This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa
File: JwgnOTRAlCXt1K7at1wAyMz7bd8.roa (raw, json)
Hash identifier: lBC8tzOboiP4jQAHCC/omLvaunl3BvP+L/B2M2ocu+A=
Subject key identifier: 27:08:27:39:34:40:94:25:ED:D4:AE:DA:B7:5C:00:C8:CC:FB:6D:DF
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 019A95F9F4FE5FAB2DEB385495E00321FDD4
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa
Signing time: Tue 18 Nov 2025 07:59:37 +0000
ROA not before: Tue 18 Nov 2025 07:59:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206596
IP address blocks: 185.181.180.0/22 maxlen: 22
185.181.180.0/23 maxlen: 23
185.181.180.0/24 maxlen: 24
185.181.180.0/25 maxlen: 25
185.181.180.128/25 maxlen: 25
185.181.181.0/24 maxlen: 24
185.181.182.0/23 maxlen: 23
185.181.182.0/24 maxlen: 24
185.181.183.0/24 maxlen: 24
2a06:1cc0::/48 maxlen: 48
2a06:1cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:95:f9:f4:fe:5f:ab:2d:eb:38:54:95:e0:03:21:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Nov 18 07:59:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2708273934409425edd4aedab75c00c8ccfb6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:99:fe:93:b7:c6:61:09:13:76:7d:4a:a3:
31:90:e0:cc:e9:27:d3:fb:16:ee:70:30:67:7e:03:
97:56:fd:8e:9f:cc:f4:59:6e:93:e5:6e:57:62:e3:
a8:22:ab:00:3c:d1:a7:bf:d3:40:da:ae:b0:59:48:
2f:31:58:0f:a2:fd:8a:a5:f8:fa:92:ae:79:73:51:
34:f1:69:ad:bc:d4:58:50:51:98:50:e3:b6:a4:32:
01:4d:3a:0e:c0:72:9a:32:17:82:ad:af:17:e0:65:
ad:50:e6:12:f6:5a:4f:87:d7:83:f4:7a:77:38:6c:
88:b4:bd:84:30:82:86:d7:40:3d:3e:da:30:20:60:
d7:34:fc:be:f3:af:96:2f:6f:4e:19:1c:ee:14:02:
5f:57:af:cb:70:f0:01:11:1f:cc:85:53:8d:e2:b2:
72:c5:08:9c:90:06:1b:9b:c8:45:4e:bb:be:cf:16:
39:64:d8:ee:6a:60:19:a0:17:f2:0b:13:e3:d7:bb:
32:5d:60:63:8e:da:c6:81:26:d3:a6:ee:2f:8a:f9:
8f:26:3a:5d:9b:b3:85:52:e1:b4:e9:d4:28:68:b5:
75:0e:0a:43:c1:d7:86:2f:00:97:a0:2a:f8:2d:f7:
8b:91:78:46:d5:59:f1:dd:75:3d:d3:57:79:63:ad:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:27:39:34:40:94:25:ED:D4:AE:DA:B7:5C:00:C8:CC:FB:6D:DF
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JwgnOTRAlCXt1K7at1wAyMz7bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.180.0/22
IPv6:
2a06:1cc0::/47
Signature Algorithm: sha256WithRSAEncryption
14:62:03:0f:e0:36:57:e1:80:53:7a:ac:53:b3:be:81:2b:1a:
d8:5d:28:03:02:4f:37:18:7d:5d:a3:d2:0f:e7:3a:36:a3:fe:
c4:96:e0:c0:08:6e:7e:b5:82:0b:d3:e8:d1:f1:45:33:7e:6d:
39:1f:11:e4:2b:05:85:ec:50:c2:4c:28:69:51:17:f8:00:90:
fc:18:f6:bb:9c:10:9d:57:bd:1f:53:dd:08:f0:4e:76:a6:02:
b6:cd:48:20:c2:43:c0:ac:d1:5f:f5:20:36:00:67:74:9d:53:
93:55:26:4a:c1:53:58:a6:bc:0b:bb:67:62:b6:01:04:c0:5f:
16:5d:43:49:3a:97:ea:c1:9b:80:65:69:de:62:96:69:e8:8e:
b0:5b:67:d9:81:39:b4:84:6a:50:cd:fe:f7:94:5d:3d:47:84:
a1:e3:8c:28:5e:96:79:64:aa:52:45:d0:c4:af:6a:17:91:36:
1e:c2:b2:9b:a7:ca:ae:a6:e1:ec:3f:2b:3c:1b:8b:51:55:28:
4c:a8:39:1f:56:11:f8:e1:be:1c:bf:04:8d:db:56:f5:d1:a1:
82:ba:80:46:77:dd:dd:ef:03:a4:04:49:9f:d4:8e:75:d1:58:
e0:77:52:c7:54:ea:91:df:c1:b0:52:7a:cc:84:c4:2d:83:c7:
ec:30:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:47:01 2025 by rpki-client