This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa
File: JJdlcP00n-vl-IODJxuYk18Mdzo.roa (raw, json)
Hash identifier: T/3imsOsQ3xZAtHnp5SO5AhI5eSsZh1hN11G3K1ZGXU=
Subject key identifier: 24:97:65:70:FD:34:9F:EB:E5:F8:83:83:27:1B:98:93:5F:0C:77:3A
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019B7F15136CAF955A2E23B5D8C671376245
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa
Signing time: Fri 02 Jan 2026 14:20:46 +0000
ROA not before: Fri 02 Jan 2026 14:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210456
IP address blocks: 2a14:c380:510::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:13:6c:af:95:5a:2e:23:b5:d8:c6:71:37:62:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jan 2 14:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24976570fd349febe5f88383271b98935f0c773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:48:8f:75:ea:4c:f2:c9:6a:21:92:52:a2:
85:0c:33:a0:27:e0:ef:64:38:bc:29:d4:a8:d5:04:
38:89:42:c6:6c:7a:82:08:18:6a:21:6f:02:c4:56:
6f:10:dc:e6:ff:e7:92:31:3a:1e:95:94:b8:69:a4:
a5:d2:7b:7c:e2:7c:39:64:26:b9:5c:37:ed:f4:a6:
aa:23:6a:b2:7f:67:11:bc:1c:60:3b:c0:f0:b3:4d:
e2:e1:52:e1:27:44:57:00:86:81:48:92:c8:88:93:
d8:42:41:77:be:a4:90:80:80:fc:92:6d:81:f8:88:
dd:ae:76:9c:d3:4a:0b:f1:6f:fb:b6:2e:24:d6:7d:
ae:6f:e6:07:8a:5f:b1:1d:a1:b2:f5:4f:ad:df:63:
72:39:d1:74:85:60:ed:c0:c1:70:b8:2e:de:d5:2c:
3c:4e:df:e0:8a:a7:d9:bd:ab:6a:88:cf:59:ef:ea:
89:34:6d:be:71:a3:9a:26:cb:82:aa:3b:f3:62:22:
39:0a:b4:e7:22:ca:e3:31:ee:e0:be:2b:6e:ec:d7:
c1:2a:90:22:9a:55:90:f3:fc:51:66:1e:61:7f:ad:
58:a9:1f:05:6b:ee:17:6b:7e:c1:ed:31:4e:40:e9:
39:f0:b4:a5:9c:14:19:c1:0e:db:88:bf:10:fb:0b:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:65:70:FD:34:9F:EB:E5:F8:83:83:27:1B:98:93:5F:0C:77:3A
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/JJdlcP00n-vl-IODJxuYk18Mdzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:510::/48
Signature Algorithm: sha256WithRSAEncryption
7b:38:b4:0a:99:5b:e3:e7:ea:02:1b:0a:c0:a9:c1:bd:20:64:
e4:78:0b:3b:8c:13:3c:75:dc:8c:91:a2:45:02:da:39:fa:a4:
8d:89:f5:78:50:8e:df:60:ef:a9:36:e4:87:a5:3f:1e:7d:cd:
c2:d6:93:80:46:8f:f5:a4:50:e8:31:64:53:14:4f:e5:df:0b:
6a:a0:ec:e6:8e:e7:de:30:a3:17:bb:c2:77:8a:b5:27:72:61:
51:07:c4:dd:38:16:c1:99:fb:0e:7a:ba:c8:2e:41:c6:e1:c1:
d9:f9:41:87:03:bd:5f:8b:b2:4b:bd:c0:b2:cc:04:fc:bf:f9:
72:8e:c9:98:58:9e:f9:ee:9b:9d:50:75:6a:93:0a:66:79:9f:
63:68:f0:ec:82:66:90:df:2e:d7:c5:7e:85:7f:32:d2:83:f8:
45:5b:71:22:50:b6:18:0b:c7:4f:9e:1f:ef:7b:53:8b:a7:44:
ee:0e:f9:e9:68:fd:66:ae:de:63:40:92:6a:58:4d:ca:64:e4:
d4:b6:b3:0b:27:fe:1c:8c:55:d6:54:05:70:38:60:51:73:4f:
74:da:d3:1d:f1:1d:6c:20:7f:09:ea:70:3b:26:98:67:40:f9:
ce:11:7e:16:9b:e1:9c:f0:ce:88:05:b1:20:e2:53:f3:8d:19:
84:ad:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:43 2026 by rpki-client