6f:84:82:18:41:01:c6:27:67:0e:48:12:d8:
00:13:d6:6b:f9:da:ac:7e:09:6d:d0:02:7a:2a:6e:00:a8:e5:
52:29:6a:62:03:13:9f:dc:5c:40:49:f0:ac:54:7b:d6:00:ef:
de:41:3e:96:ff:7f:9b:6c:0f:68:1a:ac:12:f1:11:f7:96:65:
f0:92:47:87:51:a9:3f:b4:69:e1:ce:76:22:b2:28:95:ed:7e:
57:a7:2d:e1:d9:b2:78:fd:27:d7:29:10:a5:77:76:31:03:a4:
25:78:08:a1:c6:d7:d8:c1:a3:a2:4e:1f:6b:ad:ae:b7:c7:f0:
bb:fc:76:e6:df:18:e5:7d:57:06:43:fe:66:6a:db:09:c1:df:
29:66:ae:cb:c4:5b:e9:f8:47:de:91:4e:65:6c:e6:38:07:1f:
36:0f:12:d2:00:9c:36:75:15:73:25:50:f0:5d:1a:22:c1:06:
09:c1:93:7c:86:6a:b3:89:dc:35:9e:39:06:1a:37:ce:78:db:
d0:3f:d0:95:4e:f1:73:0a:48:75:b6:b3:a2:c9:ae:dd:36:a1:
e2:89:1f:aa:ce:b6:60:9c:64:3f:24:8c:8c:1b:12:74:07:70:
d4:14:f0:97:1e:7d:32:d7:62:ad:d3:d7:85:5d:41:0d:6c:5e:
2d:5f:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:14 2026 by rpki-client