This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa
File: J40_KlT3-Sey5bAIRfdyYW8QH2w.roa (raw, json)
Hash identifier: ktrLXwF2mH8HpV61DUldxAl7PN7AxEoLl+QT4NZrtPw=
Subject key identifier: 27:8D:3F:2A:54:F7:F9:27:B2:E5:B0:08:45:F7:72:61:6F:10:1F:6C
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 019B7AC90370E3F7139C01234D0234B53FB6
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa
Signing time: Thu 01 Jan 2026 18:19:12 +0000
ROA not before: Thu 01 Jan 2026 18:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21427
IP address blocks: 37.235.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:03:70:e3:f7:13:9c:01:23:4d:02:34:b5:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 1 18:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=278d3f2a54f7f927b2e5b00845f772616f101f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:6b:69:d6:d1:ef:25:49:cf:d3:ed:f7:58:
bc:74:97:62:f5:bc:1b:1b:4b:8d:f4:07:01:c7:28:
e9:27:82:a8:ed:53:c4:37:49:9d:08:07:35:07:51:
d1:a4:a6:5c:fb:c3:77:db:44:8f:12:6c:db:b8:b4:
28:e8:94:82:46:dc:db:95:8f:97:4b:31:e2:fb:bc:
4b:10:64:0b:9b:69:db:5d:0b:46:6b:65:a7:22:1c:
bf:6c:39:ed:82:a0:a4:cb:f3:3c:77:f7:cc:5b:5c:
55:27:4c:05:41:06:39:ac:e2:cf:f8:c6:0c:8e:9e:
54:01:a5:11:a8:7d:10:13:e6:ea:fa:ce:a6:b0:3a:
05:81:e7:25:6d:42:2b:75:9f:42:d3:4b:09:40:30:
c5:09:a5:f6:bf:18:03:e1:0c:6b:98:a0:c8:3f:b9:
8b:f8:75:81:e1:e9:d4:c6:59:ea:6d:cb:1f:b0:70:
76:67:d0:7f:03:f6:85:ec:0d:17:94:29:c4:8f:5d:
e6:e2:56:6d:ad:b0:21:41:6e:02:ce:76:6b:f8:e6:
0f:ac:ec:1d:7f:b3:d9:25:2a:27:2e:b2:d6:40:9f:
2b:29:e7:99:5c:b3:da:58:27:e5:9d:73:dc:74:b2:
7f:b5:3b:e1:dd:c2:97:48:f4:f4:aa:bc:5f:a5:32:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:3F:2A:54:F7:F9:27:B2:E5:B0:08:45:F7:72:61:6F:10:1F:6C
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c1:d8:25:99:d5:64:93:77:4d:d1:b7:af:5f:28:00:79:2f:
12:51:ff:f3:80:1b:c5:f0:40:0f:a8:f6:22:84:aa:25:b7:ef:
bc:ba:58:c5:4e:fd:4e:b2:a0:3d:3f:ab:75:64:db:9c:45:b8:
9a:76:c7:dd:78:45:bd:81:5e:91:d4:44:2d:ee:4e:a2:b9:57:
ed:ea:50:67:aa:7f:5c:58:c6:8b:68:ee:b7:01:a7:da:5f:71:
68:5f:d8:9e:bb:18:6b:38:a2:2e:36:25:24:09:ec:8d:29:24:
85:aa:c6:d7:bd:4f:fb:bd:f0:22:70:62:91:46:76:1e:e7:00:
35:fc:72:01:7b:c3:99:08:72:dd:89:e0:7f:1d:d7:5b:a9:67:
ae:1c:e6:cc:c5:09:78:3f:c8:0f:1a:a3:19:88:18:d1:ac:cf:
a1:2b:a0:9d:72:0b:9b:f8:fa:dd:b2:03:fc:fb:06:26:69:9c:
d8:47:4a:e6:4f:ea:df:26:fb:10:8b:ac:68:ba:30:00:63:b4:
52:88:42:ed:00:89:9a:46:11:b9:78:99:26:2e:08:27:2e:85:
9f:02:3f:55:a2:2a:9c:bd:8c:00:1b:4f:ba:e6:e3:06:92:04:
96:c2:4e:db:cf:69:f8:21:0a:5c:1a:d1:86:11:ac:17:c4:68:
04:89:f9:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yQNw4/cTnAEjTQI0tT+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2
MGM2ZTEwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzhkM2YyYTU0ZjdmOTI3YjJlNWIwMDg0NWY3NzI2MTZmMTAxZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfFradbR7yVJz9Pt91i8dJdi9bwb
G0uN9AcBxyjpJ4Ko7VPEN0mdCAc1B1HRpKZc+8N320SPEmzbuLQo6JSCRtzblY+X
SzHi+7xLEGQLm2nbXQtGa2WnIhy/bDntgqCky/M8d/fMW1xVJ0wFQQY5rOLP+MYM
jp5UAaURqH0QE+bq+s6msDoFgeclbUIrdZ9C00sJQDDFCaX2vxgD4QxrmKDIP7mL
+HWB4enUxlnqbcsfsHB2Z9B/A/aF7A0XlCnEj13m4lZtrbAhQW4CznZr+OYPrOwd
f7PZJSonLrLWQJ8rKeeZXLPaWCflnXPcdLJ/tTvh3cKXSPT0qrxfpTKBlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCeNPypU9/knsuWwCEX3cmFvEB9sMB8GA1UdIwQY
MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt
YWM4MDBjNmQ5NzZmLzEvSjQwX0tsVDMtU2V5NWJBSVJmZHlZVzhRSDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm
LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJetNMA0G
CSqGSIb3DQEBCwUAA4IBAQAcwdglmdVkk3dN0bevXygAeS8SUf/zgBvF8EAPqPYi
hKolt++8uljFTv1OsqA9P6t1ZNucRbiadsfdeEW9gV6R1EQt7k6iuVft6lBnqn9c
WMaLaO63AafaX3FoX9ieuxhrOKIuNiUkCeyNKSSFqsbXvU/7vfAicGKRRnYe5wA1
/HIBe8OZCHLdieB/HddbqWeuHObMxQl4P8gPGqMZiBjRrM+hK6Cdcgub+PrdsgP8
+wYmaZzYR0rmT+rfJvsQi6xoujAAY7RSiELtAImaRhG5eJkmLggnLoWfAj9Voiqc
vYwAG0+65uMGkgSWwk7bz2n4IQpcGtGGEawXxGgEifli
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:41 2026 by rpki-client