This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa
File: jZdEfTmuJriG5AyLUa3HiefzbcA.roa (raw, json)
Hash identifier: S7xLT6xDphnbTUXgFvGzB5Dv+d/rhkukYS1/zmgto9w=
Subject key identifier: 8D:97:44:7D:39:AE:26:B8:86:E4:0C:8B:51:AD:C7:89:E7:F3:6D:C0
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 019B7EA6F1CCB991E3AC0D49ACC7A44F3575
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa
Signing time: Fri 02 Jan 2026 12:20:28 +0000
ROA not before: Fri 02 Jan 2026 12:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202061
IP address blocks: 93.159.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:f1:cc:b9:91:e3:ac:0d:49:ac:c7:a4:4f:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 2 12:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d97447d39ae26b886e40c8b51adc789e7f36dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:ec:ec:37:76:56:b1:be:45:bd:04:00:f5:
75:c2:9d:d5:e1:a4:16:0d:28:c8:5a:e7:59:ff:65:
5c:33:df:53:c4:37:6c:fa:fb:0a:ab:ef:c2:11:83:
20:d5:af:5e:17:fd:38:1f:4f:8b:ba:84:e6:1e:21:
8e:9e:7a:d3:8f:e8:21:6a:48:a4:dd:91:35:a0:68:
64:e2:df:96:b9:f2:8e:a3:33:6c:3b:d6:0d:68:f6:
39:d2:1c:4f:06:8f:db:83:2d:08:97:e6:e5:9b:b0:
ef:53:c8:54:42:b2:4d:24:14:62:d3:20:3d:83:95:
16:b5:7a:a9:f5:03:55:f4:69:ca:56:0c:1e:b0:dc:
95:1f:1f:6d:ab:a7:b5:fc:58:81:83:29:49:41:2d:
2c:2c:ae:d4:99:76:0d:93:63:ae:67:f4:b0:8d:ad:
68:6f:67:d1:cd:cb:4f:90:c7:10:aa:50:98:49:52:
05:08:81:7d:30:e4:9b:42:72:23:11:7e:27:1f:be:
2e:08:f2:01:5f:2d:56:e1:11:f1:8a:6d:eb:ad:fe:
8f:c2:32:ab:b2:c0:62:f1:fc:58:34:6d:8f:ed:5b:
e2:87:58:6a:6a:b2:d1:d1:b4:09:14:2d:53:b2:08:
1f:1c:0e:92:7d:ed:7e:55:2f:f8:1f:7a:28:2e:62:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:97:44:7D:39:AE:26:B8:86:E4:0C:8B:51:AD:C7:89:E7:F3:6D:C0
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.185.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b1:0d:9d:39:94:8b:19:e2:82:f4:51:6a:16:c0:f2:56:36:
03:e3:37:c8:0f:d5:b0:57:b5:de:0a:32:fa:5b:ae:a5:e2:9b:
d8:68:de:b3:76:5d:ff:b5:57:d5:03:12:dd:9c:c5:6b:69:e0:
df:5e:01:31:83:09:11:4b:02:0f:91:ec:c1:5d:43:6a:23:06:
ff:d9:81:7b:30:b4:05:1c:f6:ab:20:59:4d:09:bc:0b:a7:ad:
22:4e:c2:ee:47:7e:d6:3c:d6:7c:0d:5b:7c:2a:f8:c8:a9:5b:
34:91:4b:5b:db:fc:34:f1:4d:f9:a5:ba:88:75:3d:78:b8:7f:
21:88:d7:f1:2b:1f:51:d4:fe:77:c7:25:ba:a5:73:b0:f7:ff:
63:54:21:4b:bc:ab:ab:88:6a:2f:8a:1f:8c:05:d5:12:83:d7:
be:4b:40:d7:92:23:0e:4b:33:90:46:25:88:cb:a4:a4:5f:bb:
29:4e:93:23:b3:71:b3:37:99:3d:0c:f4:4a:1b:7c:16:b0:9a:
b2:a1:58:c3:68:2c:1d:7e:e3:cc:d4:e0:96:78:2c:76:8e:6b:
3a:8f:9d:3b:14:56:49:73:7e:1d:07:e0:21:10:ef:60:d1:25:
51:e4:11:c0:73:93:3b:0d:7e:30:2d:8a:b8:ea:8d:f7:27:cf:
5f:37:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:21 2026 by rpki-client