This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa
File: JidcxRkCrdrJ_5vVZPYviUhm27w.roa (raw, json)
Hash identifier: tL1fQW1AuQOqp4LmjbEVMkyn7/PWCnXdM9mAryPLsvA=
Subject key identifier: 26:27:5C:C5:19:02:AD:DA:C9:FF:9B:D5:64:F6:2F:89:48:66:DB:BC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F84CD971D89309C103A7557B8744D2A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa
Signing time: Fri 02 Jan 2026 16:22:48 +0000
ROA not before: Fri 02 Jan 2026 16:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58347
IP address blocks: 31.148.248.0/23 maxlen: 24
93.170.5.0/24 maxlen: 24
95.46.159.0/24 maxlen: 24
95.47.36.0/22 maxlen: 24
95.47.234.0/23 maxlen: 24
95.47.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:cd:97:1d:89:30:9c:10:3a:75:57:b8:74:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26275cc51902addac9ff9bd564f62f894866dbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:52:3c:23:e6:54:b5:4d:fc:f4:5b:79:5e:
e8:09:6c:c8:ed:ea:72:7c:ce:fe:62:91:11:43:56:
9b:6c:6d:39:85:8d:f8:f2:0c:85:88:5f:67:42:cd:
c6:80:5a:ef:3f:d5:9c:29:43:4b:9c:a6:e9:f4:9a:
64:8f:85:60:0c:4b:ed:33:7c:89:fe:ae:26:d0:98:
d3:64:d3:fb:c7:ad:6d:e8:26:70:a5:b4:3e:96:56:
ef:38:db:2e:aa:d3:a8:40:62:83:95:7c:ea:77:a2:
b6:8b:98:f5:da:e2:77:33:39:00:45:3a:44:e2:de:
fe:c1:58:3b:65:88:c7:6a:99:88:9f:ab:7f:e6:e2:
ca:06:d1:ee:e6:5a:94:82:4c:50:fc:40:51:5e:58:
3c:1a:cb:52:33:37:2a:56:77:18:a9:97:33:88:2b:
73:7e:31:a9:8c:37:44:dd:34:b2:2d:13:3b:9c:89:
cf:e2:f8:e5:31:59:48:64:10:df:1e:fa:5f:4e:ff:
95:4a:09:43:9b:9c:76:3f:7f:42:44:85:6f:24:f4:
40:69:62:a0:af:7e:38:01:5e:83:47:19:f7:87:6d:
ce:ae:40:aa:d7:f8:f1:b5:88:55:3c:c7:a9:6b:bf:
03:10:b3:b7:8b:41:a2:c2:67:c9:a7:7c:74:27:03:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:5C:C5:19:02:AD:DA:C9:FF:9B:D5:64:F6:2F:89:48:66:DB:BC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JidcxRkCrdrJ_5vVZPYviUhm27w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.248.0/23
93.170.5.0/24
95.46.159.0/24
95.47.36.0/22
95.47.234.0/23
95.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a3:76:18:6a:29:0a:7d:f9:06:2f:78:9d:7e:46:81:ff:e5:
fe:88:46:39:78:b8:12:83:2b:36:31:b8:b1:dc:92:f7:30:99:
d1:27:cb:82:85:2f:44:25:79:c7:fc:4a:16:af:41:ca:49:a1:
af:7f:8c:45:16:94:3b:a0:be:03:a7:55:88:62:6c:75:48:41:
97:7b:7d:61:94:72:9c:cc:1d:92:e1:63:7c:16:3d:5c:19:75:
9f:3b:f6:38:22:ac:9c:74:f6:0a:4d:ed:68:ac:c8:17:ae:b0:
5a:2c:9c:51:a3:dc:14:eb:5f:ea:f4:5c:52:d6:9b:a7:03:a3:
90:15:7d:de:e7:cc:fc:2f:17:b9:76:a5:a8:8e:40:c6:c2:a4:
7e:02:1f:8e:ab:a1:0f:da:b7:62:9f:e0:f1:7d:3b:93:e9:22:
ef:7d:29:30:d2:37:cd:32:ba:e5:60:95:c6:88:47:8d:99:63:
ad:25:3a:e0:27:7b:44:8a:e6:21:be:e2:4b:27:18:96:41:64:
85:db:5d:16:d5:af:d8:10:48:af:bd:c4:99:67:08:83:8d:bd:
c9:08:71:e2:98:9a:fc:ec:c1:74:4d:0a:04:d0:7f:b5:21:90:
fc:e5:1e:62:0e:e8:db:3c:38:3a:7e:90:3e:90:a3:c9:e8:18:
5a:14:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:39 2026 by rpki-client