This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa
File: b5_puVoiaaK1luof_u2L7B-PTEE.roa (raw, json)
Hash identifier: Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=
Subject key identifier: 6F:9F:E9:B9:5A:22:69:A2:B5:96:EA:1F:FE:ED:8B:EC:1F:8F:4C:41
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019B7DCB2AC3C18644CE1CA88EF61D419A2D
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa
Signing time: Fri 02 Jan 2026 08:20:25 +0000
ROA not before: Fri 02 Jan 2026 08:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43366
IP address blocks: 82.150.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:2a:c3:c1:86:44:ce:1c:a8:8e:f6:1d:41:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 08:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f9fe9b95a2269a2b596ea1ffeed8bec1f8f4c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:ab:ea:56:7e:4d:81:42:37:6c:ba:10:5e:
15:5f:75:25:21:a6:e5:b3:d0:79:1b:a3:5b:5e:49:
2d:e6:eb:c7:04:f7:ca:62:d6:2c:03:aa:2e:7b:8d:
5b:a2:51:0b:7d:15:ec:8b:bb:7d:19:4e:e9:70:45:
1e:c1:25:5a:c1:94:f2:e2:c8:7f:74:ad:11:1a:94:
e0:01:ee:72:c0:15:99:68:88:27:45:3b:f9:9c:aa:
28:1f:92:31:73:db:f2:7b:9e:d8:cc:1d:d8:c3:8d:
53:65:2e:80:7d:61:45:25:cc:61:e0:23:79:a4:5c:
de:8c:35:93:75:f9:e5:c7:82:51:0e:17:a7:08:cd:
a7:a6:5a:85:c6:16:04:8d:c8:81:36:05:07:2f:99:
55:59:43:bb:cb:66:8b:35:f6:e8:5c:1a:9c:86:07:
16:c1:c2:34:53:6f:48:18:0e:6d:ba:31:d9:d3:1b:
65:16:2c:25:8a:51:b6:aa:4c:a2:ef:18:c1:92:b3:
e1:87:7c:ea:10:ee:b1:fe:82:2f:4b:fc:07:c6:ce:
a5:31:02:83:fb:03:1a:25:39:c9:44:9e:a4:4b:b6:
ec:10:b9:33:79:62:b6:a4:4d:e9:93:21:65:70:83:
15:19:14:7f:2c:cf:1a:72:0d:ec:92:df:23:36:c3:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9F:E9:B9:5A:22:69:A2:B5:96:EA:1F:FE:ED:8B:EC:1F:8F:4C:41
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a0:f5:a5:5d:f4:14:cf:e7:9c:3b:92:b4:ad:0a:ae:6f:d7:
01:33:b2:de:a2:aa:d9:34:12:fd:e2:48:9e:53:bd:f1:bb:50:
32:fc:36:af:1e:6c:b6:01:fe:ad:16:54:01:9a:d1:6e:6b:90:
b2:6e:26:cd:5d:62:1b:81:e2:de:74:a7:4c:39:c1:82:90:03:
fa:db:eb:aa:19:b4:0b:91:42:6b:ce:71:4b:54:1d:bd:dd:bd:
3f:23:0f:f4:ad:87:1d:6c:8b:30:07:87:1f:48:50:89:78:e9:
3d:81:57:ea:22:a2:c1:f4:e2:2e:9d:bb:f4:8a:85:ba:63:30:
61:f5:57:6d:c0:20:8e:20:0d:06:cc:8e:91:76:a3:d6:b8:82:
65:0d:42:28:e5:d5:7a:48:a3:19:2d:f6:ab:7d:4a:99:3f:61:
f2:43:13:83:eb:ef:87:1f:e8:78:b1:3c:75:2d:5e:e5:32:34:
36:33:82:d5:cb:b4:c1:ed:19:93:b2:23:01:a2:59:e3:0e:85:
51:eb:11:b7:52:1d:aa:56:8b:aa:21:ab:07:6e:30:fa:22:87:
23:9c:85:af:89:49:6c:71:a4:67:60:07:b7:25:84:8c:38:70:
28:0b:f5:fd:f3:4d:a4:8e:bb:cc:4e:0d:fe:39:41:25:f5:05:
57:e0:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:29 2026 by rpki-client