This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/JzXhokSG82LcMCULytEUp0QwNC8.roa
File: JzXhokSG82LcMCULytEUp0QwNC8.roa (raw, json)
Hash identifier: ZZxc+1Uxr56VyzAUJ4dBkyZ2Uo54y6GBc5OnUw8X6mg=
Subject key identifier: 27:35:E1:A2:44:86:F3:62:DC:30:25:0B:CA:D1:14:A7:44:30:34:2F
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019B7D5CA8DADF9177F6EB5D2FC1F0507164
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/JzXhokSG82LcMCULytEUp0QwNC8.roa
Signing time: Fri 02 Jan 2026 06:19:43 +0000
ROA not before: Fri 02 Jan 2026 06:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205800
IP address blocks: 185.140.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:a8:da:df:91:77:f6:eb:5d:2f:c1:f0:50:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jan 2 06:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2735e1a24486f362dc30250bcad114a74430342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:be:ca:1e:0c:40:ea:3d:cb:54:1e:04:3a:
32:3f:24:c2:37:ea:d2:8c:7b:74:b4:77:d0:5d:f2:
bd:f0:00:83:c0:5d:24:dd:5b:81:5e:35:ff:04:3e:
07:b1:2b:43:b6:7e:9c:37:71:e9:49:d4:a7:75:d4:
b4:b6:0f:d1:4e:d5:5c:ff:b0:e2:1b:08:45:65:d0:
7c:f6:ef:67:28:10:c8:d7:97:00:14:56:1d:ed:5f:
cb:7a:cf:55:fe:69:39:34:2b:e3:07:01:51:ec:54:
78:02:5b:4f:3f:fc:67:d1:03:cb:d8:45:1a:b1:cb:
79:8f:1b:17:86:b5:c0:4b:fc:e6:79:9c:80:88:f1:
91:54:06:0a:94:9f:9e:2c:76:c1:7f:1c:f2:de:ea:
63:06:f7:72:a3:f5:68:c5:0d:f9:1c:1a:6c:4e:e7:
67:45:07:a7:9c:74:30:2d:f4:cd:ac:46:4c:e0:37:
e5:bd:20:7f:cf:01:b6:a3:a6:29:22:62:12:4c:d4:
c0:db:4a:e5:de:4a:bb:09:bf:f9:1d:78:53:37:e7:
d2:ed:a1:6b:47:fb:35:4a:b6:ef:1d:cf:48:e0:19:
4f:17:ee:15:4a:58:f8:89:9f:c9:47:7e:cd:64:d0:
a3:a3:24:cd:02:8d:a4:61:83:17:cc:0d:75:72:aa:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:E1:A2:44:86:F3:62:DC:30:25:0B:CA:D1:14:A7:44:30:34:2F
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/JzXhokSG82LcMCULytEUp0QwNC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6f:69:34:6f:50:74:16:83:dd:cd:75:78:fa:6e:85:44:6d:
73:fd:86:f4:26:d2:5f:87:33:91:87:5a:40:04:b2:30:b6:3c:
6b:89:5d:44:18:53:33:8c:7f:2b:0a:ec:61:a2:ea:87:94:d8:
98:fd:9f:22:5d:dc:19:df:3c:22:f1:d4:c9:2a:58:15:12:2f:
51:30:0e:fc:f1:63:d7:69:65:03:ac:89:f9:d8:28:a8:6b:01:
fc:2e:a1:14:20:55:2a:40:4c:d5:ad:10:9a:8b:ea:7b:f2:ff:
aa:a4:48:63:12:dd:64:33:64:70:27:ad:16:39:a9:2d:ff:f2:
8d:97:b6:07:ec:d7:41:77:2b:60:1f:4f:4e:05:7e:61:75:74:
10:3a:82:e8:a5:3d:aa:3b:40:31:1c:74:43:63:d3:69:3c:32:
b5:37:9a:3b:f2:e3:80:4a:e0:f2:a0:30:bf:a4:7c:b6:ba:cc:
c1:be:b7:f5:c6:2e:c3:4f:07:cf:aa:40:be:fb:8c:d3:07:5a:
c5:e2:f9:34:69:45:64:b6:15:4b:d2:cd:a7:34:6d:a4:49:78:
b3:b8:5e:6b:b7:db:24:f1:b4:84:8c:5b:38:18:25:d0:fa:d9:
01:c1:b4:a1:fd:d1:46:4e:46:66:99:f6:7a:62:9d:9c:28:10:
ce:03:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:21 2026 by rpki-client