This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_mTAxSMzHJOSN0LWp81gCMRfhJE.roa
File: _mTAxSMzHJOSN0LWp81gCMRfhJE.roa (raw, json)
Hash identifier: oexFC+edza20Dux0bBJyt9bw7pINhlVlE/ffY4xMadw=
Subject key identifier: FE:64:C0:C5:23:33:1C:93:92:37:42:D6:A7:CD:60:08:C4:5F:84:91
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C77C390C87CA036705C4650EFEDBDE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_mTAxSMzHJOSN0LWp81gCMRfhJE.roa
Signing time: Thu 01 Jan 2026 04:18:40 +0000
ROA not before: Thu 01 Jan 2026 04:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57480
IP address blocks: 195.136.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:7c:39:0c:87:ca:03:67:05:c4:65:0e:fe:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe64c0c523331c93923742d6a7cd6008c45f8491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:41:ca:09:af:61:78:ab:3c:3d:59:70:f2:
a6:78:64:14:6c:0a:4a:29:0c:94:08:11:7e:60:45:
e7:36:2c:25:00:b2:ed:ca:4f:cb:ff:3c:22:e1:d7:
d9:62:19:f9:f3:57:d8:5f:4c:02:72:ef:4b:0c:c2:
8e:23:9c:d2:66:00:b8:39:b6:21:a2:88:d6:d2:c4:
2d:da:73:a8:2a:70:58:5d:35:c6:48:b8:62:14:0a:
2f:31:e8:c9:ba:c9:e8:d1:2b:c1:bc:5c:32:fe:89:
17:f8:80:93:d6:61:f0:7f:d0:bb:4b:88:4a:cf:86:
20:9c:22:7d:65:e3:a3:75:51:d1:a0:2e:45:2c:0f:
e1:4a:84:58:d6:4d:18:9d:47:64:5c:6f:9f:ce:3f:
74:5f:db:1e:be:20:a2:da:b1:6f:91:9d:90:72:c7:
51:06:23:21:aa:aa:9d:9e:cf:f9:21:9a:11:81:f5:
65:72:25:74:51:5c:0b:55:93:b1:26:c1:67:da:f6:
ee:2f:53:d2:24:1c:6d:eb:02:63:6a:f7:e0:63:aa:
73:0c:f4:43:ce:6d:a1:d4:ff:8b:c1:fe:e7:8a:b9:
18:1e:18:00:25:73:ac:48:71:19:ad:e7:26:73:81:
d1:34:4f:aa:c9:d3:59:17:dc:ce:ed:99:43:14:7c:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:C0:C5:23:33:1C:93:92:37:42:D6:A7:CD:60:08:C4:5F:84:91
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/_mTAxSMzHJOSN0LWp81gCMRfhJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a3:af:21:50:5c:6a:0a:0a:53:ca:97:bd:5f:d8:e1:81:6b:
d9:66:35:0d:1d:ad:76:e1:8b:4d:44:16:b7:e3:ef:27:81:e3:
16:c1:13:02:ae:51:ed:a8:47:46:bc:8a:c3:93:bc:e4:67:bb:
d8:a3:2b:54:6a:37:c1:d1:29:03:73:b2:e6:02:ff:09:59:b6:
a6:55:00:91:0f:ff:80:a1:68:ff:66:15:40:00:3d:2c:a3:a8:
ad:5e:1e:6b:ab:ec:a0:0e:39:ff:85:9c:af:66:fb:ac:63:d0:
7c:8b:ca:92:c6:69:81:2a:17:d0:aa:10:cf:19:f8:fa:59:1f:
93:76:b3:f1:d3:07:d2:eb:25:15:ff:90:2a:a5:1d:37:67:49:
c8:0d:36:bb:96:52:25:5b:65:2a:95:b7:87:a6:7c:a0:79:fc:
2a:80:4b:4e:fd:ed:48:a2:49:15:24:08:5a:7f:f7:70:3b:73:
fc:e6:85:15:83:65:ca:74:e7:00:06:5f:13:8f:a1:49:85:0d:
fd:21:52:da:f6:f4:76:d1:a7:04:10:2c:88:21:3d:71:32:13:
90:fd:83:d2:f0:64:b8:b1:ef:07:c6:d6:2e:a9:36:6d:f0:aa:
f0:1b:74:2c:b2:a2:89:8c:ca:e8:c5:f9:73:f2:7e:fb:62:a9:
b8:73:1c:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x3w5DIfKA2cFxGUO/tveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTY0YzBjNTIzMzMxYzkzOTIzNzQyZDZhN2NkNjAwOGM0NWY4NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1BygmvYXirPD1ZcPKmeGQUbApK
KQyUCBF+YEXnNiwlALLtyk/L/zwi4dfZYhn581fYX0wCcu9LDMKOI5zSZgC4ObYh
oojW0sQt2nOoKnBYXTXGSLhiFAovMejJusno0SvBvFwy/okX+ICT1mHwf9C7S4hK
z4YgnCJ9ZeOjdVHRoC5FLA/hSoRY1k0YnUdkXG+fzj90X9seviCi2rFvkZ2QcsdR
BiMhqqqdns/5IZoRgfVlciV0UVwLVZOxJsFn2vbuL1PSJBxt6wJjavfgY6pzDPRD
zm2h1P+Lwf7nirkYHhgAJXOsSHEZrecmc4HRNE+qydNZF9zO7ZlDFHxCLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP5kwMUjMxyTkjdC1qfNYAjEX4SRMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvX21UQXhTTXpISk9TTjBMV3A4MWdDTVJmaEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4glMA0G
CSqGSIb3DQEBCwUAA4IBAQCxo68hUFxqCgpType9X9jhgWvZZjUNHa124YtNRBa3
4+8ngeMWwRMCrlHtqEdGvIrDk7zkZ7vYoytUajfB0SkDc7LmAv8JWbamVQCRD/+A
oWj/ZhVAAD0so6itXh5rq+ygDjn/hZyvZvusY9B8i8qSxmmBKhfQqhDPGfj6WR+T
drPx0wfS6yUV/5AqpR03Z0nIDTa7llIlW2UqlbeHpnygefwqgEtO/e1IokkVJAha
f/dwO3P85oUVg2XKdOcABl8Tj6FJhQ39IVLa9vR20acEECyIIT1xMhOQ/YPS8GS4
se8HxtYuqTZt8KrwG3QssqKJjMroxflz8n77Yqm4cxzC
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:40 2026 by rpki-client