This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa
File: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (raw, json)
Hash identifier: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=
Subject key identifier: B7:BF:71:6A:9F:F5:02:2D:5E:20:30:15:37:FA:1B:80:E0:31:87:C2
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019B797DE37BA7F7A4C555EF5F1C7EF4DCB3
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa
Signing time: Thu 01 Jan 2026 12:17:31 +0000
ROA not before: Thu 01 Jan 2026 12:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134187
IP address blocks: 103.57.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e3:7b:a7:f7:a4:c5:55:ef:5f:1c:7e:f4:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 12:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7bf716a9ff5022d5e20301537fa1b80e03187c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:b5:ef:8d:0b:55:47:c0:0e:80:41:51:8e:
0a:65:cc:96:4f:d2:d9:9a:69:68:07:93:c6:21:a4:
d8:e1:ce:07:51:0e:91:4b:23:89:c5:01:f5:a0:47:
9a:40:c6:5b:eb:cb:b8:89:f2:cb:4c:19:6c:28:97:
f8:1d:7f:0a:84:a0:a3:d7:2f:bc:13:48:dd:56:19:
d5:ee:e7:a9:99:18:3d:b5:c7:ec:69:a5:2f:be:2d:
5c:31:a1:5f:ab:e3:35:96:54:d3:2f:ba:24:62:93:
b3:78:b5:d1:0a:fa:d9:b9:ac:8f:82:74:d3:00:ab:
75:24:26:8f:32:2a:ff:22:63:2a:42:0b:2a:e9:1f:
a0:be:5d:ea:d3:bd:a4:36:24:35:9e:1d:85:a6:c9:
70:b0:fe:8e:28:67:9f:cd:6e:90:fe:a0:8d:8d:9f:
c5:12:1b:48:ff:4d:a5:7f:3b:65:d4:33:39:ad:2a:
63:59:2e:81:1f:4b:25:eb:77:80:d2:41:26:c4:1c:
ce:08:46:06:89:54:87:31:e5:91:3c:77:82:bb:dd:
34:8d:09:d4:6f:79:f8:8c:91:a7:e3:4e:2b:b0:10:
32:bd:5c:59:28:cc:2f:58:0f:9b:18:6e:20:2f:53:
e5:8a:69:d9:43:9f:be:81:52:9e:ba:d9:b6:0a:3b:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:71:6A:9F:F5:02:2D:5E:20:30:15:37:FA:1B:80:E0:31:87:C2
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/t79xap_1Ai1eIDAVN_obgOAxh8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.156.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a2:13:8e:f9:9b:c4:43:f5:06:c3:b5:59:40:9f:44:e0:47:
fa:9b:b5:ca:99:63:bf:1a:73:67:50:27:d9:ef:e3:f7:98:0e:
96:d0:53:99:69:2b:3f:fb:41:1c:e3:1f:94:79:6e:0a:72:94:
1e:49:3d:fe:84:7a:31:d4:bb:9b:ed:26:dc:d0:25:fd:cc:77:
c9:56:2a:33:8b:f9:c4:39:3e:2f:dc:71:90:e7:7d:df:a7:8d:
56:17:ce:0a:50:4d:88:11:ab:91:ce:25:8b:c4:bb:3d:49:3f:
e2:d0:d0:a1:cc:ae:2c:8e:c0:d8:63:2c:0a:22:15:9c:a3:6a:
8e:32:9e:64:90:99:1e:f4:e3:45:47:43:bf:64:43:cd:47:27:
b4:4d:ff:8d:2e:c8:97:4a:22:c7:df:01:e7:08:61:b0:27:88:
3f:2d:a7:9a:8b:39:a0:d8:1b:bf:c8:5b:92:f4:b8:36:80:e5:
82:a1:15:e2:95:d2:20:ce:29:f7:d9:75:91:ca:9a:b1:66:e9:
aa:08:a3:6c:20:c4:e4:8b:fd:a1:9f:38:0e:3e:5e:6f:b8:db:
ef:92:99:2c:50:e6:8e:6b:55:b0:bc:e6:a2:56:e7:63:a3:20:
b1:e8:f2:22:1e:1e:e7:5c:cc:5b:e5:f8:cc:45:3a:14:d2:7b:
2a:da:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:18 2026 by rpki-client