This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jIErjBv4bHsu41MjOA0shO_vyj4.roa
File: jIErjBv4bHsu41MjOA0shO_vyj4.roa (raw, json)
Hash identifier: bwwaPoZH0OKbIcvusR1D8Isx0CP0tMQ/CxFkxTG7ZIw=
Subject key identifier: 8C:81:2B:8C:1B:F8:6C:7B:2E:E3:53:23:38:0D:2C:84:EF:EF:CA:3E
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 019B7EA7068D6914FFEA3973DF74ECDCE0B6
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jIErjBv4bHsu41MjOA0shO_vyj4.roa
Signing time: Fri 02 Jan 2026 12:20:33 +0000
ROA not before: Fri 02 Jan 2026 12:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60522
IP address blocks: 194.76.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:06:8d:69:14:ff:ea:39:73:df:74:ec:dc:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Jan 2 12:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c812b8c1bf86c7b2ee35323380d2c84efefca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:bf:56:b6:a3:83:33:c1:ab:44:b5:e5:94:
dc:46:7d:63:e9:91:7c:73:1a:42:83:21:ee:f7:86:
7b:5f:16:0b:65:e6:3e:c9:3a:7e:00:f9:3e:23:10:
0a:f5:48:b9:d5:b9:99:df:d9:8a:ef:6b:9d:36:32:
83:ac:8e:c6:54:de:81:ef:6a:28:87:4c:56:76:38:
3b:89:0f:35:5c:f3:09:42:a1:19:d4:2d:dd:72:d3:
33:b4:3e:43:b4:3d:74:b1:57:b2:84:4a:e3:59:28:
c5:ac:1d:ee:8e:cc:76:aa:3d:dd:7e:e0:82:bc:8a:
1c:d4:90:4e:47:40:05:ff:8d:08:dc:bf:59:08:97:
6d:f0:c7:3f:3b:cd:11:1d:69:57:23:c1:09:35:ac:
a5:9d:5f:eb:26:58:50:ef:ef:09:54:e9:1f:85:ff:
44:21:89:2c:b9:eb:25:0b:e2:1e:af:fd:83:95:4f:
3a:2d:0e:49:c2:27:be:61:93:36:15:3b:00:9c:e1:
6d:9f:56:33:4e:8c:2e:27:45:98:a9:39:e6:4b:b0:
9d:5d:f9:94:eb:39:39:ee:54:ce:90:c1:2b:f0:c6:
d9:42:41:bc:bb:8a:01:2f:4b:f8:15:c4:58:02:d4:
43:cb:ff:e5:56:84:6a:44:27:2b:47:54:1e:be:bc:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:2B:8C:1B:F8:6C:7B:2E:E3:53:23:38:0D:2C:84:EF:EF:CA:3E
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jIErjBv4bHsu41MjOA0shO_vyj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.14.0/24
Signature Algorithm: sha256WithRSAEncryption
63:89:2c:2f:bb:e5:6f:48:24:c4:cb:72:b8:61:03:49:95:5d:
3c:3b:e0:30:6a:68:88:c9:55:ee:73:9e:c1:9d:38:e8:e1:e3:
21:f9:2b:60:72:89:45:7a:0b:b0:64:7a:0e:53:ce:b3:83:9b:
42:bc:22:cb:a6:e1:2f:f5:22:b2:72:0b:d5:9f:fa:8d:0e:57:
15:16:01:27:b6:64:47:69:85:3d:6a:28:7a:a8:2d:b1:72:d2:
93:d8:8c:1b:e7:91:f9:3d:3d:15:99:5b:97:c7:14:6f:8f:9d:
03:4f:28:6b:d6:5c:61:fc:e5:5d:04:f3:a1:20:90:86:80:04:
e3:7d:31:c4:55:81:03:20:04:48:c4:19:62:e2:b9:35:2e:43:
57:e9:f2:b2:68:d7:6b:14:fd:b7:79:be:89:42:1d:c4:f3:9a:
d2:12:d9:b4:ec:29:14:91:0c:da:04:09:e6:b2:bf:4f:38:05:
22:d2:6b:e0:77:5d:f0:96:64:c5:3f:08:9d:16:d4:72:19:96:
d6:55:37:42:07:b4:d5:f1:2f:ac:a8:20:0c:5f:59:64:1a:d3:
b2:8f:33:21:90:25:c8:ac:fc:78:13:46:26:1e:e4:ae:37:e3:
28:91:cb:88:d7:f7:50:bd:a4:af:cd:a6:86:24:39:c4:67:97:
11:25:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:44 2026 by rpki-client