This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/9a5ary6iFvpPhI3-VZwXzEYUNS4.roa
File: 9a5ary6iFvpPhI3-VZwXzEYUNS4.roa (raw, json)
Hash identifier: bUunzrEWYSDdnUyB7OzOajjtkOR72CIasRBys0Yz5Bg=
Subject key identifier: F5:AE:5A:AF:2E:A2:16:FA:4F:84:8D:FE:55:9C:17:CC:46:14:35:2E
Certificate issuer: /CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Certificate serial: 019B775890ADEC1860DB3D0025C13A5894F0
Authority key identifier: B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/9a5ary6iFvpPhI3-VZwXzEYUNS4.roa
Signing time: Thu 01 Jan 2026 02:17:31 +0000
ROA not before: Thu 01 Jan 2026 02:17:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30456
IP address blocks: 194.54.88.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:90:ad:ec:18:60:db:3d:00:25:c1:3a:58:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d2c11aff072bec37a58262114e1c06bedb4942
Validity
Not Before: Jan 1 02:17:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ae5aaf2ea216fa4f848dfe559c17cc4614352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:79:d4:97:33:b2:24:e3:14:5b:d7:89:3d:
56:99:cc:cc:d5:fa:76:a0:c1:83:f8:bf:0c:88:32:
eb:99:48:5d:df:d4:fc:37:87:08:fd:7b:a4:c6:bc:
3b:9e:9b:a5:23:32:be:04:2c:78:fb:86:80:84:a4:
e0:b5:da:27:46:1a:e2:37:18:b2:ec:e9:98:c6:c1:
e5:a5:ac:b8:b9:41:36:07:00:e2:ce:0b:f5:ae:ea:
5b:d4:2a:84:e0:da:bd:25:a8:bb:41:fa:5e:3f:ae:
c2:cf:9a:28:90:92:d3:9e:92:11:4c:f9:ed:c4:80:
93:7c:3c:d2:18:19:ef:9f:f4:fd:0f:0f:84:ec:1b:
da:fb:88:ff:fd:88:25:16:2e:88:09:c5:5b:39:20:
48:e4:24:d1:0c:97:aa:37:58:6b:13:86:3f:82:b2:
0f:bf:6a:60:1a:fc:a1:86:d3:47:0d:88:e5:16:ec:
1f:2d:f4:38:49:f0:8a:e0:20:88:28:04:13:9a:6c:
3c:5e:da:7d:75:e0:24:05:cf:34:cc:d4:70:e5:10:
4d:82:13:5d:e2:f5:ef:07:bd:9e:38:f2:88:ac:60:
9f:a4:51:b2:49:51:e2:a5:30:5e:3b:00:ff:1a:bc:
1f:a6:c7:07:a3:99:eb:c6:d3:53:d2:bd:ba:8b:60:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:5A:AF:2E:A2:16:FA:4F:84:8D:FE:55:9C:17:CC:46:14:35:2E
X509v3 Authority Key Identifier:
keyid:B2:D2:C1:1A:FF:07:2B:EC:37:A5:82:62:11:4E:1C:06:BE:DB:49:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stLBGv8HK-w3pYJiEU4cBr7bSUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/9a5ary6iFvpPhI3-VZwXzEYUNS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/283d32-380a-4e6e-a957-c5baea3f1729/1/stLBGv8HK-w3pYJiEU4cBr7bSUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:da:06:ff:a8:0f:1d:34:c4:45:a2:66:c7:f4:c1:19:eb:5a:
5c:5b:67:93:ab:f9:26:26:60:a8:ef:fd:a6:00:b7:a2:24:d4:
d2:f1:4f:12:ba:9d:90:be:f0:ee:84:c6:62:e3:d9:81:93:3e:
ea:94:91:22:2d:bf:b2:a1:13:c3:58:d6:7b:bd:87:5f:92:5b:
20:3e:27:ce:6b:2a:2b:aa:a6:ba:25:e9:42:a8:6c:83:92:94:
62:4b:17:ed:8d:a3:6a:3a:23:1e:63:5a:68:0f:73:d5:49:3a:
3a:5b:06:0e:b0:54:af:11:84:67:f7:fe:02:da:c4:44:df:8d:
52:fe:8e:1d:fd:9a:9e:5e:f2:18:f4:b3:e6:96:7f:a0:2c:3b:
20:15:f3:52:07:dd:2d:34:08:34:d8:ef:0a:99:8b:07:3d:22:
cd:6b:a5:a7:9d:16:61:2d:53:b9:37:72:68:a2:8d:5b:03:3f:
04:dd:da:a7:fc:73:7f:33:15:d7:50:51:c6:ae:da:cd:8a:27:
4b:f0:0d:88:bf:b9:2b:46:89:6e:a5:78:e7:5b:16:2f:1e:bd:
d7:f0:f2:4d:62:63:9a:52:60:b1:73:c0:b9:1c:79:fe:c8:8a:
e8:c2:6c:86:42:36:b2:fb:2e:b8:ca:cb:9d:a6:b3:90:6c:3b:
3f:49:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:36 2026 by rpki-client