This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rLbinrny0kb0lsNdV-MOQUFt2NU.roa
File: rLbinrny0kb0lsNdV-MOQUFt2NU.roa (raw, json)
Hash identifier: 5a8gSQVuG/k+iimOmCot0TPlak9dLg29Xt6pHVrTZPY=
Subject key identifier: AC:B6:E2:9E:B9:F2:D2:46:F4:96:C3:5D:57:E3:0E:41:41:6D:D8:D5
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019B7E37194C3CD361E19C9373637BA763BF
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rLbinrny0kb0lsNdV-MOQUFt2NU.roa
Signing time: Fri 02 Jan 2026 10:18:18 +0000
ROA not before: Fri 02 Jan 2026 10:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38971
IP address blocks: 109.196.132.0/24 maxlen: 24
178.57.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:19:4c:3c:d3:61:e1:9c:93:73:63:7b:a7:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 2 10:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acb6e29eb9f2d246f496c35d57e30e41416dd8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:29:10:05:7d:a5:61:92:8c:56:cb:f6:da:
60:20:c2:bf:9d:cb:d1:97:06:4e:70:49:de:49:3b:
42:d3:db:b7:47:72:ff:36:7b:7d:09:70:0f:08:00:
5d:bb:8e:9c:9e:13:f1:e5:9e:12:e6:51:74:6e:43:
95:e9:20:21:3c:1b:85:cd:68:6e:c8:e3:2b:b3:51:
35:f7:5f:77:de:0d:dd:07:ec:16:8f:f4:28:98:28:
0d:35:3a:c6:34:38:c8:03:d0:83:fb:52:f0:a5:ed:
89:a1:8d:73:08:0a:85:fe:9f:ac:90:9f:a5:22:ab:
00:50:7c:06:58:1e:71:86:6c:a4:8b:01:dc:43:e8:
af:fc:b1:a5:3f:db:d8:4b:ce:1c:a8:a9:70:6f:02:
74:c2:a6:b8:b4:0e:fd:da:00:2b:62:2c:d7:1a:8b:
d9:92:34:1c:f4:00:c5:ba:71:06:8f:11:39:34:75:
00:af:05:66:72:de:3c:13:c6:35:e3:5c:53:cb:40:
43:2c:4c:21:82:ff:ea:86:39:81:ca:f9:71:a6:a9:
a4:43:75:f2:8d:38:50:b9:f3:db:0f:66:0d:a4:f1:
02:9a:76:4e:18:f6:52:ff:2a:8a:c0:51:2a:ed:69:
6e:7c:e7:90:b5:a2:cd:0a:5d:5e:bb:3f:a3:09:94:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:E2:9E:B9:F2:D2:46:F4:96:C3:5D:57:E3:0E:41:41:6D:D8:D5
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rLbinrny0kb0lsNdV-MOQUFt2NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.132.0/24
178.57.71.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b5:17:9b:d2:6f:60:ea:a9:16:3d:56:46:8d:64:40:8a:ec:
1f:05:83:20:95:e3:43:6d:35:c4:15:d0:a2:5f:1e:de:ef:c0:
de:07:c9:60:6f:1e:db:87:57:b0:7c:39:59:da:d7:b0:07:b2:
4f:4a:fb:f5:b6:a6:bc:81:e0:aa:cf:34:10:34:03:70:f6:ec:
7d:b9:9b:a1:09:41:fc:bd:d3:3b:0a:8c:89:79:bf:28:fb:a0:
30:c1:9c:cb:5d:2a:1f:b9:d3:d1:67:7e:9e:fc:02:b6:47:4c:
1f:8b:0c:57:c7:e9:8e:61:37:7e:33:93:7d:15:e9:b1:9c:a8:
05:cd:ec:86:c8:82:43:ed:54:fa:0c:30:0c:6d:f9:ce:c8:0c:
69:9a:e3:ac:1d:ce:0c:36:d1:26:b2:29:7b:c1:5a:59:30:ec:
e2:fc:78:9a:f9:cb:a8:fb:6f:50:7b:1a:8a:17:8d:17:85:5f:
d5:1f:65:9f:5f:ca:bb:7d:67:88:98:cb:3a:eb:8f:5c:fe:9a:
41:e8:8f:cc:c6:b7:0d:4e:40:3d:dd:fd:3a:c2:a5:13:d9:51:
e9:1f:96:0a:2e:5d:b0:ca:3b:f9:93:64:32:50:81:7a:69:67:
b4:a1:f9:07:2e:0a:67:99:7a:34:ec:35:d6:fa:b0:b8:a9:63:
32:39:1d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:54 2026 by rpki-client