This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa
File: JBmh4xJQPOrgXhW8afp75WMHXtU.roa (raw, json)
Hash identifier: Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=
Subject key identifier: 24:19:A1:E3:12:50:3C:EA:E0:5E:15:BC:69:FA:7B:E5:63:07:5E:D5
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019B7C115F0AAC7D3D1E21347CA2966CBC19
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa
Signing time: Fri 02 Jan 2026 00:17:51 +0000
ROA not before: Fri 02 Jan 2026 00:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212139
IP address blocks: 62.175.249.0/24 maxlen: 24
84.124.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:5f:0a:ac:7d:3d:1e:21:34:7c:a2:96:6c:bc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 00:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2419a1e312503ceae05e15bc69fa7be563075ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:ea:e2:5a:36:85:d9:da:33:05:7a:ef:bf:
12:4a:63:0a:78:ac:93:ee:89:6c:06:a4:26:ad:1b:
fe:55:f0:d6:de:b1:9f:29:94:12:bc:ac:e5:47:85:
10:7a:b3:e2:32:0b:cd:f2:9a:70:8b:e5:b5:2f:6a:
67:1d:df:9c:91:b5:62:19:cc:71:7e:fc:08:e1:a4:
d9:1c:31:86:d7:b8:46:80:0c:79:4f:78:97:e3:69:
55:52:02:a9:09:69:08:86:61:1a:0e:9c:3f:f6:c5:
e4:1c:9a:47:b0:b3:6f:9e:0d:86:6a:3b:4e:cd:ac:
16:a2:61:f5:07:58:36:3f:e6:88:05:70:38:23:d5:
2c:48:4d:7b:4b:aa:9b:a9:d8:4c:ee:cf:80:6b:18:
e4:ab:a6:c5:a2:65:4e:a6:8a:aa:c1:6e:57:0f:a7:
c1:9e:ce:e0:a3:7b:f7:f7:87:d2:75:80:a1:3a:37:
43:f2:b1:0e:d6:82:d5:87:f9:a7:cc:ee:b1:c4:c2:
45:37:55:3a:da:3a:08:de:ca:14:ba:72:4e:e8:03:
00:b7:97:37:a5:99:84:79:22:01:84:4a:2d:e8:57:
da:56:0b:f1:e8:53:1d:07:ef:15:e4:43:65:92:4a:
9f:72:22:d3:18:3b:d3:7f:01:17:fc:7d:1f:2d:60:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:A1:E3:12:50:3C:EA:E0:5E:15:BC:69:FA:7B:E5:63:07:5E:D5
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/JBmh4xJQPOrgXhW8afp75WMHXtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.175.249.0/24
84.124.119.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b9:21:94:a9:cf:4a:10:e5:93:ff:d9:ff:4d:78:55:6e:ed:
ee:96:22:4d:ec:85:e5:97:e1:14:c2:03:e9:ef:19:36:cd:c1:
9a:f9:a7:05:2c:f2:54:3a:a2:43:87:7f:49:9b:a7:11:16:b4:
38:2f:22:b0:51:f6:56:fd:9b:84:1e:e1:97:66:61:4c:52:26:
d4:f8:94:6e:64:94:dc:95:c3:55:61:0a:4d:0f:5a:99:36:4f:
ad:fa:af:e4:66:cf:a1:f7:ff:27:b2:58:cb:55:cd:93:e1:6e:
8d:4b:75:a2:07:92:65:31:c1:82:ce:30:d8:39:77:fd:e3:a4:
e7:bb:23:7a:80:15:07:fe:44:0a:25:7e:9c:9c:10:cf:33:c2:
9d:aa:7b:9c:53:e6:1a:1f:f3:d5:aa:5e:64:72:d8:98:91:63:
93:bc:11:9b:4d:dc:10:7d:a7:bd:24:87:5b:a1:8f:d7:5f:ff:
d8:45:63:ae:16:78:53:39:a5:7c:fd:4a:c0:1c:c0:4e:b1:f6:
67:b4:50:0b:38:a4:40:ba:96:66:25:8f:aa:c0:8a:f5:b7:56:
2d:54:50:94:50:75:33:ad:40:70:bc:9b:32:19:6d:0c:3a:be:
33:e0:4f:28:ef:78:22:23:6a:55:94:90:26:52:df:2d:54:e0:
cd:f5:75:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:38 2026 by rpki-client