This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/slCMC5MetlL-UdrbcYVL6ivEaR8.roa
File: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (raw, json)
Hash identifier: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=
Subject key identifier: B2:50:8C:0B:93:1E:B6:52:FE:51:DA:DB:71:85:4B:EA:2B:C4:69:1F
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019B7C8062EEABBB715EF9959A75B795693E
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/slCMC5MetlL-UdrbcYVL6ivEaR8.roa
Signing time: Fri 02 Jan 2026 02:19:07 +0000
ROA not before: Fri 02 Jan 2026 02:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61243
IP address blocks: 91.250.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:62:ee:ab:bb:71:5e:f9:95:9a:75:b7:95:69:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 02:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2508c0b931eb652fe51dadb71854bea2bc4691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:49:eb:b9:fa:b6:07:f3:6b:e9:67:20:0a:
cc:12:67:72:14:54:a6:74:be:58:40:08:ef:b2:c6:
f7:49:62:fd:92:c6:15:57:36:76:a0:b0:22:88:06:
79:3d:57:ef:b5:75:ac:98:74:53:2e:d5:8d:7d:7e:
0e:a8:36:d6:76:dc:ad:a6:c8:91:20:4e:bd:18:c6:
50:af:95:51:be:4f:bb:c6:b2:b0:a6:9b:dc:6c:b2:
d7:6b:36:50:10:2a:c2:82:da:02:91:ee:ab:20:25:
ba:ef:f6:3d:b1:22:aa:33:bc:16:88:98:ec:47:de:
1a:79:84:20:7d:ff:bc:bd:ce:f5:37:b5:4a:b1:0e:
a9:f3:16:a1:aa:f8:9c:f2:14:9e:bc:96:d2:35:34:
0e:d2:80:e1:95:e7:45:82:8e:d2:5a:05:8d:5e:a2:
a1:a0:e0:3a:b7:a4:cb:62:c1:96:57:aa:a5:9d:59:
fd:80:05:a0:85:d3:7e:32:3f:67:89:3c:f6:25:db:
3f:75:66:fd:14:c7:28:ad:9f:34:f8:ed:50:a2:39:
0d:92:55:71:27:b2:61:15:dc:f7:68:76:69:63:cf:
43:ad:36:c9:4c:1e:ba:c3:24:f9:22:eb:e5:d3:d1:
d2:28:03:62:60:2a:52:d9:e1:1b:a5:86:f9:5d:0c:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:8C:0B:93:1E:B6:52:FE:51:DA:DB:71:85:4B:EA:2B:C4:69:1F
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/slCMC5MetlL-UdrbcYVL6ivEaR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:8a:41:8b:4e:3d:95:bb:3a:8e:f0:22:2c:6d:75:69:7a:e0:
06:d4:96:5b:42:df:66:4e:d9:35:8a:30:f6:57:78:7b:a5:8d:
d1:ba:18:46:c4:00:ef:f3:25:32:54:2f:54:f0:6d:81:5c:20:
69:f9:00:72:a5:ca:2b:db:3f:46:b4:32:49:3b:ad:91:3d:00:
61:bd:89:c4:8b:bb:f9:30:cb:22:7f:28:03:6c:cd:3c:ae:87:
02:9a:8e:ee:85:57:d4:b1:43:54:f7:49:e4:e1:90:3f:b9:37:
3a:a8:9e:e1:ec:1d:ea:c5:6d:ea:5f:db:87:fa:ca:fc:eb:8d:
89:4d:08:b0:b0:e6:c8:5b:70:d3:7b:09:78:23:45:30:7e:4c:
45:24:a5:e5:70:f5:fc:48:d1:2f:a1:2b:50:8a:2e:f1:4c:92:
27:a1:0d:40:94:8c:3e:14:1a:bc:79:76:85:f4:1c:10:a5:65:
2a:c6:37:c6:c1:b5:7b:51:6d:bb:c1:23:0d:e9:23:d5:b5:d5:
bd:b6:41:aa:27:78:c1:6e:45:c2:31:bc:1d:88:98:bc:ac:e8:
ee:37:fa:10:50:24:e8:29:e3:61:e4:3c:98:22:7a:b5:9f:3f:
fb:23:32:bc:09:12:23:91:8b:28:db:4d:03:b9:38:2f:a2:65:
e9:93:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:23 2026 by rpki-client