This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa
File: UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa (raw, json)
Hash identifier: 1nK47WRZwAvKB9ouMkN1V/iLxMpccr6CTRWd93nbh9I=
Subject key identifier: 51:5E:6C:0B:82:B5:FF:51:7E:CF:87:56:F4:F3:20:3C:A1:E2:E2:2C
Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial: 019B7BA52272332784C46E99A5580CD62971
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa
Signing time: Thu 01 Jan 2026 22:19:38 +0000
ROA not before: Thu 01 Jan 2026 22:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197889
IP address blocks: 89.107.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:22:72:33:27:84:c4:6e:99:a5:58:0c:d6:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Validity
Not Before: Jan 1 22:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=515e6c0b82b5ff517ecf8756f4f3203ca1e2e22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:f6:07:0f:27:2b:b7:c1:36:4e:6b:76:46:
49:24:7f:47:95:6b:76:9d:00:a4:58:2b:5a:c7:da:
64:e8:9c:07:0c:c3:f1:a6:6b:d7:8e:10:23:98:fb:
76:29:d0:08:9a:0e:a8:ba:45:c9:38:fd:22:5c:87:
01:c5:97:27:63:11:01:79:9e:4c:a3:10:52:45:12:
ac:bd:60:6d:0a:6d:11:46:3e:67:d7:12:67:02:8a:
a0:47:80:45:2f:4f:2c:b6:54:6f:d8:c4:bf:6a:e7:
1d:06:57:74:29:a7:05:7b:02:eb:fd:ce:a3:89:9a:
ae:d5:95:36:bb:7c:18:e8:5d:4a:08:fd:4f:ec:4c:
b9:c6:71:13:28:62:7f:1c:03:db:3b:7a:ee:fd:7b:
fd:bf:ea:1e:16:c6:38:2f:70:d1:d8:3c:91:56:60:
d2:d9:a6:ab:5c:3d:44:10:7d:e8:93:dd:da:c7:d9:
37:0e:8f:8c:ef:99:d8:37:ee:cb:07:d7:23:da:01:
86:91:d1:20:41:59:1a:4f:4c:26:b7:a0:1b:6f:d0:
a4:da:4a:ad:79:0a:a1:09:e4:fa:aa:8e:d9:7d:d4:
3e:67:11:3e:db:6b:38:f1:8f:52:f0:b5:cf:4e:92:
1e:a9:76:d0:69:45:98:68:22:f2:6f:c2:73:4f:0f:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:6C:0B:82:B5:FF:51:7E:CF:87:56:F4:F3:20:3C:A1:E2:E2:2C
X509v3 Authority Key Identifier:
keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/UV5sC4K1_1F-z4dW9PMgPKHi4iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:67:87:29:c5:af:66:2b:70:71:b6:17:c0:cf:5c:5c:78:2a:
4d:81:ce:3e:da:75:27:0d:ed:d9:21:06:71:4d:32:95:33:6d:
37:ee:58:c3:e4:9a:03:3d:e2:36:aa:5f:bf:74:42:50:98:d7:
31:63:7b:67:bd:31:b8:4f:c4:aa:fe:78:d0:46:64:6a:a2:8c:
30:65:4d:c2:2d:8d:62:be:1e:31:33:56:4c:fa:db:69:50:43:
7f:d6:4f:be:11:26:81:65:8e:d9:51:d2:62:d7:e9:42:6f:08:
1d:12:e1:a7:11:a9:3a:75:29:3b:c5:b9:7c:8e:dc:55:d2:73:
26:d1:34:b2:fe:ea:e3:c2:87:ac:bc:06:5e:d4:5a:94:af:2c:
f8:c2:e9:a8:fb:71:09:71:32:73:84:34:77:90:bc:d7:09:5e:
d4:83:bf:ff:32:45:59:16:2b:a7:5e:53:0f:50:8d:10:e1:12:
27:78:64:22:63:f9:fb:8c:9d:2a:02:20:29:d4:1d:c4:09:5f:
6b:42:65:f5:85:e0:5a:24:12:34:cb:3f:1b:d7:6d:1b:31:79:
f8:84:4d:cf:2c:02:a9:12:f3:0b:54:fd:25:23:64:57:50:90:
42:5d:04:0a:e2:77:01:0d:cd:dd:08:6a:df:b6:78:12:c0:66:
05:fe:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:31 2026 by rpki-client