This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa
File: JfyjjOVusOvMQb-_LBwPzPN1IYA.roa (raw, json)
Hash identifier: M/e+6uFfmrkTdcER4exIQzvYV2TMLB+Olo4dayBwDK4=
Subject key identifier: 25:FC:A3:8C:E5:6E:B0:EB:CC:41:BF:BF:2C:1C:0F:CC:F3:75:21:80
Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Certificate serial: 019C1DFE4B4F33930649A3B033120EEEFA6C
Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa
Signing time: Mon 02 Feb 2026 10:55:30 +0000
ROA not before: Mon 02 Feb 2026 10:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211261
IP address blocks: 185.201.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:fe:4b:4f:33:93:06:49:a3:b0:33:12:0e:ee:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970
Validity
Not Before: Feb 2 10:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25fca38ce56eb0ebcc41bfbf2c1c0fccf3752180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:14:b9:6f:e5:f7:ab:8e:8a:c7:e7:d7:1e:
0f:2b:51:67:4f:77:7b:4e:79:c0:40:32:91:20:ae:
5b:c9:9d:35:c9:5f:30:46:21:3e:1e:ee:fe:f8:93:
b2:8e:d6:0a:68:2e:29:fd:5f:21:af:6e:4b:e3:8b:
9e:e4:8a:54:74:33:73:0c:2e:56:f9:a3:93:9e:6a:
e3:31:04:f1:c6:4a:68:b5:30:ee:6c:af:af:3f:91:
d8:25:cf:af:74:41:7b:5a:de:1e:4c:ba:7a:92:ae:
6d:db:58:05:0d:91:66:78:08:af:9e:79:1e:68:a2:
6a:39:57:98:63:0a:68:b7:c2:25:6d:cf:a8:e6:13:
2b:6c:ba:68:5c:70:b0:d4:6b:c6:34:fb:0f:f7:56:
1c:f9:34:b5:88:12:2b:74:28:fe:5d:82:b4:96:4b:
d2:0e:3a:83:06:02:6b:4b:06:7e:b9:84:f0:78:cd:
4d:fb:0c:2b:6a:88:98:34:a1:fb:b1:0c:8c:3d:e2:
8e:f5:74:41:fb:a2:af:23:6b:5d:71:04:1d:4a:ae:
ad:20:3f:9e:48:1a:fc:e3:fc:ac:d5:18:8d:00:b7:
54:c8:04:7b:2b:64:e9:1c:2c:85:a9:c0:82:9a:c0:
0b:c3:cf:71:ea:15:0c:39:e6:38:3f:88:24:01:bb:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FC:A3:8C:E5:6E:B0:EB:CC:41:BF:BF:2C:1C:0F:CC:F3:75:21:80
X509v3 Authority Key Identifier:
keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/JfyjjOVusOvMQb-_LBwPzPN1IYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.6.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9e:41:f0:67:c0:5f:3a:10:f4:31:c3:e0:c0:ed:5c:a6:d6:
02:ad:35:9e:08:9d:de:94:94:2e:92:e4:42:0b:e1:5d:5f:7c:
a9:c3:92:0c:fc:cd:2b:6c:f0:10:a1:21:4c:35:74:68:1f:db:
83:2f:f2:b2:7b:71:07:a7:47:d4:0b:65:ec:f2:67:9a:26:01:
3c:6e:10:37:87:a9:e3:0d:29:49:44:00:1e:a6:46:24:71:27:
e4:5f:0d:29:b6:75:79:1d:d7:56:62:60:77:e3:a5:5b:03:66:
0e:ca:23:62:9e:4f:ca:00:56:83:6b:75:32:87:f3:08:99:e0:
1c:e0:cb:b0:66:4a:78:d8:bb:64:75:a8:03:64:39:c0:07:19:
d4:90:09:79:52:35:a6:cf:dc:cf:14:49:2c:ab:81:b3:5a:78:
67:97:98:ee:d3:a7:f0:3c:f1:f3:7b:29:06:cb:b9:c8:ef:51:
53:3e:b8:41:1d:c0:70:06:80:98:7b:f6:77:fc:fa:82:0c:9d:
4e:20:dc:46:3c:e0:5c:4a:48:ee:2a:4b:a9:b7:be:c0:7a:85:
8c:e5:d6:30:28:7f:7e:2c:7a:45:d7:b0:f6:d4:6c:1d:a1:1b:
ba:ef:f1:6b:97:8d:e1:c3:2c:b5:9c:4d:af:c4:1d:16:ff:0a:
50:e2:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:10 2026 by rpki-client