This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa
File: 5mKgFekCnX9KKHG8uIFOfOVDCpA.roa (raw, json)
Hash identifier: kagBXZBwsp9ju+8Y236dOevCM6wVBUEfu+L4XYQKWOs=
Subject key identifier: E6:62:A0:15:E9:02:9D:7F:4A:28:71:BC:B8:81:4E:7C:E5:43:0A:90
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 019B7F8338038D65F4FC9775695F0186FB3A
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa
Signing time: Fri 02 Jan 2026 16:21:04 +0000
ROA not before: Fri 02 Jan 2026 16:21:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199891
IP address blocks: 82.160.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:38:03:8d:65:f4:fc:97:75:69:5f:01:86:fb:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 2 16:21:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e662a015e9029d7f4a2871bcb8814e7ce5430a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:d2:a6:6f:31:f1:ce:18:8a:96:7d:ef:c6:
b7:d1:c7:5c:ee:6a:27:2f:91:2b:40:6f:91:f3:fa:
9d:3e:aa:2c:99:da:d8:81:84:cf:ac:c5:ec:0d:76:
91:fb:9d:c6:ce:d3:39:67:a4:79:4e:d9:34:0b:76:
2a:ce:d2:43:18:53:3c:39:f3:32:a7:b8:3d:aa:d8:
cf:dd:df:cb:85:a3:b0:46:e9:ba:c5:92:5c:a3:ae:
18:72:51:84:76:72:48:7c:fb:d8:ae:42:32:f4:5b:
bf:1e:49:38:6b:5e:93:6c:4e:cd:11:49:76:34:b9:
5b:d2:ec:2c:33:62:ae:b6:b3:7f:26:6e:b6:7b:6c:
2d:07:26:97:a4:7c:1a:13:9f:77:cf:7e:5e:aa:b0:
f4:00:19:7a:47:14:09:e4:b7:de:cf:64:be:0a:08:
c8:c3:0b:29:d2:8f:11:ad:a6:0c:25:f1:01:3b:87:
4c:5e:76:93:37:be:ac:0e:06:c5:e0:09:c0:bf:ac:
ac:8e:b7:fd:b0:34:c6:f8:fb:99:c2:e9:13:7f:6f:
68:39:78:f2:61:33:fa:0c:bf:24:ca:c8:a4:f4:09:
5d:68:3a:bd:c4:e5:4f:03:e4:f6:42:14:52:77:bd:
ad:35:f1:ab:0d:cb:44:6c:c1:43:8d:81:e5:53:36:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:A0:15:E9:02:9D:7F:4A:28:71:BC:B8:81:4E:7C:E5:43:0A:90
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.220.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2b:07:ef:b7:3a:56:b0:29:1a:e6:12:ae:a7:ad:90:55:b1:
4b:ae:8d:c1:ad:2b:33:02:90:62:3f:65:dc:95:8b:d8:4a:2b:
41:eb:cd:87:e5:71:18:91:47:90:ab:67:61:46:1c:d1:d3:40:
65:6b:e7:bb:6c:b2:db:46:98:ee:ea:4f:07:20:db:bc:f6:b3:
5a:a3:7e:66:96:cd:7a:3b:c2:e8:11:dc:ba:1b:e9:d8:54:c1:
e6:ec:17:74:03:45:11:a3:6c:2e:c1:1b:dd:a6:a4:77:bc:56:
c5:a7:94:ae:3a:18:89:d8:1e:03:6f:e6:b3:7a:3c:eb:35:d2:
4b:4c:c3:52:55:4b:e9:b9:0c:02:14:29:a7:77:70:7b:e3:8f:
b6:a7:36:8c:ae:18:ef:be:da:b5:0f:42:1f:a1:0c:a8:c8:5d:
e8:b8:3b:2f:81:cb:5f:cf:c6:81:3b:9d:4a:7c:36:6e:d6:74:
e6:3f:5c:f2:51:48:44:6f:6c:75:d9:83:cc:09:b2:55:6b:d4:
22:2f:d6:84:9d:f7:f3:cb:94:83:c8:30:25:fa:cb:1b:c3:8d:
9f:b3:48:1a:0f:2e:39:91:15:e4:ee:8e:5d:a4:41:ce:ba:70:
e5:a8:7a:3b:2f:03:3f:64:c6:28:72:7b:f1:ae:8d:ca:89:68:
53:28:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:05:12 2026 by rpki-client