This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa
File: JFY54QWecCHKfWOIhQ6eHfwQTI8.roa (raw, json)
Hash identifier: c6DsCEx7huHmXsJraso36n2V45N6eM42EXKuT1wNzh8=
Subject key identifier: 24:56:39:E1:05:9E:70:21:CA:7D:63:88:85:0E:9E:1D:FC:10:4C:8F
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019B7B358C8A2F22432137930BF27E96CDB7
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa
Signing time: Thu 01 Jan 2026 20:17:45 +0000
ROA not before: Thu 01 Jan 2026 20:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213489
IP address blocks: 188.124.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:8c:8a:2f:22:43:21:37:93:0b:f2:7e:96:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 20:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=245639e1059e7021ca7d6388850e9e1dfc104c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:38:26:d2:23:30:ce:93:0f:68:d6:67:15:
5a:8e:1d:62:55:e9:95:1d:ba:a6:5a:f5:5b:33:ba:
d3:41:4f:79:d4:5a:44:b6:43:61:ac:0e:a1:3a:35:
97:3b:c0:fe:50:2c:52:e5:3c:b5:19:cb:b0:49:83:
7f:8a:8d:09:c5:48:aa:0d:f9:5a:dc:0c:1d:85:a7:
84:23:68:db:f4:d8:2e:38:4e:98:ef:ba:a7:34:59:
c9:4e:94:bf:69:18:31:18:2e:6c:2e:e7:6e:3e:01:
ef:d1:7d:11:f6:e1:2e:bd:42:df:e4:2f:85:68:9c:
ce:bc:14:c9:ae:ce:08:e8:1f:23:ac:e2:a3:76:98:
03:06:b3:89:e0:5e:e1:5d:b1:e5:fb:c7:e2:1b:56:
9b:4a:47:cb:52:63:25:a2:8a:48:50:80:5f:95:3c:
bf:ae:b7:37:b5:16:2f:5a:b0:e1:9b:37:45:2c:f8:
97:db:c5:bd:7a:00:f9:a8:ea:cf:b5:91:e2:14:d3:
87:70:2f:62:57:d5:57:ce:df:76:a3:1d:30:f9:e9:
fb:39:0a:11:64:6e:00:57:3a:45:b8:f6:a2:3a:d1:
db:4f:d8:9c:11:d9:6b:67:5c:8d:31:c1:82:78:08:
3e:8b:1c:4a:44:af:52:0b:ef:94:0f:a1:1c:71:33:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:56:39:E1:05:9E:70:21:CA:7D:63:88:85:0E:9E:1D:FC:10:4C:8F
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/JFY54QWecCHKfWOIhQ6eHfwQTI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4f:aa:36:7d:72:d4:29:06:f2:44:a1:e4:99:0e:25:ef:5a:
88:12:b8:76:dc:f2:52:7b:e5:ac:2c:2b:f1:44:73:15:df:14:
50:3c:fd:91:67:35:1f:5b:07:6a:f6:0c:ac:74:12:bb:43:58:
b4:04:5c:cd:20:87:ea:b4:04:83:78:27:d9:eb:53:f1:69:32:
11:40:35:1a:72:21:a3:2a:65:d2:85:33:7f:80:18:66:4e:22:
b6:84:76:97:06:42:92:fb:c2:22:b4:25:b1:9d:e8:6e:8c:91:
17:72:98:33:6e:ae:aa:42:04:6a:f8:9b:17:30:c4:e3:12:f9:
78:5c:28:4f:73:8d:a9:79:2a:15:37:92:18:bb:64:ef:72:67:
b6:15:b1:72:4d:6e:a2:05:c8:bf:96:1d:ac:8c:18:8e:b8:a2:
bd:75:62:d6:d7:ef:6a:24:a1:51:ea:17:ce:9b:02:24:d8:73:
a0:68:4b:75:de:80:33:f0:19:9a:b8:08:50:36:cb:53:1c:99:
07:c6:77:2c:13:26:fd:8b:74:99:ac:57:ec:ed:1e:47:72:41:
65:fa:7e:a4:8c:81:e9:7b:f5:d2:0f:7f:0e:6c:33:bd:eb:e5:
8b:7a:ae:a4:79:4f:47:01:cc:8c:d2:6c:81:65:ba:4a:79:03:
bf:56:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:31 2026 by rpki-client