This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/JghQOiEDzpJycuTslNM8Zv_p_jY.roa
File: JghQOiEDzpJycuTslNM8Zv_p_jY.roa (raw, json)
Hash identifier: LAxiB3cO1subHRNY8UjJnx3IdDCMN2IQ7MrqfJcC4T0=
Subject key identifier: 26:08:50:3A:21:03:CE:92:72:72:E4:EC:94:D3:3C:66:FF:E9:FE:36
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019B7CED047B1BF4339630F440B1125AB2C7
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/JghQOiEDzpJycuTslNM8Zv_p_jY.roa
Signing time: Fri 02 Jan 2026 04:17:46 +0000
ROA not before: Fri 02 Jan 2026 04:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203348
IP address blocks: 2001:648:25e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:04:7b:1b:f4:33:96:30:f4:40:b1:12:5a:b2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 04:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2608503a2103ce927272e4ec94d33c66ffe9fe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:f2:9e:18:14:81:aa:1d:c4:12:44:66:06:
f6:ff:5a:c3:46:fd:6b:a1:a9:b2:78:69:e2:c6:77:
f7:b3:2c:7a:bb:e1:4b:a3:1a:dd:44:6a:a9:72:c1:
11:f8:48:3e:cb:06:e3:33:f6:0b:60:1a:99:53:ad:
5c:ae:2f:bb:10:5f:5c:89:c1:a9:68:12:a1:36:43:
07:c2:23:95:08:4d:ac:ab:45:32:9c:a2:77:31:74:
e0:43:10:af:21:85:5e:86:9c:9a:8e:57:26:3c:28:
a5:6e:ce:81:33:c9:c4:bf:95:8e:ec:c7:5a:14:37:
0d:87:7b:6f:d3:b5:b9:eb:93:28:a0:ec:f5:d3:6b:
5c:9a:dc:6e:69:ae:bc:a7:07:06:4e:cd:3b:f5:05:
e9:97:81:d9:18:a2:56:53:fa:eb:23:92:ef:28:9b:
d6:10:0a:8a:71:87:2e:dd:2a:71:31:f4:5f:ad:dd:
e0:88:39:d5:3f:64:27:08:c4:ab:a5:18:db:74:bd:
84:94:44:f7:f3:c8:e7:45:19:6e:10:de:95:ca:65:
c6:d4:0f:b2:64:d9:7c:3b:89:ff:6c:7c:c6:ac:82:
ff:91:05:2a:aa:0b:57:69:2b:21:cc:35:98:50:c4:
54:fc:fb:02:81:03:2a:61:84:be:c1:02:ce:fd:7d:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:08:50:3A:21:03:CE:92:72:72:E4:EC:94:D3:3C:66:FF:E9:FE:36
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/JghQOiEDzpJycuTslNM8Zv_p_jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:25e0::/48
Signature Algorithm: sha256WithRSAEncryption
98:16:50:9e:ae:31:0c:53:58:21:6a:84:41:18:09:0e:e8:59:
7c:97:41:cc:42:95:8a:6b:11:83:bd:20:83:42:fd:48:d6:5f:
56:ab:78:33:55:fa:5e:5d:06:a6:45:4b:dc:0e:32:99:1c:b0:
85:a1:de:ad:aa:e2:5b:31:88:67:fa:f4:25:b6:48:57:f2:a1:
90:49:fd:19:67:74:4d:ef:44:57:f2:1e:b5:54:86:62:a0:00:
9f:a5:23:49:f1:09:d6:51:e5:b3:83:d0:aa:4c:94:45:68:f6:
4b:f9:42:6a:f5:70:a6:d5:e7:f7:41:4f:09:7c:15:c3:1d:90:
f5:66:84:4b:f0:fe:5a:d3:8f:df:a7:97:6f:ff:4a:55:e9:90:
8b:ac:ff:94:ad:9e:cd:b2:30:f2:37:d3:ca:40:b5:06:1a:bb:
5b:75:88:a8:01:af:83:f1:0b:e6:9c:1f:d0:5a:9b:4a:c9:f2:
80:3d:f7:08:e6:70:44:c9:46:b8:a2:9a:02:71:2e:e3:8e:23:
2e:6c:dd:60:d6:a1:6c:ef:cd:31:fb:68:d7:a8:35:78:a5:10:
1f:9d:ef:15:46:74:f5:0e:27:66:28:79:eb:78:aa:3c:9e:92:
23:81:e4:06:9e:6c:44:b8:06:a2:ba:7f:ca:6f:4e:fa:22:54:
c6:cc:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:39:24 2026 by rpki-client