This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa
File: Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa (raw, json)
Hash identifier: WNChQ5FZcNT+Uy6r/VXAfEff5h4yB9HjomF668ERFPs=
Subject key identifier: 27:07:FF:85:82:A1:93:3B:12:AA:50:BF:01:31:27:09:0D:53:39:61
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 019B7910349D3C4B9A579E558E29F4E51055
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa
Signing time: Thu 01 Jan 2026 10:17:43 +0000
ROA not before: Thu 01 Jan 2026 10:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 94.154.9.0/24 maxlen: 24
2a0f:f0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:34:9d:3c:4b:9a:57:9e:55:8e:29:f4:e5:10:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Jan 1 10:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2707ff8582a1933b12aa50bf013127090d533961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:f2:a1:ca:45:fb:21:d5:19:cc:9f:4b:fd:
31:4e:8f:9e:0f:b0:6a:39:74:03:bf:bb:eb:56:b3:
57:27:7a:78:12:c2:52:84:ee:ce:89:35:fe:9b:3a:
5b:e8:b1:57:2f:74:71:f3:ea:c4:54:40:e8:10:bc:
70:12:ae:ec:81:e4:09:6b:ab:42:f1:fc:25:82:98:
95:04:db:0d:a5:9b:f1:f0:7e:57:66:08:51:ba:3e:
19:4c:32:ce:12:49:18:da:ab:a9:69:d2:59:d3:fd:
91:8f:25:4a:6b:bf:6c:6a:fc:78:aa:52:1c:61:e3:
ba:9c:3a:28:4b:99:53:de:4a:b5:c0:e2:8b:00:60:
40:88:32:53:89:57:d3:d4:b2:5e:8e:e5:46:f2:02:
77:3a:4a:90:68:44:6e:ff:0f:32:2c:07:af:a9:4d:
55:fb:3a:18:63:6a:90:63:cd:ca:1b:68:5c:9b:6e:
b7:16:e6:98:e7:52:c7:37:54:00:7b:02:ea:d0:1e:
e6:a5:8f:88:21:c1:69:50:98:9f:88:32:cb:02:33:
20:c3:52:8e:3d:63:d4:48:5d:14:02:aa:a5:19:01:
21:d0:a5:64:a0:b8:93:af:e7:ce:62:bf:3e:f7:0a:
94:32:c2:ef:d6:73:8e:7f:5b:17:4a:63:9f:51:4d:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:FF:85:82:A1:93:3B:12:AA:50:BF:01:31:27:09:0D:53:39:61
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/Jwf_hYKhkzsSqlC_ATEnCQ1TOWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.9.0/24
IPv6:
2a0f:f0c0::/32
Signature Algorithm: sha256WithRSAEncryption
5b:8d:69:df:3e:44:7f:a7:f4:83:c5:1a:ca:d5:11:0e:8a:52:
d1:23:75:d2:43:02:0f:a6:47:b2:ce:c4:c1:1c:8d:9a:83:d0:
b1:71:16:ea:51:0e:7a:78:c1:0e:30:1b:ad:9c:67:61:5e:97:
87:a5:96:f9:e8:7c:7e:d6:c7:a1:c3:b2:68:76:7b:7e:d5:81:
2b:b0:12:6a:df:27:17:25:41:fc:d3:ab:d7:57:a3:5b:f8:04:
af:d2:f6:fc:b3:b3:74:c0:0a:64:b2:eb:1e:fe:ad:d0:76:85:
6a:d8:08:e5:4b:3b:7d:d0:33:9d:52:af:da:e1:3b:4f:c8:3d:
d6:9c:33:45:9c:c5:13:4f:3f:8e:b5:bc:96:4d:b0:2d:e5:88:
fb:9e:1b:75:47:c7:45:b4:39:04:7b:f6:14:0f:73:bc:15:fa:
ac:84:c6:e2:00:83:7f:bb:36:76:44:f9:2b:4d:0a:61:7f:20:
11:17:c6:90:ab:76:04:dc:f2:74:cd:a3:9a:49:63:f9:3e:8b:
f8:d6:a0:de:8f:13:9a:57:d8:9c:88:9a:e6:41:5b:29:ad:0a:
71:26:63:e3:73:e8:a4:e1:e1:19:e6:b1:98:14:34:0e:d6:f9:
0a:43:a9:49:1a:a5:a3:2d:bd:00:df:1b:39:95:15:4c:fb:e3:
33:3d:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:37 2026 by rpki-client