This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa
File: jaBG7e9Cb4KBqFZY1U62rAci_ls.roa (raw, json)
Hash identifier: FJmJRU9u8joLPmDJQpVlYHO82qpK/PwuXfnAZz3bSv4=
Subject key identifier: 8D:A0:46:ED:EF:42:6F:82:81:A8:56:58:D5:4E:B6:AC:07:22:FE:5B
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019B7C118AFD860ED3ADC5DE46ED4C3F34F9
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa
Signing time: Fri 02 Jan 2026 00:18:03 +0000
ROA not before: Fri 02 Jan 2026 00:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215939
IP address blocks: 46.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:8a:fd:86:0e:d3:ad:c5:de:46:ed:4c:3f:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 00:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da046edef426f8281a85658d54eb6ac0722fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:a6:5e:ed:04:02:f8:3b:5f:be:d4:e8:a6:
aa:c6:9f:19:8c:77:b4:d1:7d:9e:74:4f:87:7a:45:
5a:d4:be:ab:b9:ab:c6:95:1a:f2:4d:20:8e:19:37:
cd:54:92:ca:2d:82:e8:c8:cf:e3:00:e0:9f:6d:e0:
2d:ff:22:20:77:c9:61:06:33:76:80:fe:fd:56:45:
44:67:84:36:48:16:01:fe:c3:2b:a7:3a:69:67:58:
ca:03:c9:38:df:bc:64:89:b4:0d:39:d2:46:67:49:
5b:26:b2:1f:9c:7c:d1:0c:be:7f:2c:28:ea:02:e4:
b1:a8:20:f2:fa:99:03:89:48:b7:df:63:c7:a1:c0:
44:3e:6f:d0:2e:27:47:99:e7:ab:0e:7b:47:56:fd:
2f:21:62:82:54:f4:f8:48:a7:1e:d3:be:16:af:a6:
d0:8f:50:27:cd:b3:87:01:9e:b8:7d:e1:a1:85:11:
70:0c:87:8e:12:00:e5:c6:2e:05:29:44:38:57:8c:
be:3c:77:9f:4c:2c:a2:71:97:94:0f:89:33:c8:48:
bb:aa:a5:17:bd:67:0b:ee:11:ca:2e:b6:b7:cd:53:
64:b2:1a:af:f5:60:31:24:10:90:ae:c3:fb:45:64:
be:b6:08:00:ad:64:f8:8c:79:b3:28:54:d4:73:59:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A0:46:ED:EF:42:6F:82:81:A8:56:58:D5:4E:B6:AC:07:22:FE:5B
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jaBG7e9Cb4KBqFZY1U62rAci_ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:04:32:07:6e:27:16:72:29:43:da:15:5f:24:d2:e0:b1:03:
cc:35:a3:31:65:b1:85:9d:6f:5e:7a:94:c4:a4:0d:a0:c1:32:
49:06:c6:33:20:7c:b7:02:e1:76:aa:24:7f:cc:47:9f:70:82:
7e:b7:04:69:28:52:f8:6e:77:54:99:65:92:07:05:b6:91:49:
10:37:6b:06:08:ae:44:61:c4:c4:37:5e:ca:67:f0:0a:3d:5c:
58:d6:ba:ef:29:e1:b9:42:fd:13:d0:1a:07:bb:7c:64:5f:0d:
1a:e4:2e:fe:81:d0:4d:2a:cd:9f:39:07:59:00:7c:d4:bc:9c:
b1:a4:1c:46:a9:e7:22:7a:a5:77:a4:88:1b:72:a9:22:9b:f2:
b5:5f:c1:9a:f7:1f:d1:f9:ce:3b:27:05:65:1d:07:2d:6b:4a:
5c:52:55:44:5d:93:81:14:d7:1e:13:02:5c:9f:d7:46:e4:a5:
75:2b:d0:e4:a2:32:36:62:9d:84:b7:3d:c9:3b:fb:75:f0:3f:
99:ae:d3:46:a0:a9:1b:40:43:14:c4:1e:53:d0:aa:da:64:be:
e4:1d:0d:0f:73:3a:40:e7:ef:9d:b2:49:e3:10:6f:2d:3f:0e:
18:04:a4:76:23:5d:fa:f4:6f:df:5f:ec:58:49:0d:da:93:e0:
b0:02:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:47:39 2026 by rpki-client