This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa
File: g-5OExobBPKpwq86-mokeUHrM5s.roa (raw, json)
Hash identifier: esJBdIejJQA3R77ejO+4/6JoDvhxDi/exjc+GoZuVe8=
Subject key identifier: 83:EE:4E:13:1A:1B:04:F2:A9:C2:AF:3A:FA:6A:24:79:41:EB:33:9B
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019B7758F57DD4F35206D53EB6561B619DF9
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa
Signing time: Thu 01 Jan 2026 02:17:57 +0000
ROA not before: Thu 01 Jan 2026 02:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215416
IP address blocks: 5.134.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:f5:7d:d4:f3:52:06:d5:3e:b6:56:1b:61:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 02:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ee4e131a1b04f2a9c2af3afa6a247941eb339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:99:11:93:25:83:80:97:40:ce:8a:56:2d:
5f:63:d2:ac:ae:e6:84:37:ec:3f:ca:d3:95:00:93:
f6:5b:4a:53:5d:e0:3c:fb:01:58:86:dd:cb:c5:62:
48:4a:ea:70:3c:e8:89:8b:f5:54:5d:9b:a7:1f:b5:
f2:66:7d:c3:da:2e:c1:d3:b9:bd:d3:62:73:5a:a6:
5c:bd:26:29:92:7c:a7:d8:74:e8:3d:66:7f:ac:b0:
af:fe:21:db:8e:8f:3b:17:50:3b:be:71:d1:ad:b3:
d7:dd:f3:2d:fb:1e:7f:2a:9f:ca:f0:e7:95:57:08:
c0:9b:2e:5f:1b:f4:23:a0:37:ac:f5:29:85:d6:15:
10:7e:3a:13:97:6d:45:0c:b6:a3:df:c8:3c:98:97:
d8:fe:95:02:32:f5:4e:76:8a:1f:99:8a:a7:7c:fd:
aa:51:f7:5a:69:04:6c:fd:24:62:ce:2b:56:b1:26:
c3:d6:78:24:b6:35:7e:08:05:45:2d:5c:29:26:6d:
19:ab:f2:0d:29:1f:49:86:93:85:7c:8d:a3:55:4b:
12:6d:fd:f6:44:65:ac:96:be:d2:09:9b:0a:1c:ea:
5e:40:81:b1:50:04:6e:0a:f3:88:6a:d5:81:dd:3e:
d0:4a:ac:3c:18:34:b8:1d:a4:8f:81:3e:3b:00:17:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:4E:13:1A:1B:04:F2:A9:C2:AF:3A:FA:6A:24:79:41:EB:33:9B
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.87.0/24
Signature Algorithm: sha256WithRSAEncryption
96:53:fa:fa:de:7a:4f:06:4c:c8:ec:9c:88:9c:9f:e7:b1:53:
06:fa:b3:3a:55:fe:9c:a2:cc:ca:09:13:c6:bf:06:e0:d3:55:
fa:8d:8c:ed:30:5d:90:0d:2e:94:c7:e6:f9:a0:5d:d5:6d:a6:
72:13:ce:d8:0a:1c:44:e1:e4:58:c2:e4:81:8b:d6:ab:f5:e8:
39:ca:0c:ef:75:03:82:ae:ff:a0:04:81:ca:f5:47:c2:b1:2a:
94:41:d0:ee:5b:96:e1:56:0d:b1:81:8a:b9:62:f7:41:c6:1c:
4a:0a:a1:8b:1d:25:9a:f6:f2:0c:fa:07:17:30:60:a0:af:a9:
8f:de:d8:bd:3e:d4:cf:ba:bc:cd:dd:22:57:35:37:4d:01:f1:
48:e4:2e:11:08:1e:f3:f7:25:5b:7a:e3:48:d0:c7:5b:92:0e:
db:97:bc:fb:50:2a:52:94:48:b5:af:21:e9:10:ec:07:e7:7c:
4a:43:9a:c4:68:28:9a:df:cc:ba:07:ce:d8:73:58:8d:21:b5:
fc:2b:1c:6e:38:aa:ea:23:67:a1:17:de:98:5d:a4:b2:ad:1e:
5d:3a:01:c3:f1:83:a4:a2:c3:7a:54:8d:44:ab:a9:9a:45:59:
a6:be:18:25:4f:6c:4c:dc:cf:a2:fc:50:82:b1:ee:fa:9d:f3:
77:9b:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:24 2026 by rpki-client