This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa
File: JpOEIniBJHts2084NOqMHq98Ajc.roa (raw, json)
Hash identifier: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=
Subject key identifier: 26:93:84:22:78:81:24:7B:6C:DB:4F:38:34:EA:8C:1E:AF:7C:02:37
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019B7BA4B5C1CBB77BB95E7F6EED22493BDB
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa
Signing time: Thu 01 Jan 2026 22:19:10 +0000
ROA not before: Thu 01 Jan 2026 22:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 185.201.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:b5:c1:cb:b7:7b:b9:5e:7f:6e:ed:22:49:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Jan 1 22:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=269384227881247b6cdb4f3834ea8c1eaf7c0237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:0f:57:99:bf:d5:71:6e:51:a4:af:0e:63:
43:80:b3:d8:60:f3:17:d5:3d:c3:d2:53:ee:46:dd:
a2:40:ea:79:70:95:8c:bf:16:14:5a:13:2b:72:4e:
ee:c3:1b:17:e6:90:9e:f1:be:65:b5:af:19:29:da:
16:91:aa:db:fd:52:7c:c1:aa:68:d5:3b:c9:02:75:
eb:eb:fc:48:0f:61:69:75:07:d5:27:20:33:3f:4d:
a6:4e:c0:cf:8f:e1:d5:51:7f:f9:2e:ba:ee:52:19:
39:73:b0:d0:61:fe:97:47:a4:b2:1d:2d:c3:69:c9:
e1:8a:44:a5:6a:d5:10:b5:e1:72:49:3c:1d:18:e3:
51:1f:2a:d4:27:fb:b3:41:e3:25:74:cf:68:58:ee:
e8:98:17:19:38:0c:5c:60:11:18:36:8c:4b:fc:a8:
4f:f4:2d:85:fa:af:64:28:8d:ad:7c:41:34:d1:98:
50:97:85:76:c3:12:47:86:8f:ec:d6:32:e8:15:5c:
c0:22:24:94:1c:3c:ec:f2:79:79:a6:a1:cf:3c:73:
1a:00:cb:03:7a:0e:0c:47:7e:9a:e9:a7:5a:1b:fa:
01:1e:fc:5b:36:04:3e:f2:c0:95:77:88:d9:5a:c7:
8a:9a:9a:fd:de:ae:bf:09:af:3a:8c:85:d3:84:75:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:93:84:22:78:81:24:7B:6C:DB:4F:38:34:EA:8C:1E:AF:7C:02:37
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/JpOEIniBJHts2084NOqMHq98Ajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4b:eb:fa:de:33:62:f3:b1:1e:4a:a9:d7:60:97:6d:47:75:
10:12:3d:c3:6a:22:28:b4:92:d4:38:f9:1f:ca:c2:3e:ae:29:
8a:24:a8:9a:43:36:ab:9b:07:ab:78:67:b6:b1:43:b2:86:23:
18:66:24:9d:f0:a1:ff:41:a8:0b:b0:06:7f:4e:8b:08:cd:56:
6b:cf:ee:09:89:ad:b2:f5:8c:5a:c4:cb:6b:d7:1d:f0:af:a0:
92:5c:e2:c1:2f:0a:72:8e:c8:ed:8b:3a:48:e5:25:a5:1f:33:
a2:23:a6:5a:fa:f9:90:65:6a:01:4c:7d:8a:f9:35:b3:63:73:
94:40:ca:ef:21:0c:b9:b4:a1:54:90:f9:0d:5e:74:6c:8d:e8:
ad:06:01:ac:b6:3f:eb:57:13:2c:14:43:df:dd:d5:4e:b6:44:
f6:86:08:3c:cc:67:0a:e7:ea:d7:9f:22:97:9b:2f:11:af:06:
e5:8c:33:f7:37:13:15:4a:ef:ac:a9:5a:00:df:46:fc:0b:d9:
c6:02:bf:32:ab:9d:ea:44:9d:a4:1d:4f:d2:aa:0c:99:48:d0:
88:9a:72:4b:dc:e5:0e:54:b3:ac:aa:4d:22:62:1a:0c:e7:11:
71:a8:91:04:e0:c1:9e:44:53:e8:79:a1:45:17:bb:60:ec:26:
54:5d:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:23:12 2026 by rpki-client