This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa
File: jBkRahacrkLQQ23ac368F01j5WI.roa (raw, json)
Hash identifier: oyVpwXheCdqTwMT8mzJwnekjFyIeHBTmGLuRsWkI4Gs=
Subject key identifier: 8C:19:11:6A:16:9C:AE:42:D0:43:6D:DA:73:7E:BC:17:4D:63:E5:62
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 019B7D5B5DFE2F7C3B76A7391058DC420131
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa
Signing time: Fri 02 Jan 2026 06:18:18 +0000
ROA not before: Fri 02 Jan 2026 06:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14315
IP address blocks: 94.139.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:5d:fe:2f:7c:3b:76:a7:39:10:58:dc:42:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 2 06:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c19116a169cae42d0436dda737ebc174d63e562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:0c:e1:75:07:78:98:ac:76:70:9f:5a:55:
7f:1b:e9:20:45:5b:ec:a6:d8:25:db:a7:74:f1:6a:
67:44:ae:0c:18:66:90:8d:2b:bb:c1:22:9a:c0:d3:
fe:27:de:3f:97:16:ce:49:4b:95:c0:6c:af:26:4b:
5c:cb:ff:fd:f3:13:77:bb:9e:02:f0:87:03:c7:a7:
a5:34:c7:b3:29:53:d8:6e:de:c7:53:5b:3b:03:b7:
fe:dd:f3:7f:88:42:c2:43:cc:c4:ec:c0:fc:c4:a9:
ff:0f:04:29:24:99:95:84:45:c3:4d:21:76:48:3b:
d0:35:ff:4c:d9:45:60:6d:9a:f4:2b:13:66:27:2c:
b3:33:dc:34:11:cb:63:46:43:75:84:c2:84:b8:11:
7e:76:87:80:0c:16:12:34:7b:09:e3:6c:98:4f:09:
b3:f2:16:0f:8a:f7:64:07:eb:c6:3c:1d:2a:5b:bd:
16:b7:d0:51:5e:ea:df:ff:86:c9:52:16:26:20:b0:
ea:dc:cf:46:8f:3f:77:66:9c:b6:38:da:a6:f7:7b:
a6:41:ee:97:2c:f2:ed:52:76:be:e5:47:fc:95:7c:
31:cd:5d:40:a5:56:01:10:1e:3d:54:b9:a3:eb:15:
4e:1b:64:c8:10:0f:08:53:25:c7:2d:78:9f:c3:d5:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:19:11:6A:16:9C:AE:42:D0:43:6D:DA:73:7E:BC:17:4D:63:E5:62
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/jBkRahacrkLQQ23ac368F01j5WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.32.0/24
Signature Algorithm: sha256WithRSAEncryption
36:21:59:0c:c7:43:0d:17:06:11:d8:47:07:0b:cf:7b:0b:c5:
ef:49:2b:6a:a3:b0:8b:9f:4e:c9:2b:c5:71:ab:1d:4e:f5:6f:
9a:9d:ed:0b:f6:49:dd:77:78:3b:30:39:c1:b9:d4:45:fd:b4:
53:e9:d6:8f:af:43:75:ef:39:33:aa:1c:fd:0d:a8:8e:1b:3c:
c4:d2:44:52:0d:41:99:7d:e0:2b:12:5c:ea:95:ad:a4:ae:04:
41:82:63:f7:44:cb:a5:57:01:ce:22:55:ea:dc:8a:bd:af:98:
e8:c7:2b:7c:68:40:81:35:2b:53:2a:66:08:e8:db:6d:61:5c:
3a:b9:79:81:92:2e:b7:bc:dc:2c:f6:69:3e:b0:e7:54:5b:03:
3d:d4:1b:24:d1:8d:bf:f1:e2:56:82:87:4c:64:89:f3:a1:87:
2b:e2:29:d3:3e:12:42:42:1f:2b:ef:df:9b:f8:da:42:ef:8d:
11:74:24:1b:1d:76:67:d0:06:b2:c3:5a:2d:4e:ee:01:50:37:
b2:0d:77:fc:11:4f:58:86:57:3c:19:dc:9b:50:9c:82:55:16:
3c:fb:28:f2:5f:da:23:8c:88:44:be:14:79:26:e0:c8:72:c5:
cf:e2:71:6c:6e:e8:e2:6f:93:6a:45:83:30:e7:d6:b6:d5:99:
f8:a3:f5:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W13+L3w7dqc5EFjcQgExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjYwMTAyMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzE5MTE2YTE2OWNhZTQyZDA0MzZkZGE3MzdlYmMxNzRkNjNlNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zwM4XUHeJisdnCfWlV/G+kgRVvs
ptgl26d08WpnRK4MGGaQjSu7wSKawNP+J94/lxbOSUuVwGyvJktcy//98xN3u54C
8IcDx6elNMezKVPYbt7HU1s7A7f+3fN/iELCQ8zE7MD8xKn/DwQpJJmVhEXDTSF2
SDvQNf9M2UVgbZr0KxNmJyyzM9w0EctjRkN1hMKEuBF+doeADBYSNHsJ42yYTwmz
8hYPivdkB+vGPB0qW70Wt9BRXurf/4bJUhYmILDq3M9Gjz93Zpy2ONqm93umQe6X
LPLtUna+5Uf8lXwxzV1ApVYBEB49VLmj6xVOG2TIEA8IUyXHLXifw9Wn5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwZEWoWnK5C0ENt2nN+vBdNY+ViMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvakJrUmFoYWNya0xRUTIzYWMzNjhGMDFqNVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXosgMA0G
CSqGSIb3DQEBCwUAA4IBAQA2IVkMx0MNFwYR2EcHC897C8XvSStqo7CLn07JK8Vx
qx1O9W+ane0L9kndd3g7MDnBudRF/bRT6daPr0N17zkzqhz9DaiOGzzE0kRSDUGZ
feArElzqla2krgRBgmP3RMulVwHOIlXq3Iq9r5joxyt8aECBNStTKmYI6NttYVw6
uXmBki63vNws9mk+sOdUWwM91Bsk0Y2/8eJWgodMZInzoYcr4inTPhJCQh8r79+b
+NpC740RdCQbHXZn0Aayw1otTu4BUDeyDXf8EU9Yhlc8GdybUJyCVRY8+yjyX9oj
jIhEvhR5JuDIcsXP4nFsbujib5NqRYMw59a21Zn4o/Vb
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:54 2026 by rpki-client