This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa
File: jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa (raw, json)
Hash identifier: qJzUahRGOfAEVZDxyvqsA7Ss9HiymeHgWnFp8HMjVVs=
Subject key identifier: 8D:70:4B:A4:E7:6B:A5:22:B5:99:07:70:66:4A:32:25:D2:44:7D:52
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019B78A331E8C9D9EE68BFE0C6B1EC43CEBF
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa
Signing time: Thu 01 Jan 2026 08:18:39 +0000
ROA not before: Thu 01 Jan 2026 08:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398779
IP address blocks: 5.183.78.0/24 maxlen: 24
45.14.114.0/24 maxlen: 24
147.189.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:31:e8:c9:d9:ee:68:bf:e0:c6:b1:ec:43:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 08:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d704ba4e76ba522b5990770664a3225d2447d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:14:e6:2e:1c:c1:4e:90:b6:82:75:12:95:
5c:da:fb:51:fc:2c:74:cd:3b:9e:38:75:29:33:49:
a5:cd:09:d6:8c:60:a3:29:e6:1d:29:b4:0a:4a:a6:
01:e2:f6:a8:0d:22:2c:40:36:fc:a3:ab:3f:ae:77:
aa:ee:1e:bf:7d:b0:d9:79:cc:8d:55:51:57:cf:5d:
27:96:93:a6:cd:69:39:85:69:7d:6d:31:c0:eb:e2:
b1:c1:e1:30:75:b1:04:a9:8e:46:90:1f:50:a5:36:
30:96:84:85:87:54:84:4e:fb:6d:4b:1d:c7:14:1b:
eb:ac:42:b4:09:a4:11:f4:38:28:35:a5:06:a6:65:
7e:91:e0:bc:2e:a8:66:13:d3:39:c3:ac:f8:3b:96:
37:d7:06:76:15:6a:91:fc:05:d7:96:7c:7d:e5:56:
51:df:49:76:d5:aa:1b:b9:1e:1b:1d:6a:30:07:f0:
02:f2:f1:56:39:1b:0b:c2:13:78:20:03:ff:26:2f:
19:63:86:bf:f0:ac:dc:d6:37:7e:e5:a6:94:22:86:
24:f1:72:47:d8:bc:19:7a:3b:e3:31:db:9d:c5:15:
b5:79:90:9f:8d:02:7c:52:36:6a:3b:1d:f8:e0:72:
86:8f:e6:e3:8c:6b:11:01:df:5c:49:96:61:34:fd:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:4B:A4:E7:6B:A5:22:B5:99:07:70:66:4A:32:25:D2:44:7D:52
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/jXBLpOdrpSK1mQdwZkoyJdJEfVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.78.0/24
45.14.114.0/24
147.189.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9e:25:6b:52:0a:00:dd:04:34:21:56:35:02:5d:25:5f:79:
9a:be:39:e3:39:01:1f:2f:2f:f9:22:63:e5:92:1d:fd:0c:fa:
59:2e:97:5e:ba:3f:54:0c:cd:90:d8:a9:01:81:79:e2:6b:a1:
8d:5e:b1:b6:e9:c9:d2:8e:00:67:4c:9b:4b:95:3d:5e:9f:5d:
c5:7d:48:86:05:8c:ea:d7:dc:37:df:64:14:a3:68:d7:df:c5:
9c:b1:72:6c:c3:fc:ef:c6:1a:2f:4f:14:03:17:db:31:03:94:
29:79:be:da:eb:d5:33:30:82:37:c6:e4:f9:71:b7:ef:f1:35:
e0:13:a1:b3:d0:91:e2:2d:9e:61:27:d9:a2:87:2b:35:3f:5a:
db:ca:67:39:02:33:d0:9c:99:e2:96:67:7f:da:77:39:52:77:
02:3d:85:93:ca:66:7d:ad:72:a8:b4:c4:0f:5b:80:22:fd:ae:
c3:7c:a0:e7:ba:20:06:d0:84:7a:79:8c:cd:ee:af:30:40:98:
70:02:a1:47:4f:af:6b:a3:b1:ed:ee:a5:bb:b4:6c:3d:ac:11:
2e:2a:98:c0:dd:fb:b2:fe:e7:f5:1c:3e:75:76:42:6b:1a:8b:
9f:e6:b0:b9:52:5a:58:a3:0e:06:2e:0e:fa:05:da:99:6a:98:
61:36:dc:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:36 2026 by rpki-client