This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jjtq59Uduc7d_qfekzKzU7R91t4.roa
File: Jjtq59Uduc7d_qfekzKzU7R91t4.roa (raw, json)
Hash identifier: fw/jUWtU8lYHkoAajXiZAXac1SwN2FLM2K4SMWNMiDA=
Subject key identifier: 26:3B:6A:E7:D5:1D:B9:CE:DD:FE:A7:DE:93:32:B3:53:B4:7D:D6:DE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B0C1E4C70992DFF9A3D22027FE97CEE50
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jjtq59Uduc7d_qfekzKzU7R91t4.roa
Signing time: Thu 11 Dec 2025 06:34:30 +0000
ROA not before: Thu 11 Dec 2025 06:34:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215539
IP address blocks: 93.170.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0c:1e:4c:70:99:2d:ff:9a:3d:22:02:7f:e9:7c:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 11 06:34:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=263b6ae7d51db9ceddfea7de9332b353b47dd6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:e7:c9:f7:59:22:f2:5a:b9:6c:4c:f1:79:
08:c2:6a:73:e0:5c:e9:ad:b1:e2:ac:d7:36:3e:7b:
75:67:d2:fb:33:73:8e:fc:a8:3b:f7:24:1c:1e:3d:
86:3f:2a:4e:70:5b:24:65:79:d9:5d:6b:9a:09:d4:
b8:6d:ea:1d:26:f2:37:99:30:51:34:bb:44:89:13:
ca:bf:9e:c7:cf:eb:8b:70:3d:dd:a5:6f:6a:df:3e:
b1:aa:af:a0:86:df:13:2f:e4:a4:30:b4:d2:c2:f1:
e9:45:3f:e5:e0:bc:3c:e0:2a:b7:81:df:23:bb:50:
ab:25:70:ff:38:04:f2:d6:17:95:7f:e1:5f:e5:54:
c6:f8:4d:d0:ac:f2:71:2c:cd:4c:a2:0b:76:fc:10:
ef:28:41:c7:b0:37:57:0e:67:a4:0e:da:51:99:a4:
f7:5f:b8:6c:27:b2:8e:fd:3a:ee:c9:5e:5e:1e:d0:
eb:f5:11:fe:03:d3:8b:09:44:51:76:98:c1:2c:8c:
40:5c:58:bc:ab:34:d8:0b:6e:fe:de:de:ec:9d:e6:
8c:ae:51:86:80:22:ce:bb:1a:a4:a3:96:be:bf:58:
d4:90:c1:b1:f0:e5:be:72:ef:33:b8:b7:4b:69:15:
9a:5e:9d:84:a9:35:69:01:18:ee:f0:43:0b:37:34:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:6A:E7:D5:1D:B9:CE:DD:FE:A7:DE:93:32:B3:53:B4:7D:D6:DE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jjtq59Uduc7d_qfekzKzU7R91t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7c:b0:87:0f:11:88:41:81:46:db:47:8b:3b:ab:5f:45:4d:
7b:dc:f9:73:2f:c2:d4:15:bb:42:65:1f:f5:6b:51:ef:bc:d0:
5c:ad:b9:92:64:43:67:72:d5:1f:c4:31:f7:7d:01:c4:43:fa:
d5:94:ba:e2:d8:af:7e:54:83:cc:c0:fd:8b:8f:20:de:d9:66:
d1:89:b3:5d:3a:7d:d6:51:88:07:8f:99:89:d9:40:0b:4c:1d:
17:cd:55:c1:10:62:5d:0b:7f:02:04:75:58:5e:ad:c7:60:ca:
7d:5f:62:5b:22:e8:17:25:62:08:16:62:11:b8:da:04:1c:42:
24:31:b7:04:ca:9e:92:4f:db:ee:b2:c4:52:18:bb:6e:03:cf:
df:ff:83:83:0c:3d:ca:62:f0:24:83:a2:c5:cf:70:8c:24:a5:
93:72:3b:03:82:da:c7:e5:eb:82:68:8a:db:ed:c8:7a:b4:81:
06:30:e8:29:fb:64:a0:9f:8a:c2:59:91:eb:b4:38:07:c9:27:
7c:61:ea:03:2f:a9:b9:1a:e2:70:05:9a:8a:c9:bd:40:b0:d5:
73:6c:fb:c7:b2:26:20:68:cd:1d:71:9a:eb:84:0e:cc:d4:fa:
00:2d:6e:ed:c8:75:e6:6f:d4:49:c9:da:e5:6b:a5:56:04:a5:
3b:0e:91:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZsMHkxwmS3/mj0iAn/pfO5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUxMjExMDYzNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjNiNmFlN2Q1MWRiOWNlZGRmZWE3ZGU5MzMyYjM1M2I0N2RkNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSDnyfdZIvJauWxM8XkIwmpz4Fzp
rbHirNc2Pnt1Z9L7M3OO/Kg79yQcHj2GPypOcFskZXnZXWuaCdS4beodJvI3mTBR
NLtEiRPKv57Hz+uLcD3dpW9q3z6xqq+ght8TL+SkMLTSwvHpRT/l4Lw84Cq3gd8j
u1CrJXD/OATy1heVf+Ff5VTG+E3QrPJxLM1Mogt2/BDvKEHHsDdXDmekDtpRmaT3
X7hsJ7KO/TruyV5eHtDr9RH+A9OLCURRdpjBLIxAXFi8qzTYC27+3t7sneaMrlGG
gCLOuxqko5a+v1jUkMGx8OW+cu8zuLdLaRWaXp2EqTVpARju8EMLNzQG4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCY7aufVHbnO3f6n3pMys1O0fdbeMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvSmp0cTU5VWR1YzdkX3FmZWt6S3pVN1I5MXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXapkMA0G
CSqGSIb3DQEBCwUAA4IBAQCkfLCHDxGIQYFG20eLO6tfRU173PlzL8LUFbtCZR/1
a1HvvNBcrbmSZENnctUfxDH3fQHEQ/rVlLri2K9+VIPMwP2LjyDe2WbRibNdOn3W
UYgHj5mJ2UALTB0XzVXBEGJdC38CBHVYXq3HYMp9X2JbIugXJWIIFmIRuNoEHEIk
MbcEyp6ST9vussRSGLtuA8/f/4ODDD3KYvAkg6LFz3CMJKWTcjsDgtrH5euCaIrb
7ch6tIEGMOgp+2Sgn4rCWZHrtDgHySd8YeoDL6m5GuJwBZqKyb1AsNVzbPvHsiYg
aM0dcZrrhA7M1PoALW7tyHXmb9RJydrla6VWBKU7DpGw
-----END CERTIFICATE-----
Generated at Thu Dec 18 20:49:39 2025 by rpki-client