This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa
File: T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa (raw, json)
Hash identifier: oSBZkKDyohBJqXpHb4tTq8QcYaDSBgqUWsjkGIBouSU=
Subject key identifier: 4F:95:A5:1F:C8:B8:FD:EC:11:2D:DF:B3:33:2F:9C:82:69:B5:24:E7
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 019B7F153CF2B1A2133F50CB440E2BE7AA30
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa
Signing time: Fri 02 Jan 2026 14:20:56 +0000
ROA not before: Fri 02 Jan 2026 14:20:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:3c:f2:b1:a2:13:3f:50:cb:44:0e:2b:e7:aa:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jan 2 14:20:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f95a51fc8b8fdec112ddfb3332f9c8269b524e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:6d:92:6b:93:ac:e2:de:f2:92:b2:0d:cb:
a3:e9:ba:ad:6f:2f:e2:75:65:c0:64:bc:af:ed:cd:
7a:27:d4:07:9c:44:df:e7:90:ea:c3:9e:bc:9b:6d:
29:32:28:63:96:fa:c3:1e:2d:7f:8e:c2:a9:02:9f:
1d:44:b8:66:65:ce:3c:c3:80:10:ab:d2:bd:db:e5:
69:47:a1:29:ae:9e:11:a8:70:36:86:e4:e0:da:82:
82:4e:9b:06:da:5c:a2:46:b5:5e:32:41:24:00:d0:
70:d6:c3:d2:f6:af:82:30:0c:e1:b8:38:f7:d5:83:
c5:6b:89:79:5d:5d:f8:18:3b:be:c7:6d:01:05:4c:
62:d4:11:64:78:06:b2:4e:e2:7d:34:07:8e:eb:7a:
b8:18:44:c1:ae:a7:de:2b:65:d0:be:8a:74:bf:b1:
db:a2:7f:85:bc:bd:a4:a5:fc:72:17:2b:e3:68:08:
23:e6:b7:6c:16:6f:27:85:9d:f6:73:f5:cf:63:23:
e5:05:7d:d9:16:1c:b8:f6:d8:68:74:d2:36:54:d5:
31:f1:ed:59:fe:1b:c7:20:f1:ba:9a:13:7f:8e:b3:
4b:13:b8:41:b0:06:30:21:b1:7c:2e:96:a0:a7:71:
21:38:24:49:de:f9:ef:bc:3d:af:62:a6:e7:c4:d9:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:95:A5:1F:C8:B8:FD:EC:11:2D:DF:B3:33:2F:9C:82:69:B5:24:E7
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/T5WlH8i4_ewRLd-zMy-cgmm1JOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.170.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1d:0f:74:71:39:33:da:91:b2:1c:50:97:11:96:44:58:cd:
7f:8f:7d:ee:d3:f1:1d:d7:42:8b:16:b8:62:f4:f8:34:4c:fb:
00:34:3a:86:72:cf:72:13:26:9c:03:07:ab:a0:49:da:80:cc:
1f:42:69:fc:e0:45:49:ef:2f:ce:4a:65:98:d3:a3:d1:e8:42:
91:ca:6e:72:f2:50:6a:b5:a9:f1:be:0e:40:40:22:e3:db:0e:
32:3d:19:ea:12:35:82:37:b8:31:31:10:1e:9e:e5:6f:ea:ef:
ee:36:74:ff:38:2b:e9:7d:49:59:e8:2d:3f:a8:f5:93:70:22:
53:01:20:42:dc:ec:8f:11:6a:8b:0e:f5:14:46:a4:dd:ad:7f:
fc:92:7f:6e:25:4b:ec:0e:7b:8b:ca:01:f7:59:0c:02:dc:72:
68:52:a1:fd:c7:32:20:c5:06:67:d8:69:64:e1:dd:bd:06:b7:
a0:84:fc:46:03:2e:b1:e8:e2:f8:8c:eb:6a:46:ef:54:9c:68:
30:8d:1c:b2:9c:95:13:4d:84:19:02:c1:d9:e3:c4:a8:e7:6d:
0a:41:b6:88:c2:14:30:46:a5:75:60:63:56:9a:04:7c:e5:93:
78:9e:27:17:b0:71:02:7b:90:59:5f:d1:a8:f9:c5:1e:51:b1:
c5:5e:5a:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FTzysaITP1DLRA4r56owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5
YTU0ZmIwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjk1YTUxZmM4YjhmZGVjMTEyZGRmYjMzMzJmOWM4MjY5YjUyNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTNtkmuTrOLe8pKyDcuj6bqtby/i
dWXAZLyv7c16J9QHnETf55Dqw568m20pMihjlvrDHi1/jsKpAp8dRLhmZc48w4AQ
q9K92+VpR6Eprp4RqHA2huTg2oKCTpsG2lyiRrVeMkEkANBw1sPS9q+CMAzhuDj3
1YPFa4l5XV34GDu+x20BBUxi1BFkeAayTuJ9NAeO63q4GETBrqfeK2XQvop0v7Hb
on+FvL2kpfxyFyvjaAgj5rdsFm8nhZ32c/XPYyPlBX3ZFhy49thodNI2VNUx8e1Z
/hvHIPG6mhN/jrNLE7hBsAYwIbF8Lpagp3EhOCRJ3vnvvD2vYqbnxNkJ8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE+VpR/IuP3sES3fszMvnIJptSTnMB8GA1UdIwQY
MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt
MTQwNDViNjRhZTI5LzEvVDVXbEg4aTRfZXdSTGQtek15LWNnbW0xSk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5
LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQiqMA0G
CSqGSIb3DQEBCwUAA4IBAQAwHQ90cTkz2pGyHFCXEZZEWM1/j33u0/Ed10KLFrhi
9Pg0TPsANDqGcs9yEyacAweroEnagMwfQmn84EVJ7y/OSmWY06PR6EKRym5y8lBq
tanxvg5AQCLj2w4yPRnqEjWCN7gxMRAenuVv6u/uNnT/OCvpfUlZ6C0/qPWTcCJT
ASBC3OyPEWqLDvUURqTdrX/8kn9uJUvsDnuLygH3WQwC3HJoUqH9xzIgxQZn2Glk
4d29BreghPxGAy6x6OL4jOtqRu9UnGgwjRyynJUTTYQZAsHZ48So520KQbaIwhQw
RqV1YGNWmgR85ZN4nicXsHECe5BZX9Go+cUeUbHFXlqx
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:37:22 2026 by rpki-client