This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa
File: JFLXszgtKWNB8UXX7n6ocqRtZzs.roa (raw, json)
Hash identifier: cE8sRkhHErz5b5DWjzqzoNNykqnd7My1UzU7NgMicdM=
Subject key identifier: 24:52:D7:B3:38:2D:29:63:41:F1:45:D7:EE:7E:A8:72:A4:6D:67:3B
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 019B7758811D15C662F39BD41FF28FD95FA8
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa
Signing time: Thu 01 Jan 2026 02:17:27 +0000
ROA not before: Thu 01 Jan 2026 02:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62344
IP address blocks: 91.216.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:81:1d:15:c6:62:f3:9b:d4:1f:f2:8f:d9:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jan 1 02:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2452d7b3382d296341f145d7ee7ea872a46d673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:31:d4:f7:63:ad:90:0d:e5:1f:0a:49:77:
d2:ce:80:a9:7a:9c:91:33:dc:1e:42:7b:82:47:68:
7f:51:9c:66:f8:64:3a:93:5d:b5:a3:eb:15:83:8f:
32:d0:2e:17:29:18:88:07:b4:92:92:53:88:ae:eb:
c4:3b:ec:5e:d0:01:09:d8:2c:50:6d:8e:cb:41:97:
8e:c4:4b:02:f7:7f:5f:70:e3:cc:b2:27:a9:a1:f5:
b2:a7:be:ce:64:1d:3b:25:c0:03:b7:23:40:42:da:
c2:f6:31:3f:b2:9c:99:4b:d0:83:a7:6e:0a:0a:d4:
88:64:22:0e:84:78:fd:97:55:71:eb:2e:42:99:e2:
4e:ef:ff:d2:82:25:73:26:39:0a:44:dc:15:0d:3d:
46:23:1e:55:6d:58:ec:a8:1c:82:1e:a2:a4:19:1d:
db:72:05:8e:94:9e:40:f1:38:1d:4f:69:30:c1:eb:
7f:10:3d:a8:e2:44:71:25:70:f6:3b:e6:ad:71:c0:
ef:bb:0a:69:12:bd:28:10:6c:5d:73:14:d7:05:90:
ff:80:53:f3:d0:79:11:7e:8f:d8:3f:4f:ce:4a:55:
62:14:0b:bb:69:f8:0a:8e:51:6e:d8:34:9a:16:4a:
56:ba:65:f2:4e:6d:f3:ba:77:e7:c0:de:a4:67:a9:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:D7:B3:38:2D:29:63:41:F1:45:D7:EE:7E:A8:72:A4:6D:67:3B
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/JFLXszgtKWNB8UXX7n6ocqRtZzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c0:bc:30:3e:93:83:72:bb:62:e8:2e:32:48:d7:14:97:cf:
49:3e:17:7f:f7:fa:b3:69:72:a7:9d:c7:96:20:bd:43:ed:d2:
a6:1a:b6:0a:17:32:b1:37:ae:45:b6:58:08:6f:61:16:a9:fd:
7e:66:b6:ab:0b:b8:4a:59:66:83:a1:46:c5:5c:3a:b7:cc:28:
f0:ca:07:bc:1e:9e:46:75:0d:01:66:38:96:0a:23:ba:b2:e7:
aa:82:79:51:71:71:0c:1d:80:4d:ce:a1:a7:f9:e0:16:cd:da:
18:26:58:31:8d:19:70:3f:d8:d3:65:29:ef:9a:d6:53:06:fa:
70:fc:4e:be:24:8d:86:f2:92:d9:8b:44:25:32:c0:16:fd:d2:
26:23:f5:b5:51:ce:c7:14:10:cb:21:73:e0:a4:dc:f2:6b:ad:
7f:e3:bd:cb:47:2e:a2:9c:67:71:2f:f3:2a:3c:37:b2:30:64:
74:85:fa:1b:d2:a9:72:8a:88:ef:21:b1:f4:4e:7f:8f:ff:d8:
ea:e0:2d:21:64:d6:98:a6:1d:0e:0c:22:09:6c:28:f0:37:93:
d2:b4:67:9a:78:73:77:9e:36:c4:92:e3:f5:c0:d6:72:53:39:
75:ee:14:25:93:9c:ae:ed:a4:be:78:a1:04:d4:f0:28:48:8e:
d4:9e:8e:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WIEdFcZi85vUH/KP2V+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YmIzNzBiMGM5YTA2ZmQ4MmNiNzEwMGQ5MDM4NTliMDlm
NTAzMzMwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUyZDdiMzM4MmQyOTYzNDFmMTQ1ZDdlZTdlYTg3MmE0NmQ2NzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRYx1PdjrZAN5R8KSXfSzoCpepyR
M9weQnuCR2h/UZxm+GQ6k121o+sVg48y0C4XKRiIB7SSklOIruvEO+xe0AEJ2CxQ
bY7LQZeOxEsC939fcOPMsiepofWyp77OZB07JcADtyNAQtrC9jE/spyZS9CDp24K
CtSIZCIOhHj9l1Vx6y5CmeJO7//SgiVzJjkKRNwVDT1GIx5VbVjsqByCHqKkGR3b
cgWOlJ5A8TgdT2kwwet/ED2o4kRxJXD2O+atccDvuwppEr0oEGxdcxTXBZD/gFPz
0HkRfo/YP0/OSlViFAu7afgKjlFu2DSaFkpWumXyTm3zunfnwN6kZ6lm7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRS17M4LSljQfFF1+5+qHKkbWc7MB8GA1UdIwQY
MBaAFHm7NwsMmgb9gstxANkDhZsJ9QMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYt
NTNmMjVkNDM2ZTJjLzEvSkZMWHN6Z3RLV05COFVYWDduNm9jcVJ0WnpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYtNTNmMjVkNDM2ZTJj
LzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9iCMA0G
CSqGSIb3DQEBCwUAA4IBAQBTwLwwPpODcrti6C4ySNcUl89JPhd/9/qzaXKnnceW
IL1D7dKmGrYKFzKxN65FtlgIb2EWqf1+ZrarC7hKWWaDoUbFXDq3zCjwyge8Hp5G
dQ0BZjiWCiO6sueqgnlRcXEMHYBNzqGn+eAWzdoYJlgxjRlwP9jTZSnvmtZTBvpw
/E6+JI2G8pLZi0QlMsAW/dImI/W1Uc7HFBDLIXPgpNzya61/473LRy6inGdxL/Mq
PDeyMGR0hfob0qlyiojvIbH0Tn+P/9jq4C0hZNaYph0ODCIJbCjwN5PStGeaeHN3
njbEkuP1wNZyUzl17hQlk5yu7aS+eKEE1PAoSI7Uno6t
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:10 2026 by rpki-client