This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa
File: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (raw, json)
Hash identifier: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=
Subject key identifier: 25:60:80:7E:38:E1:E7:3B:0C:F3:D1:21:4F:92:41:06:91:C9:9B:6F
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019B77C669007964EC1353E751280748063E
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa
Signing time: Thu 01 Jan 2026 04:17:30 +0000
ROA not before: Thu 01 Jan 2026 04:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14907
IP address blocks: 193.46.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:69:00:79:64:ec:13:53:e7:51:28:07:48:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Jan 1 04:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2560807e38e1e73b0cf3d1214f92410691c99b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:5e:00:d1:a2:e3:15:04:2f:e3:54:9d:3b:
d7:44:13:fb:7c:90:a9:f7:85:a4:6a:b0:d5:0f:a0:
2f:d9:30:55:e0:0f:da:51:c3:25:3c:f8:f0:9c:8e:
2e:db:89:67:c7:0d:9f:7c:8d:fb:d7:22:f8:c8:d8:
74:63:68:e0:72:f4:c8:ce:e0:55:9b:31:d6:d2:d0:
33:8a:48:79:5a:c8:38:b7:c6:90:2d:8b:36:dc:6f:
f6:e2:14:d1:be:92:67:96:d9:6b:be:39:92:b0:12:
5a:de:f5:f6:45:01:eb:89:fd:67:56:99:5f:c6:52:
c4:a5:40:04:37:1a:71:a1:fa:21:57:1b:52:8a:51:
d6:e1:36:ba:ab:6c:75:65:0e:76:22:da:c0:cd:0a:
78:68:2a:dc:9e:76:9e:46:74:94:61:5f:88:d8:63:
92:3f:9b:cd:81:44:11:fe:14:80:bf:60:44:20:27:
0d:44:55:fb:ea:b6:fc:cc:56:f6:63:b1:6b:55:ad:
a5:07:aa:c1:24:98:d4:84:f6:be:36:87:33:ce:df:
5b:c3:86:6b:70:4b:fc:75:ff:1e:42:1f:ea:da:7c:
d0:89:27:17:00:2c:f5:f6:0c:ba:bb:b9:94:51:a0:
4d:bb:5b:8a:27:c4:eb:0e:77:0e:27:ba:4a:d0:8c:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:60:80:7E:38:E1:E7:3B:0C:F3:D1:21:4F:92:41:06:91:C9:9B:6F
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/JWCAfjjh5zsM89EhT5JBBpHJm28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.90.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ae:9c:0a:08:b7:58:80:14:3d:02:ee:64:29:39:1f:65:de:
dd:2e:ea:b8:84:ee:a4:9a:58:d4:e4:0b:dc:df:1f:92:43:de:
58:54:b8:56:8b:9d:e1:6c:b9:39:6d:59:c9:0d:d6:55:7a:d9:
f9:ff:5f:85:98:3c:6f:e8:99:ee:8b:63:e4:c1:28:e4:1b:0a:
05:21:65:d9:d1:1e:af:3b:13:c2:6a:a5:f9:a4:6b:b5:aa:6e:
e8:53:49:84:d3:e0:76:e8:5a:49:84:49:48:4b:bb:ab:81:ed:
10:b2:0a:8a:6c:97:14:8c:c8:a6:8f:f1:5c:6b:4b:88:c1:49:
82:ac:e4:77:b3:fc:66:93:ce:36:98:07:e7:f7:c5:5f:08:5c:
aa:df:52:d2:2b:5b:8d:4b:09:af:e9:9f:b4:fe:3b:c4:9b:7b:
ae:9f:9a:56:87:7d:5f:4e:df:e4:74:42:b5:0b:2f:b8:5a:4f:
21:ea:7e:53:bb:88:ce:fa:0b:10:ba:a3:51:bf:0d:23:b6:53:
f9:af:ee:ce:5b:c1:6b:16:92:97:5c:04:f1:88:0a:c2:44:bc:
92:ea:21:74:ba:ae:c7:8f:fc:55:75:07:db:b3:79:fc:f8:9a:
07:76:cd:a3:9c:90:e8:1c:da:86:51:c2:c9:47:f7:02:df:cd:
86:21:34:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xmkAeWTsE1PnUSgHSAY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm
N2ZlMDIwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTYwODA3ZTM4ZTFlNzNiMGNmM2QxMjE0ZjkyNDEwNjkxYzk5YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3heANGi4xUEL+NUnTvXRBP7fJCp
94WkarDVD6Av2TBV4A/aUcMlPPjwnI4u24lnxw2ffI371yL4yNh0Y2jgcvTIzuBV
mzHW0tAzikh5Wsg4t8aQLYs23G/24hTRvpJnltlrvjmSsBJa3vX2RQHrif1nVplf
xlLEpUAENxpxofohVxtSilHW4Ta6q2x1ZQ52ItrAzQp4aCrcnnaeRnSUYV+I2GOS
P5vNgUQR/hSAv2BEICcNRFX76rb8zFb2Y7FrVa2lB6rBJJjUhPa+Noczzt9bw4Zr
cEv8df8eQh/q2nzQiScXACz19gy6u7mUUaBNu1uKJ8TrDncOJ7pK0IyhLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVggH444ec7DPPRIU+SQQaRyZtvMB8GA1UdIwQY
MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt
ZDVhNzg1NTE3YmJmLzEvSldDQWZqamg1enNNODlFaFQ1SkJCcEhKbTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm
LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5aMA0G
CSqGSIb3DQEBCwUAA4IBAQBGrpwKCLdYgBQ9Au5kKTkfZd7dLuq4hO6kmljU5Avc
3x+SQ95YVLhWi53hbLk5bVnJDdZVetn5/1+FmDxv6Jnui2PkwSjkGwoFIWXZ0R6v
OxPCaqX5pGu1qm7oU0mE0+B26FpJhElIS7urge0QsgqKbJcUjMimj/Fca0uIwUmC
rOR3s/xmk842mAfn98VfCFyq31LSK1uNSwmv6Z+0/jvEm3uun5pWh31fTt/kdEK1
Cy+4Wk8h6n5Tu4jO+gsQuqNRvw0jtlP5r+7OW8FrFpKXXATxiArCRLyS6iF0uq7H
j/xVdQfbs3n8+JoHds2jnJDoHNqGUcLJR/cC382GITRf
-----END CERTIFICATE-----
Generated at Sun Jan 11 08:35:58 2026 by rpki-client