This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/uxDJB12DNyUznvU-5izMHQhLDKk.roa
File: uxDJB12DNyUznvU-5izMHQhLDKk.roa (raw, json)
Hash identifier: 19KdMCs9itOqCqABKQANRkdOGOoJewxdnsoxwklI2ds=
Subject key identifier: BB:10:C9:07:5D:83:37:25:33:9E:F5:3E:E6:2C:CC:1D:08:4B:0C:A9
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019B78A35FAF0C2D4AA7B48B30A5F4454D00
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/uxDJB12DNyUznvU-5izMHQhLDKk.roa
Signing time: Thu 01 Jan 2026 08:18:51 +0000
ROA not before: Thu 01 Jan 2026 08:18:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197336
IP address blocks: 5.134.64.0/23 maxlen: 23
46.31.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:5f:af:0c:2d:4a:a7:b4:8b:30:a5:f4:45:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jan 1 08:18:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb10c9075d833725339ef53ee62ccc1d084b0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:73:a1:03:1b:71:75:ae:08:1a:c3:5f:61:
02:49:92:20:a8:44:9e:29:69:37:d7:1c:f5:20:03:
15:91:15:d9:e8:8d:7b:b7:d5:f3:08:d0:0e:91:82:
57:fe:23:32:16:ef:33:18:24:5b:60:99:85:8f:77:
46:ce:b8:50:44:64:d5:62:f7:1a:0f:c7:1a:c5:be:
48:a1:eb:bc:cb:3e:5d:aa:cf:9d:a1:94:52:92:91:
ae:26:c4:41:03:40:04:ea:38:4e:d6:4b:0d:57:be:
4e:15:6b:be:93:cd:8f:f8:82:d8:81:e7:dd:e6:90:
96:9d:6f:1d:33:28:5c:4f:a8:ae:39:f6:5b:a3:82:
9f:bc:12:73:e3:d9:06:43:6e:86:a5:95:0c:98:93:
26:e4:2c:a6:6a:a8:b6:fa:67:80:1b:a4:a9:5d:25:
95:38:5b:c9:f2:3b:af:99:1e:6a:e1:72:c7:96:3a:
08:1d:00:73:1f:66:64:98:52:fb:eb:b2:e6:e5:c0:
5e:08:a6:61:f8:b3:3d:90:13:28:4a:e5:a7:f7:b1:
b5:e1:b1:7f:5a:a1:bb:b3:3e:da:2b:3e:0e:db:45:
20:37:25:9b:5b:60:00:fc:93:97:14:6e:cf:39:04:
88:d9:ec:a4:ce:d5:52:37:85:88:37:b5:46:6f:9e:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:C9:07:5D:83:37:25:33:9E:F5:3E:E6:2C:CC:1D:08:4B:0C:A9
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/uxDJB12DNyUznvU-5izMHQhLDKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.64.0/23
46.31.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:67:18:6e:72:f8:6e:45:aa:46:d4:8d:be:39:59:00:95:d3:
b9:32:70:ce:8e:7c:3f:e0:9b:d3:0c:34:1f:b1:43:18:41:a3:
c2:97:a0:02:9a:5c:2e:07:90:09:aa:f4:0e:67:01:4e:25:d5:
7d:ba:5f:9f:20:53:58:f7:28:66:f6:b9:62:7a:28:f3:56:33:
24:cd:5e:93:5e:14:22:15:b3:66:67:6c:a7:bf:89:75:a1:88:
60:f7:0a:d7:01:eb:c2:b4:0a:17:3d:f9:83:ea:43:b8:9b:3c:
a6:5f:c7:ef:88:83:ce:0b:d8:48:07:6b:a5:99:9c:f5:17:03:
de:0f:1a:0e:80:55:2c:db:32:a4:f5:06:f1:d6:01:08:67:d5:
cd:f9:39:1f:e4:16:09:f4:bc:20:f9:41:66:c6:f4:bf:8e:68:
df:b9:60:af:30:67:88:07:7c:2b:01:1f:2f:43:c2:f9:88:09:
48:82:69:a3:3e:03:13:0e:2c:f4:03:4c:f8:83:0e:13:99:79:
c3:31:c1:d8:88:53:66:ee:fb:23:e0:39:62:02:cc:bc:cc:ab:
17:6d:20:61:81:65:c1:aa:86:7b:86:70:cc:85:62:fb:9d:e5:
46:70:bd:75:e1:aa:85:9a:b2:80:96:7a:81:75:d2:3d:e9:3b:
9a:03:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:17 2026 by rpki-client