This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/E_JIFXCdpHTYansz7Uag7XJbSgA.roa
File: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (raw, json)
Hash identifier: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=
Subject key identifier: 13:F2:48:15:70:9D:A4:74:D8:6A:7B:33:ED:46:A0:ED:72:5B:4A:00
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 019B7910CC00AFF3B4185059928454B60B32
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/E_JIFXCdpHTYansz7Uag7XJbSgA.roa
Signing time: Thu 01 Jan 2026 10:18:22 +0000
ROA not before: Thu 01 Jan 2026 10:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201319
IP address blocks: 2a07:2902:6f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:cc:00:af:f3:b4:18:50:59:92:84:54:b6:0b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 10:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13f24815709da474d86a7b33ed46a0ed725b4a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:16:4b:4b:af:2d:39:f8:9a:0f:15:ae:5f:8d:
55:64:33:45:da:e4:fb:41:09:92:35:d6:d3:7c:9f:
df:3b:36:83:53:75:98:8b:8a:01:1b:3e:46:9b:54:
90:f6:72:2d:cd:b8:ef:57:ff:b9:27:d5:42:e5:6f:
93:08:81:b8:00:dd:8e:cf:3c:db:17:07:51:c7:de:
91:ef:e9:c0:a0:3b:1f:4d:73:41:4d:7a:46:87:f3:
85:93:c3:08:46:61:3a:67:2f:73:e9:3d:02:6f:32:
1d:07:39:68:ec:71:10:a9:59:3c:0f:5e:15:e0:94:
55:ad:e5:fd:11:52:13:ee:66:9d:b2:93:0e:bb:f9:
66:de:6d:b6:f1:39:eb:29:3c:e1:fc:67:77:10:03:
8d:61:1a:59:f6:4d:73:85:e7:3b:57:29:f3:aa:ff:
da:b8:43:42:30:6d:35:e4:37:31:9d:32:d5:00:fb:
82:b3:21:d1:97:a5:7a:68:a4:a7:00:08:a8:9f:37:
b0:a6:20:58:2f:d5:cc:fd:f1:1c:8b:7d:40:74:12:
a8:0f:ae:e1:2c:92:43:df:13:e9:a8:47:e8:a3:de:
5f:2f:ba:c6:1e:24:b1:aa:16:58:6d:cf:4f:59:de:
de:2f:ef:9d:9a:15:86:bd:5b:00:83:8a:94:ca:96:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:48:15:70:9D:A4:74:D8:6A:7B:33:ED:46:A0:ED:72:5B:4A:00
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/E_JIFXCdpHTYansz7Uag7XJbSgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2902:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
98:bb:8a:2c:0e:0b:fe:08:58:be:5b:b6:d9:66:00:6f:f2:61:
9a:98:af:68:c6:88:88:38:04:fc:77:c7:f5:bb:0f:52:a0:9b:
44:f7:77:7a:2d:6a:2e:0d:63:62:3d:14:aa:2b:68:86:00:14:
0d:40:04:77:b6:01:da:b7:52:f5:33:50:09:02:08:ba:a5:04:
b1:d7:3a:0a:1f:2c:51:15:eb:69:ea:25:d8:35:8b:99:8c:df:
7e:d3:6f:f5:a8:de:d2:64:26:26:b7:14:bd:37:f2:b5:c8:9d:
4e:38:09:b0:0d:7b:cc:7f:35:b9:d9:29:c9:bb:21:ef:86:e6:
11:97:b9:a8:6c:75:9a:d7:d1:e8:af:1c:b0:7c:ba:53:42:99:
36:c7:5f:e2:70:5b:16:0a:2f:08:4d:d4:ee:cc:f3:14:51:bd:
56:be:35:82:f6:a7:29:20:66:58:53:bf:3d:df:de:2c:99:94:
6d:90:64:c3:e8:8b:1e:3a:97:f0:3a:37:4b:f4:dc:49:d3:75:
9a:d0:8d:b6:3d:cb:f3:a7:64:f9:b4:de:2e:89:cf:d2:67:9c:
b4:04:d6:66:a9:b0:a6:5b:f0:6e:8e:39:d0:32:7a:5b:15:a9:
bd:c8:6a:bb:b9:6c:ce:36:ef:d8:f7:04:ea:62:1e:9c:86:f0:
ab:f9:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:38 2026 by rpki-client