This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa
File: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (raw, json)
Hash identifier: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=
Subject key identifier: 25:D9:08:43:28:26:85:0A:9C:2E:76:42:DB:F8:44:A2:78:D2:5F:94
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 019B7E385FD41C6696B070AA3984E615E90C
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa
Signing time: Fri 02 Jan 2026 10:19:42 +0000
ROA not before: Fri 02 Jan 2026 10:19:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61438
IP address blocks: 194.110.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:5f:d4:1c:66:96:b0:70:aa:39:84:e6:15:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Jan 2 10:19:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d908432826850a9c2e7642dbf844a278d25f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:8e:1d:ea:6f:b6:27:cd:e5:07:40:1e:b7:
21:25:16:17:cb:b9:52:88:55:59:c8:64:74:61:88:
b8:8a:f7:11:c9:b1:23:e2:2b:9c:e0:8a:62:52:8b:
cd:53:c2:2f:7f:b3:cc:7c:aa:0f:95:54:c5:c9:d4:
bc:ae:7b:50:5d:32:06:5c:47:bf:30:ec:8a:40:d6:
e5:06:79:30:97:9a:e5:11:8b:68:6e:a7:86:3e:81:
e5:98:aa:ed:f2:f5:f9:35:d0:30:7f:5c:5b:2d:39:
09:af:f4:7b:2a:56:88:96:fc:21:75:69:bb:3b:4d:
eb:49:c5:47:d0:b3:41:b0:6e:a2:bd:b8:e9:c1:e2:
92:b0:4a:c0:d6:d4:df:96:9c:ef:24:be:76:df:ba:
c4:f1:da:30:90:2b:7e:5b:3b:2b:c1:bb:36:f0:21:
b2:6c:5a:94:4b:3c:70:95:40:e6:6f:94:5d:a8:71:
29:77:04:b5:f9:0a:3c:f1:d7:23:5e:55:bc:2b:f9:
ff:fd:28:f2:3a:ab:1f:50:8a:ad:73:86:d0:49:78:
a9:c5:07:c2:76:6e:84:2e:ff:84:e7:11:b2:ac:3b:
f3:b8:86:7f:a7:29:c6:a8:d3:73:25:3f:c2:8b:53:
3b:00:08:a5:3d:51:6d:21:0f:a5:8b:a9:f6:40:ae:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:08:43:28:26:85:0A:9C:2E:76:42:DB:F8:44:A2:78:D2:5F:94
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/JdkIQygmhQqcLnZC2_hEonjSX5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4c:f4:e6:69:b0:5f:c1:64:c0:6c:83:30:4b:73:1e:2e:37:
58:25:dc:42:19:21:c6:25:87:56:7a:9e:4b:1c:4e:52:d3:25:
32:7d:0f:d0:f4:12:7f:06:2a:82:84:48:6b:d0:7e:c9:81:b8:
e0:fc:e9:06:4c:01:72:59:9b:a1:77:0e:1f:ca:97:fb:d9:6c:
3e:3d:dc:e9:23:47:d0:75:69:d8:67:28:70:34:f5:17:d2:f5:
10:93:10:8c:75:48:6b:6e:5c:7f:3c:9b:66:f3:b3:cc:87:d5:
41:af:7f:27:3e:ff:c2:de:be:4c:3f:91:7e:6a:c8:be:8a:c1:
96:c5:af:3f:0f:43:e5:e5:46:2b:93:ef:5b:d8:98:7f:8f:80:
e0:db:bf:96:8b:af:e8:8b:58:06:99:f6:01:5c:fe:30:75:c3:
da:08:c0:f5:cb:2d:ea:ca:aa:3e:ea:fc:bc:b3:9a:d7:16:60:
64:1c:46:53:37:92:41:f7:9e:fb:c1:85:25:11:a1:a2:8f:7f:
a2:6e:56:19:d5:28:a1:11:da:a4:0e:af:81:7c:fd:42:7e:8e:
2a:1b:3d:53:14:82:d3:b1:ca:76:7f:39:52:9f:98:fa:a1:1f:
29:fa:90:58:d7:63:9a:52:a7:db:b4:e5:52:2f:08:34:14:bd:
57:47:c7:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OF/UHGaWsHCqOYTmFekMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjliNGYwMzliYzgyODYwMWMzOGUwZWFkNGMxOTVhYmJk
ZmZlNjMwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWQ5MDg0MzI4MjY4NTBhOWMyZTc2NDJkYmY4NDRhMjc4ZDI1Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7KOHepvtifN5QdAHrchJRYXy7lS
iFVZyGR0YYi4ivcRybEj4iuc4IpiUovNU8Ivf7PMfKoPlVTFydS8rntQXTIGXEe/
MOyKQNblBnkwl5rlEYtobqeGPoHlmKrt8vX5NdAwf1xbLTkJr/R7KlaIlvwhdWm7
O03rScVH0LNBsG6ivbjpweKSsErA1tTflpzvJL5237rE8dowkCt+Wzsrwbs28CGy
bFqUSzxwlUDmb5RdqHEpdwS1+Qo88dcjXlW8K/n//SjyOqsfUIqtc4bQSXipxQfC
dm6ELv+E5xGyrDvzuIZ/pynGqNNzJT/Ci1M7AAilPVFtIQ+li6n2QK6xvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXZCEMoJoUKnC52Qtv4RKJ40l+UMB8GA1UdIwQY
MBaAFKS5tPA5vIKGAcOODq1MGVq73/5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQt
OGNjNmQxOTIzMzViLzEvSmRrSVF5Z21oUXFjTG5aQzJfaEVvbmpTWDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81NmExNjMtOWNjYi00MTMxLTk3MmQtOGNjNmQxOTIzMzVi
LzEvcExtMDhEbThnb1lCdzQ0T3JVd1pXcnZmX21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm49MA0G
CSqGSIb3DQEBCwUAA4IBAQAcTPTmabBfwWTAbIMwS3MeLjdYJdxCGSHGJYdWep5L
HE5S0yUyfQ/Q9BJ/BiqChEhr0H7Jgbjg/OkGTAFyWZuhdw4fypf72Ww+PdzpI0fQ
dWnYZyhwNPUX0vUQkxCMdUhrblx/PJtm87PMh9VBr38nPv/C3r5MP5F+asi+isGW
xa8/D0Pl5UYrk+9b2Jh/j4Dg27+Wi6/oi1gGmfYBXP4wdcPaCMD1yy3qyqo+6vy8
s5rXFmBkHEZTN5JB9577wYUlEaGij3+iblYZ1SihEdqkDq+BfP1Cfo4qGz1TFILT
scp2fzlSn5j6oR8p+pBY12OaUqfbtOVSLwg0FL1XR8cy
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:25:04 2026 by rpki-client