This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa
File: JWbtobpI47VXCFWlAi9tqrIVRvw.roa (raw, json)
Hash identifier: ucrMEatOyob1z9bYCx6s8YshkLw5O6g2pTzQdQKb/BI=
Subject key identifier: 25:66:ED:A1:BA:48:E3:B5:57:08:55:A5:02:2F:6D:AA:B2:15:46:FC
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 019B7BA3B36C65B2D8FEC4CF593E3AB22896
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa
Signing time: Thu 01 Jan 2026 22:18:04 +0000
ROA not before: Thu 01 Jan 2026 22:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214785
IP address blocks: 185.202.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:b3:6c:65:b2:d8:fe:c4:cf:59:3e:3a:b2:28:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 1 22:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2566eda1ba48e3b5570855a5022f6daab21546fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:d9:a2:da:f0:51:44:1f:b4:9b:69:4e:9a:
ce:1e:61:83:57:32:db:f2:8f:6d:16:e6:c8:61:56:
f9:df:53:68:6a:b1:11:15:1c:18:16:94:96:f4:d0:
70:69:51:16:26:49:08:f3:bf:23:b1:10:2f:6b:45:
e1:54:a8:ac:34:85:1b:38:ba:2f:33:d9:97:26:23:
ec:7f:18:64:b6:b4:99:f0:fa:69:de:1e:56:3b:98:
cc:cf:7d:c1:09:f9:20:f6:0a:5d:ae:7e:91:8e:b3:
90:63:97:c5:2a:54:49:df:3a:f1:e2:56:9a:c1:55:
fb:c0:f2:09:d1:71:6c:45:51:8f:67:cb:e7:b3:d0:
83:2e:b4:ae:5c:56:94:7c:23:dc:8b:e7:b0:fc:7f:
17:74:a7:d4:de:c3:b2:c4:a0:0a:82:3b:4f:e6:38:
86:d3:1c:b1:36:70:6d:53:c8:df:8b:3d:3b:3a:e3:
5d:12:d4:9f:1b:26:42:f4:e9:d3:50:a9:23:c6:d0:
85:7e:53:78:45:da:5f:6f:f7:d6:11:70:49:c7:d4:
41:58:44:a8:67:fa:08:fd:19:a1:f6:fc:24:90:fc:
c7:e9:56:10:4b:77:4a:8a:b1:31:ac:0f:d3:e5:46:
6a:f6:63:e1:dd:6f:cd:7e:7a:33:97:6e:14:5b:37:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:ED:A1:BA:48:E3:B5:57:08:55:A5:02:2F:6D:AA:B2:15:46:FC
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JWbtobpI47VXCFWlAi9tqrIVRvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4f:de:41:10:88:96:df:67:23:2a:d4:98:53:5f:75:a9:2e:
f9:2d:f6:fd:3d:42:fc:1f:43:cf:27:b4:4b:96:eb:13:7f:bb:
c7:8d:b0:5a:a5:a2:37:a2:0b:55:e3:57:bb:9b:e8:fe:93:75:
d0:ae:52:fe:18:aa:99:71:26:61:70:ed:2b:a8:1b:7d:0a:d0:
12:8f:52:7f:50:7b:83:5a:90:38:20:ef:1a:f1:3a:e5:3c:c6:
31:d2:58:2b:df:df:25:4a:ce:a9:83:1c:2a:56:c0:3e:43:0b:
51:39:b1:c8:e7:c9:cc:a5:fc:d4:f8:84:75:ef:41:6d:04:3d:
fa:e9:2b:11:b6:a5:cb:4b:ce:c3:0e:64:73:9f:72:9e:62:30:
51:48:12:66:bb:ed:41:ff:a5:ed:ad:d2:39:24:3f:56:0b:8c:
04:92:65:bd:ef:be:86:c7:03:90:0e:c0:08:de:89:9a:db:48:
4c:95:37:c9:ec:56:fc:9a:1c:2a:9d:f3:88:9e:94:23:42:cb:
e4:d2:4d:d3:19:44:8b:c1:6f:2c:bf:4e:0d:77:21:5e:34:76:
e4:a7:cd:c7:02:93:42:75:5d:98:aa:d6:21:8e:bd:ec:e1:96:
73:fe:8b:75:3d:f4:d9:c7:9e:9a:16:05:aa:a9:7c:df:ae:f3:
55:08:73:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o7NsZbLY/sTPWT46siiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx
NjM2Y2QwHhcNMjYwMTAxMjIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY2ZWRhMWJhNDhlM2I1NTcwODU1YTUwMjJmNmRhYWIyMTU0NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymDZotrwUUQftJtpTprOHmGDVzLb
8o9tFubIYVb531NoarERFRwYFpSW9NBwaVEWJkkI878jsRAva0XhVKisNIUbOLov
M9mXJiPsfxhktrSZ8Ppp3h5WO5jMz33BCfkg9gpdrn6RjrOQY5fFKlRJ3zrx4laa
wVX7wPIJ0XFsRVGPZ8vns9CDLrSuXFaUfCPci+ew/H8XdKfU3sOyxKAKgjtP5jiG
0xyxNnBtU8jfiz07OuNdEtSfGyZC9OnTUKkjxtCFflN4Rdpfb/fWEXBJx9RBWESo
Z/oI/Rmh9vwkkPzH6VYQS3dKirExrA/T5UZq9mPh3W/Nfnozl24UWzdaBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVm7aG6SOO1VwhVpQIvbaqyFUb8MB8GA1UdIwQY
MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvSldidG9icEk0N1ZYQ0ZXbEFpOXRxcklWUnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpkMA0G
CSqGSIb3DQEBCwUAA4IBAQBZT95BEIiW32cjKtSYU191qS75Lfb9PUL8H0PPJ7RL
lusTf7vHjbBapaI3ogtV41e7m+j+k3XQrlL+GKqZcSZhcO0rqBt9CtASj1J/UHuD
WpA4IO8a8TrlPMYx0lgr398lSs6pgxwqVsA+QwtRObHI58nMpfzU+IR170FtBD36
6SsRtqXLS87DDmRzn3KeYjBRSBJmu+1B/6XtrdI5JD9WC4wEkmW9776GxwOQDsAI
3oma20hMlTfJ7Fb8mhwqnfOInpQjQsvk0k3TGUSLwW8sv04NdyFeNHbkp83HApNC
dV2YqtYhjr3s4ZZz/ot1PfTZx56aFgWqqXzfrvNVCHNv
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:37:16 2026 by rpki-client