This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa
File: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (raw, json)
Hash identifier: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=
Subject key identifier: 26:A6:D7:FC:F4:D4:8E:AD:BC:2E:A8:B5:8F:F9:27:09:54:B4:03:DD
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019B7EA4F35E8924F47A133210BC3F753089
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa
Signing time: Fri 02 Jan 2026 12:18:17 +0000
ROA not before: Fri 02 Jan 2026 12:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196651
IP address blocks: 195.246.244.0/24 maxlen: 24
195.246.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:f3:5e:89:24:f4:7a:13:32:10:bc:3f:75:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Jan 2 12:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a6d7fcf4d48eadbc2ea8b58ff9270954b403dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:4d:5e:17:07:33:d2:f1:36:39:df:c3:1b:
26:c0:54:eb:ea:08:fc:57:53:cf:f3:30:c4:92:f0:
93:5a:65:97:9e:ac:81:5e:97:8d:b4:26:4c:f1:7d:
19:4e:c2:98:df:cd:b3:a6:14:f2:cf:19:15:8d:16:
1c:75:1f:7c:0f:44:58:2c:b0:7c:5c:6f:00:ce:cd:
17:42:c7:27:62:9c:d2:17:d3:47:16:2a:9f:a6:53:
e2:32:68:76:09:36:91:95:45:75:f1:0d:69:d4:a4:
89:e6:60:ad:06:5b:53:cb:18:9d:ec:a2:e2:5f:0b:
ab:ca:6a:a0:ff:ac:24:22:70:f8:17:98:4e:5e:36:
93:8b:43:cf:dc:45:66:68:e6:05:b6:b0:2e:0f:50:
89:d1:e6:cb:2b:d4:f5:c8:74:14:26:a2:03:6a:c0:
bd:76:6b:c7:27:68:f8:88:1f:4f:43:3d:15:d5:ff:
7b:7f:10:c1:02:00:7f:14:f5:ed:19:0a:87:d7:14:
c8:e1:2d:e2:8d:9b:58:31:fb:96:7a:88:62:09:60:
0c:9f:2a:9e:27:fd:22:84:aa:1f:80:89:a8:ee:30:
86:a6:c7:16:f9:2e:e2:91:68:b5:1b:64:21:38:d7:
41:c1:2e:ee:42:68:84:c8:b4:23:0b:99:0f:76:22:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:D7:FC:F4:D4:8E:AD:BC:2E:A8:B5:8F:F9:27:09:54:B4:03:DD
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/JqbX_PTUjq28Lqi1j_knCVS0A90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.244.0/23
Signature Algorithm: sha256WithRSAEncryption
57:b9:ea:88:31:88:48:87:9e:88:fd:f7:20:76:2a:2b:12:30:
f6:e7:0f:77:07:1a:79:08:6c:05:11:4b:ac:85:20:7a:a5:39:
96:94:5f:0a:11:00:cc:6f:ff:a4:42:5a:9b:ad:d3:31:55:0b:
01:71:23:a6:96:13:b6:20:d4:f5:69:26:a1:70:85:64:a2:c6:
89:a1:72:cc:17:05:27:1d:50:98:eb:22:26:44:e5:b1:71:4a:
7e:9a:96:4d:d1:2b:27:9c:2b:10:d3:a2:82:66:50:af:82:e6:
c6:d3:f1:e5:18:7b:f4:5d:be:b3:24:c9:02:b8:1e:10:65:5e:
01:68:c8:7b:c1:f1:a0:bf:d1:6c:31:e2:80:40:93:b5:93:73:
82:c2:c8:5a:2b:db:8a:90:02:b7:51:67:23:eb:9d:b8:35:2a:
4c:08:c2:86:22:65:f3:c0:b5:b2:a7:e3:2d:af:9f:eb:b9:7c:
97:b9:8d:24:ba:c2:cc:d3:f0:ee:69:4b:66:88:d7:ec:84:ec:
10:1c:aa:21:e6:a9:a0:98:a3:c7:b1:58:dd:21:e5:8c:e8:c3:
f3:07:13:85:27:dc:39:b6:77:4b:4a:98:08:19:19:49:90:df:
b7:16:8c:33:49:d7:5f:64:b1:bf:dc:0c:53:cb:33:3c:27:54:
22:41:56:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:36 2026 by rpki-client