This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/JXguqTWTZJXOx7wR4QzL1WTD3w0.roa
File: JXguqTWTZJXOx7wR4QzL1WTD3w0.roa (raw, json)
Hash identifier: by9aF7KEg8z9kfigzE6BcO3FIwfxJ5MTT0jDESZsK+s=
Subject key identifier: 25:78:2E:A9:35:93:64:95:CE:C7:BC:11:E1:0C:CB:D5:64:C3:DF:0D
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 019B77589466994FB6C1A17DD8F8C133198F
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/JXguqTWTZJXOx7wR4QzL1WTD3w0.roa
Signing time: Thu 01 Jan 2026 02:17:32 +0000
ROA not before: Thu 01 Jan 2026 02:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198817
IP address blocks: 91.236.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:94:66:99:4f:b6:c1:a1:7d:d8:f8:c1:33:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Jan 1 02:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25782ea935936495cec7bc11e10ccbd564c3df0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:cc:3b:da:ab:e4:7d:a6:9e:68:fa:f0:e2:
fb:84:ae:86:bd:ce:55:fe:6c:4a:64:54:85:1a:c1:
d4:e2:7c:28:ae:ca:a3:58:db:bc:97:34:46:07:d2:
47:6d:28:a0:a2:27:12:d9:35:66:33:53:5a:e6:1c:
54:8c:07:0c:fc:3f:e0:08:23:fc:09:4f:11:98:78:
e6:7c:2b:de:79:19:03:6e:c9:14:99:0e:b1:f3:53:
37:37:1e:86:0f:9f:77:d0:c7:20:29:4e:3e:fa:ce:
4f:4b:9d:8c:b3:a5:dd:b0:4d:ff:18:d5:92:6e:79:
21:c9:6d:a0:64:a1:4b:fe:02:44:ce:94:97:f2:7f:
e5:56:3b:e3:9f:15:ea:0f:a3:e1:1d:f5:4e:d7:8b:
6b:65:b6:c9:b9:75:be:73:10:1b:5e:00:0b:89:be:
07:de:a3:98:f5:7f:ed:25:b5:5a:ed:a4:3a:92:12:
b3:56:e8:1f:97:07:99:9c:15:35:78:3b:32:d4:6d:
46:0a:cd:f5:56:84:bd:42:35:d7:66:17:2e:05:50:
3a:4f:57:76:cb:1b:e2:1f:16:6c:1c:da:5d:15:a0:
d7:92:b3:70:e4:f8:e3:c3:42:10:e8:71:3e:51:43:
79:6e:b5:43:5d:a2:89:6b:f5:b5:b8:08:67:10:b7:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:2E:A9:35:93:64:95:CE:C7:BC:11:E1:0C:CB:D5:64:C3:DF:0D
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/JXguqTWTZJXOx7wR4QzL1WTD3w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d8:2d:25:55:22:e7:5b:8e:3a:f9:4d:78:54:48:b5:fb:a0:
61:ab:eb:b4:30:58:b3:4a:af:27:aa:af:0d:2c:91:e0:f8:3a:
ed:5b:1c:b3:12:91:0c:a5:18:90:51:8e:42:86:3f:76:3a:ef:
38:cd:d7:ed:7d:50:fd:50:83:5c:55:7d:17:fc:d5:04:0f:8a:
5c:00:f0:a6:38:21:62:22:47:30:dc:ae:f3:30:63:4a:c2:9f:
ea:62:da:90:ce:88:0e:1a:09:63:04:9a:61:81:ac:8e:fd:48:
01:cc:78:d1:e0:2d:01:14:9b:11:e9:08:3a:58:b8:68:87:a5:
96:6a:8f:9f:be:f4:3a:df:a6:f4:04:52:66:31:42:4b:f9:a1:
eb:45:20:68:2d:76:ff:77:d3:a7:74:bb:3e:1d:65:82:bb:d5:
62:aa:3d:ac:8f:b1:01:4e:b0:c1:8e:a5:cf:58:56:84:fe:15:
c9:00:9d:7d:2a:93:38:8f:81:10:a5:97:7a:1e:92:96:9c:24:
aa:ac:f7:34:6e:8b:fd:66:78:17:e5:02:7a:97:b5:81:50:95:
c5:71:83:8c:83:05:91:e5:ff:d3:5e:f8:8d:c2:50:25:50:26:
33:80:88:fc:fa:4a:18:93:55:ce:15:45:14:0b:c1:dc:52:d5:
8e:70:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:28 2026 by rpki-client