This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa
File: 5uIuC6619SIoj23PHmVXaawg9T0.roa (raw, json)
Hash identifier: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=
Subject key identifier: E6:E2:2E:0B:AE:B5:F5:22:28:8F:6D:CF:1E:65:57:69:AC:20:F5:3D
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 019B7AC93D169D3EEBB01543DEFE2A9FF4B5
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa
Signing time: Thu 01 Jan 2026 18:19:27 +0000
ROA not before: Thu 01 Jan 2026 18:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.87.160.0/24 maxlen: 24
45.87.161.0/24 maxlen: 24
45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:3d:16:9d:3e:eb:b0:15:43:de:fe:2a:9f:f4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 1 18:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6e22e0baeb5f522288f6dcf1e655769ac20f53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:01:8e:83:18:30:24:48:1f:8e:a2:39:b1:
db:f9:db:57:3b:ff:dc:31:d7:d4:4c:ea:d0:2d:be:
90:81:fa:76:d4:f1:ac:1a:c5:dd:5b:99:4d:99:ba:
b4:f0:55:19:18:64:33:e9:4c:1d:b2:e5:97:57:e0:
d0:1f:41:e7:79:f0:fd:12:78:2c:0d:04:66:5c:b2:
d0:d7:65:3a:3b:32:30:2e:62:11:5f:9d:c2:b7:42:
22:05:ab:9d:e9:14:ce:42:c8:3a:d5:bc:9b:65:a6:
38:e5:d8:f6:f5:79:ad:b8:20:33:d2:7c:51:46:71:
32:7d:32:7e:0d:90:66:e3:bf:ce:9c:45:c7:b9:a0:
fb:10:cc:8d:3f:3b:b2:43:e8:13:30:2a:6c:50:98:
87:eb:74:65:82:11:3c:e9:da:0e:e5:50:9d:c8:e9:
39:19:86:10:43:3c:e8:23:ed:84:49:a6:93:66:39:
1b:80:2b:29:a6:e2:85:4d:c7:b5:4a:30:e5:d7:75:
c6:2f:92:ce:08:f0:c0:5f:b8:2b:5d:24:b8:be:9e:
2a:eb:7d:4f:5a:ee:49:99:79:6e:09:b6:1f:19:ab:
68:64:bb:6c:d4:4f:ac:7b:2a:b7:4e:e1:89:47:25:
ab:6d:cc:2d:4f:45:71:b4:ef:c6:1c:75:62:25:96:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E2:2E:0B:AE:B5:F5:22:28:8F:6D:CF:1E:65:57:69:AC:20:F5:3D
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
78:a9:96:1f:5e:33:86:e2:64:60:9c:04:46:1f:14:7d:e0:d6:
14:4e:eb:ca:74:d6:6d:2c:d7:17:d9:55:ab:7b:45:30:4d:d4:
e6:4b:aa:e3:7e:d5:87:e8:6f:85:ac:bd:bd:d2:7d:10:a3:d2:
d3:d6:16:2e:c9:cf:83:f6:48:97:41:d8:17:ba:cb:f9:c1:4c:
65:2c:df:ee:e8:22:81:86:f2:7d:d0:de:92:c5:c5:e8:49:04:
9b:8e:19:9c:ac:fa:c5:a3:aa:80:99:7e:90:1b:34:8a:fe:7b:
0f:b0:01:97:25:1d:c2:23:f1:57:bc:7b:53:b8:7f:bc:12:88:
9b:2b:3f:d2:77:e1:3d:be:c9:03:c9:06:37:c7:e8:de:2a:36:
a5:52:64:c9:2f:8d:ac:e2:0d:70:4c:e4:8b:80:8d:23:e6:20:
37:d1:55:99:b5:a2:3e:0c:5a:bf:99:de:24:e4:77:b2:85:9e:
6b:42:a1:09:88:95:a4:81:d6:1c:67:a8:10:2c:8b:d7:ca:61:
4a:db:0b:d4:82:0b:46:db:d6:fb:71:1c:71:49:c8:59:14:07:
ab:07:45:18:88:39:b0:e9:39:cf:fd:1a:9f:d8:87:7f:31:83:
cc:d2:3e:e0:29:4a:81:a5:2f:d6:8f:37:7f:d2:ce:2f:90:0e:
9f:ce:dc:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yT0WnT7rsBVD3v4qn/S1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmUyMmUwYmFlYjVmNTIyMjg4ZjZkY2YxZTY1NTc2OWFjMjBmNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSUBjoMYMCRIH46iObHb+dtXO//c
MdfUTOrQLb6Qgfp21PGsGsXdW5lNmbq08FUZGGQz6UwdsuWXV+DQH0HnefD9Engs
DQRmXLLQ12U6OzIwLmIRX53Ct0IiBaud6RTOQsg61bybZaY45dj29XmtuCAz0nxR
RnEyfTJ+DZBm47/OnEXHuaD7EMyNPzuyQ+gTMCpsUJiH63RlghE86doO5VCdyOk5
GYYQQzzoI+2ESaaTZjkbgCsppuKFTce1SjDl13XGL5LOCPDAX7grXSS4vp4q631P
Wu5JmXluCbYfGatoZLts1E+seyq3TuGJRyWrbcwtT0VxtO/GHHViJZY5XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObiLguutfUiKI9tzx5lV2msIPU9MB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvNXVJdUM2NjE5U0lvajIzUEhtVlhhYXdnOVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVegMA0G
CSqGSIb3DQEBCwUAA4IBAQB4qZYfXjOG4mRgnARGHxR94NYUTuvKdNZtLNcX2VWr
e0UwTdTmS6rjftWH6G+FrL290n0Qo9LT1hYuyc+D9kiXQdgXusv5wUxlLN/u6CKB
hvJ90N6SxcXoSQSbjhmcrPrFo6qAmX6QGzSK/nsPsAGXJR3CI/FXvHtTuH+8Eoib
Kz/Sd+E9vskDyQY3x+jeKjalUmTJL42s4g1wTOSLgI0j5iA30VWZtaI+DFq/md4k
5HeyhZ5rQqEJiJWkgdYcZ6gQLIvXymFK2wvUggtG29b7cRxxSchZFAerB0UYiDmw
6TnP/Rqf2Id/MYPM0j7gKUqBpS/Wjzd/0s4vkA6fztzr
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:27 2026 by rpki-client