This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/JKtuYAZj6V_iBv09WZvX1K5boYU.roa
File: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (raw, json)
Hash identifier: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=
Subject key identifier: 24:AB:6E:60:06:63:E9:5F:E2:06:FD:3D:59:9B:D7:D4:AE:5B:A1:85
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 019B7C125A4309F53B5BC6499F57BE5244D5
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/JKtuYAZj6V_iBv09WZvX1K5boYU.roa
Signing time: Fri 02 Jan 2026 00:18:56 +0000
ROA not before: Fri 02 Jan 2026 00:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12637
IP address blocks: 93.157.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:5a:43:09:f5:3b:5b:c6:49:9f:57:be:52:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Jan 2 00:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24ab6e600663e95fe206fd3d599bd7d4ae5ba185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:af:c5:9c:06:65:d4:9a:03:9f:fc:94:79:
0d:92:43:2e:a9:96:c9:3c:44:97:c7:40:19:2d:94:
6b:9b:c7:25:91:d7:2b:c1:e6:b7:4d:ce:09:47:90:
db:14:ef:62:e5:db:9f:69:32:13:fc:41:25:06:ab:
45:ea:42:64:e5:0b:e7:2a:c5:dc:94:a7:9a:e5:10:
a6:b8:33:ff:89:f6:3d:bc:62:d9:0d:29:3e:24:71:
a1:c0:f4:54:5a:6e:10:22:fa:88:20:dc:42:7e:83:
c9:e5:8e:aa:39:9f:d3:ae:bc:14:31:82:6f:e1:01:
ff:72:94:e8:34:af:fa:82:79:5c:dd:3c:f3:d2:36:
e6:c7:cf:72:56:f5:b1:4e:f7:b5:59:19:3e:91:35:
10:30:e1:4a:ee:b9:0c:f3:f0:4b:e5:2e:f3:88:89:
0f:7c:b5:af:45:85:3c:80:c9:fc:7e:7a:f4:b5:2b:
4e:c8:fd:d8:62:8b:27:e1:40:36:49:1e:1c:3e:7b:
21:1f:51:22:e6:1a:72:dd:28:37:78:c7:2b:48:12:
3a:4a:fa:73:f7:a1:b4:2a:18:5d:7f:a7:3b:b6:e5:
99:b6:4e:3a:a8:da:0d:13:86:21:5e:35:dc:b4:bd:
e1:10:26:aa:15:9c:d2:3d:98:41:db:c2:d5:8a:eb:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AB:6E:60:06:63:E9:5F:E2:06:FD:3D:59:9B:D7:D4:AE:5B:A1:85
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/JKtuYAZj6V_iBv09WZvX1K5boYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:16:4f:61:b9:da:bc:e5:5d:d8:f3:7f:a4:53:2b:93:0c:6f:
55:d9:3a:8c:7f:63:3e:19:7d:39:74:23:56:1c:88:be:7d:71:
a4:a8:fe:85:32:ae:1d:1d:ff:29:8a:98:e7:e0:2a:75:09:b8:
3f:f9:93:57:33:bb:e0:36:ef:f7:b6:c8:cc:77:72:1f:ba:5a:
3b:f4:67:2b:d0:f9:57:b9:9f:e0:29:31:0a:3a:f7:5f:ba:b6:
9d:ef:29:2e:2d:8e:15:3a:0b:db:e4:3b:7d:ee:60:7c:dd:b7:
88:5f:4f:40:fc:cc:d9:c1:e2:8d:4c:a9:e1:6b:8a:73:aa:46:
db:cb:e0:d9:bb:de:b4:1a:4d:fd:c0:d2:8a:49:74:04:e8:d8:
0f:19:e3:e9:1a:92:c9:a7:61:8a:9e:cf:fa:8a:26:c8:08:5b:
db:41:4c:a1:1c:96:5f:50:14:4c:dd:cb:6b:ed:ad:32:1f:0f:
e2:43:77:28:53:11:59:ab:f9:f7:ea:d5:56:99:6a:e8:09:c5:
37:f8:a1:aa:59:4c:85:b6:36:27:0a:c3:bd:f2:1b:b5:8e:67:
e8:e6:0b:44:4e:12:7c:92:e9:4c:a2:16:36:e6:fd:8c:bf:6b:
6c:2e:76:d5:74:13:9a:86:9e:90:5f:1a:23:cb:ec:e1:72:37:
c4:97:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:24:09 2026 by rpki-client