This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/PXdVrTfvOREuwYCi1hBh_drpxXc.roa
File: PXdVrTfvOREuwYCi1hBh_drpxXc.roa (raw, json)
Hash identifier: B/ByN/OVMs5NKQAves3njbZUv4VZGqQ3E5hohAeKtx4=
Subject key identifier: 3D:77:55:AD:37:EF:39:11:2E:C1:80:A2:D6:10:61:FD:DA:E9:C5:77
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 019B7B36BCA880DC015AC37137655AF29D20
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/PXdVrTfvOREuwYCi1hBh_drpxXc.roa
Signing time: Thu 01 Jan 2026 20:19:03 +0000
ROA not before: Thu 01 Jan 2026 20:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209050
IP address blocks: 5.183.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:bc:a8:80:dc:01:5a:c3:71:37:65:5a:f2:9d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Jan 1 20:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d7755ad37ef39112ec180a2d61061fddae9c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:3b:ae:be:8a:e0:82:47:3f:9a:81:28:79:
72:38:50:42:af:61:35:e2:70:6a:ef:0e:78:16:45:
24:63:fe:8c:2a:32:2a:d9:e6:b1:d9:23:0e:e3:cb:
dc:eb:66:df:5b:50:37:be:e9:e8:05:80:a9:3d:56:
88:6e:bd:b4:b4:f6:6d:e9:73:a5:48:ce:cb:fb:74:
79:c4:86:ae:61:71:dc:90:75:39:5e:bf:5f:ba:8f:
5e:89:85:3b:24:3d:a2:6b:d4:0f:95:01:7e:30:0d:
c5:77:14:bf:a4:3f:57:db:f1:0b:4f:93:ba:68:1f:
70:e6:17:79:e7:58:f4:fb:72:41:fb:8d:c9:73:2c:
09:d6:13:55:3f:7e:d4:a9:c5:56:02:bd:96:b4:f2:
30:05:29:00:f8:0f:64:b9:5b:9f:3c:d5:b3:b2:31:
34:73:a0:91:4f:65:2a:81:94:72:64:23:0e:75:d2:
96:68:f1:13:9c:c8:5b:3b:f7:42:cb:95:be:12:58:
7b:d5:9d:70:d8:bc:9f:c7:8a:7c:10:11:64:c7:0b:
81:81:c4:c4:fc:a6:fd:6d:db:65:39:fd:31:ff:33:
3a:3d:ab:46:34:91:0d:f9:e2:a4:b4:64:47:45:46:
fc:37:40:64:bc:6b:b3:88:14:78:f7:50:d7:5a:04:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:55:AD:37:EF:39:11:2E:C1:80:A2:D6:10:61:FD:DA:E9:C5:77
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/PXdVrTfvOREuwYCi1hBh_drpxXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8f:e5:f5:6d:a0:ca:e8:34:80:ca:7a:f3:53:0b:61:01:28:
8f:30:ca:bd:80:5e:af:ab:5a:36:d7:e3:71:77:27:94:06:dc:
f3:67:c4:ae:7f:9e:e5:b8:58:19:04:e1:08:07:47:cc:71:65:
87:69:f0:a2:f7:40:21:17:65:b2:80:8f:f8:db:04:05:aa:11:
50:2b:b6:d9:13:19:25:92:95:a4:88:11:07:ed:7c:8e:e5:13:
c2:39:0f:26:09:9c:c9:0a:35:8a:b5:26:00:b8:cb:86:e2:c6:
ce:6c:f8:16:71:aa:30:c0:31:bc:8a:eb:51:cb:e6:ba:59:4f:
46:6e:1f:81:08:0e:48:8a:ac:19:34:1b:7a:26:27:03:79:51:
57:f2:f1:21:25:f6:9e:a7:ff:53:58:ef:be:61:87:dc:e5:9e:
f5:2b:31:fe:e2:48:0a:c5:42:85:d4:e4:ed:ac:a9:41:b3:b5:
9f:ed:a0:f6:07:e4:57:77:61:4b:19:93:6b:dc:a2:f7:33:7e:
f1:6a:8f:32:73:ab:f2:25:70:1d:60:f5:d8:66:55:2b:c0:b9:
f7:22:6d:4e:d2:95:cd:b3:4b:08:8a:49:e1:0f:a6:22:81:1a:
50:58:ce:55:54:77:2b:f7:19:54:d0:7f:01:55:ae:a6:dc:68:
53:35:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:42 2026 by rpki-client