This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa
File: JleZX8if8WA6QvsWXYtqxQfBCcs.roa (raw, json)
Hash identifier: 1ll4zDHOZ05sGRKZZ3BGPEykyJEMaM9UeWgswVdnjIU=
Subject key identifier: 26:57:99:5F:C8:9F:F1:60:3A:42:FB:16:5D:8B:6A:C5:07:C1:09:CB
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019B7EA7094BC137140B43BDB03AF3974954
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa
Signing time: Fri 02 Jan 2026 12:20:34 +0000
ROA not before: Fri 02 Jan 2026 12:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200993
IP address blocks: 2a01:ecc0:6f4::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:09:4b:c1:37:14:0b:43:bd:b0:3a:f3:97:49:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jan 2 12:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2657995fc89ff1603a42fb165d8b6ac507c109cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:33:56:3f:1b:0d:08:61:eb:d1:d5:c9:48:
29:19:ce:44:e7:df:61:1a:2c:0a:87:4c:59:c4:ab:
be:b3:a6:03:ee:bc:34:8c:b5:13:af:cd:25:e7:d9:
77:97:2b:f0:45:b7:eb:cf:e6:ef:8c:2b:f3:3e:3d:
c2:1c:fd:30:23:3e:30:42:cb:c0:63:bd:8c:ad:01:
74:52:73:a2:26:21:28:f9:8e:cb:35:c9:c2:b7:db:
81:8a:38:3f:d3:14:a2:ef:3a:aa:e6:92:9b:35:00:
40:82:7d:70:cc:9c:42:f5:5d:e6:40:7e:37:be:a4:
2b:a2:a8:12:10:53:2e:0f:ff:37:6f:d3:b9:2c:b0:
ec:56:ae:59:fc:a1:f8:43:9c:26:bd:d1:21:d2:a7:
31:eb:de:89:15:38:e7:e4:7b:c1:01:97:cf:eb:0c:
e4:79:bf:cd:3a:3a:59:65:a9:da:16:77:36:06:52:
ff:64:ed:e9:06:78:61:bd:32:20:f0:99:ff:b7:7a:
d4:d1:5e:f7:f9:9d:1f:36:d4:9b:68:97:d2:a9:2f:
15:6d:e2:aa:7b:b3:a4:e7:54:c2:8d:5e:35:b8:53:
ee:78:3b:1a:03:6d:55:c5:79:ef:7a:72:24:35:14:
73:b1:50:29:c2:cb:94:e1:c5:25:78:25:18:13:fb:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:99:5F:C8:9F:F1:60:3A:42:FB:16:5D:8B:6A:C5:07:C1:09:CB
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/JleZX8if8WA6QvsWXYtqxQfBCcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:6f4::/46
Signature Algorithm: sha256WithRSAEncryption
81:8c:9b:86:54:5e:1b:ef:f6:c5:70:8d:cd:6a:a8:ed:90:ad:
f3:c7:1f:ca:a5:0c:52:a0:07:62:9d:d9:b5:54:1e:6f:d0:79:
a0:f1:b6:c6:6b:8a:94:52:58:32:fd:63:8e:11:67:45:2c:c7:
47:03:5a:a0:7f:a2:a8:be:6c:ba:ad:a3:59:b9:98:53:3b:10:
3e:e5:a3:44:fb:85:c8:f9:37:c9:1f:1f:40:3b:8c:05:ae:40:
36:18:4e:9f:1c:64:e4:45:be:58:72:45:ad:97:a0:c1:46:67:
c0:7c:6c:73:99:17:17:4a:b9:36:bd:bd:dd:62:d0:67:ed:bf:
34:ae:4a:8c:d3:13:33:bb:ce:69:a0:b0:e3:80:f3:e8:58:00:
32:98:02:81:91:65:4d:e8:16:2a:5c:0c:9c:55:0e:79:48:6b:
05:92:a8:c0:5a:54:54:3b:1c:63:5f:70:9d:1a:3b:6a:6b:f8:
b9:cc:00:f7:ca:f6:b4:d6:bc:60:ae:a7:b6:3d:2c:e1:5e:dc:
a9:6c:31:1f:b2:74:d0:bb:4e:26:5f:55:1b:5b:18:ba:bf:53:
00:a0:95:fb:c0:94:ab:07:50:86:a1:cc:ba:2b:e2:f1:7f:42:
45:d8:ab:fd:29:a3:06:c0:6a:98:b0:5b:4c:2b:4f:14:e1:e4:
41:a7:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:55 2026 by rpki-client