This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SJCbiUbgv5susq1GaW2HpEjJv6A.roa
File: SJCbiUbgv5susq1GaW2HpEjJv6A.roa (raw, json)
Hash identifier: zSj+CLJF+0qywwld7HV0Ky6gY0KFZASxnIFCiElN4nM=
Subject key identifier: 48:90:9B:89:46:E0:BF:9B:2E:B2:AD:46:69:6D:87:A4:48:C9:BF:A0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019B7BA49840BB7541ED1AA0CED2619AE078
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SJCbiUbgv5susq1GaW2HpEjJv6A.roa
Signing time: Thu 01 Jan 2026 22:19:02 +0000
ROA not before: Thu 01 Jan 2026 22:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56915
IP address blocks: 185.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:98:40:bb:75:41:ed:1a:a0:ce:d2:61:9a:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 22:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48909b8946e0bf9b2eb2ad46696d87a448c9bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:41:8e:8f:4b:ef:b5:44:3d:3e:7f:d9:8e:
3b:18:c0:a8:86:1f:be:d6:0f:ca:2d:08:9f:65:9f:
27:b2:2a:25:51:5a:b5:c8:aa:1c:2a:40:2f:7d:b8:
ed:ed:a0:e3:37:d6:5f:dd:8a:ba:7e:51:cb:58:dd:
2c:68:bc:51:83:88:5a:48:99:e4:5f:b9:87:6e:9a:
fd:fc:bd:7c:95:22:f4:27:b0:0e:1c:2b:3b:36:6b:
cb:bc:28:e5:a7:61:53:f2:d8:b2:d6:4f:93:fd:8b:
73:12:ee:d2:a3:3a:c9:8d:8c:0b:a1:ba:71:90:e4:
81:03:cb:5a:53:78:1c:2f:79:a8:99:c6:9e:19:dd:
97:2a:1a:63:76:1a:f5:95:b4:6b:f7:bd:aa:49:29:
50:2a:84:69:34:1f:1c:ea:62:46:83:92:bf:46:0b:
95:1f:46:76:4f:82:84:71:71:1e:5d:5e:54:0a:f6:
97:3d:95:36:b8:20:45:bf:76:8f:1a:dd:34:f9:f6:
38:59:d3:d6:a1:34:f7:06:96:f7:a4:33:0f:6a:6c:
14:96:43:f5:13:e5:4e:74:a1:78:76:59:69:bc:22:
af:2f:c2:ce:12:4b:25:4b:fb:20:40:75:08:29:d3:
55:29:8e:38:aa:3d:0d:8a:a2:29:4c:8e:67:ab:f2:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:9B:89:46:E0:BF:9B:2E:B2:AD:46:69:6D:87:A4:48:C9:BF:A0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SJCbiUbgv5susq1GaW2HpEjJv6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2b:41:31:5f:32:1e:e6:3f:11:06:69:85:0c:35:77:8e:09:
d9:eb:8a:62:d8:7f:9c:10:aa:29:77:b1:41:ef:f0:92:03:e3:
c0:86:37:ae:ec:88:8b:0d:6d:7e:b4:63:13:e0:1c:5a:9d:24:
46:55:46:54:5b:21:b8:37:4a:6a:6f:5e:d3:90:41:54:68:57:
a1:58:db:85:b7:55:a9:19:ed:8b:01:95:d4:49:6e:05:50:11:
ed:fb:8d:ba:cc:2f:c8:57:93:dd:ff:59:1a:98:c7:e7:7b:16:
7c:97:42:54:0c:bf:e6:3f:3a:fe:27:02:37:e9:97:11:72:ff:
33:fa:8b:51:10:24:48:7e:42:bf:f4:a4:e5:dc:c8:66:b5:36:
13:ee:60:83:94:91:f5:bb:67:a2:64:9a:f4:8f:ea:3c:08:40:
c8:cf:70:a4:87:fb:bc:ed:c4:8a:85:86:7c:7b:92:b2:25:55:
37:84:2f:a5:69:3f:ce:7b:7e:c1:43:31:81:66:1e:ca:84:72:
89:73:49:00:4e:29:7b:ef:20:61:4e:e9:94:aa:5d:9b:d0:ec:
38:9a:0c:56:97:bb:4a:3e:21:7b:96:78:c3:93:38:2e:98:ec:
d5:1c:c3:c2:08:77:42:99:0e:76:e8:04:1c:eb:89:de:9b:79:
90:b9:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:22 2026 by rpki-client