This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5yrV2YvgnXhjAfAgume9v6k9tXM.roa
File: 5yrV2YvgnXhjAfAgume9v6k9tXM.roa (raw, json)
Hash identifier: Y3tGo3uUX6l9FKBdHzzFwISFzcOkybzGuNFm1zPlarE=
Subject key identifier: E7:2A:D5:D9:8B:E0:9D:78:63:01:F0:20:BA:67:BD:BF:A9:3D:B5:73
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C801BD176FADA89C91BEF44BFF70CFA
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5yrV2YvgnXhjAfAgume9v6k9tXM.roa
Signing time: Fri 02 Jan 2026 02:18:49 +0000
ROA not before: Fri 02 Jan 2026 02:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39694
IP address blocks: 83.206.141.0/24 maxlen: 24
83.206.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:1b:d1:76:fa:da:89:c9:1b:ef:44:bf:f7:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e72ad5d98be09d786301f020ba67bdbfa93db573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:75:7b:8a:f2:d7:4b:39:b9:2e:42:a1:c5:
0d:8e:58:3f:6a:3d:d7:f1:03:29:f2:40:20:aa:f0:
69:88:9a:44:bd:42:7c:59:f5:e9:10:c5:80:5c:4e:
03:20:a7:95:47:c4:54:3e:b3:fa:da:c8:d9:fb:90:
df:71:bb:82:02:cc:88:9e:a3:9b:8d:c1:f6:80:29:
68:bf:f9:a5:cb:4c:59:bd:d6:90:b7:a8:30:a2:d4:
04:9e:48:37:d7:7b:f0:0a:4d:b3:c8:8c:1a:08:a7:
f9:f0:5f:18:d6:c4:59:4f:e4:0a:82:80:a5:90:82:
d9:09:be:37:64:f5:dc:b5:ab:1f:19:a8:f4:25:83:
33:05:92:da:4f:74:d2:83:71:1d:24:1d:49:f4:99:
20:d7:d7:41:32:c9:bd:8d:f4:a1:7b:2e:93:19:34:
3b:ad:95:0b:cb:7d:24:4c:a3:00:00:64:f2:e9:73:
69:c3:a5:cb:ec:de:34:d7:29:9c:20:7b:ed:a3:c8:
b9:b3:a0:86:93:e6:f0:f5:1f:72:61:40:77:2b:b3:
fb:6d:d5:75:98:34:40:f3:cf:4b:b7:4e:31:e0:6a:
f3:ae:e6:28:72:00:2b:3e:bb:4b:36:2b:da:4e:d5:
dc:e3:da:cd:34:d3:06:37:33:e5:e1:fd:93:3e:22:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2A:D5:D9:8B:E0:9D:78:63:01:F0:20:BA:67:BD:BF:A9:3D:B5:73
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/5yrV2YvgnXhjAfAgume9v6k9tXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.141.0/24
83.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
77:38:1b:b4:d6:98:0a:b5:28:3e:1c:1c:96:03:3f:f6:f0:94:
cb:6a:59:39:f9:9d:ff:9c:1a:97:37:a3:85:27:bd:80:66:63:
ea:2b:43:b8:25:14:54:80:f6:6b:35:9b:2a:93:84:b5:b8:71:
cc:ea:e7:ed:6e:f1:30:46:56:23:1c:b6:e7:18:70:26:2b:0b:
4e:5c:1d:fc:89:7c:8b:0d:7e:ed:ce:39:d4:0f:4e:64:4c:59:
7d:be:9b:46:2d:e8:bc:dc:1c:b8:eb:c9:de:1e:1c:b7:09:64:
2b:c6:0c:ad:58:ce:19:2c:8d:21:60:60:db:a2:30:99:43:e8:
e7:c4:6b:d9:98:a3:20:97:b7:29:6a:b6:cf:4a:ff:a3:b0:14:
bd:97:b9:41:dc:56:14:5a:b3:6f:75:41:d1:88:7d:0c:aa:5f:
a9:4e:86:d5:93:85:e9:34:b8:f1:f4:11:31:07:1f:0d:86:9b:
b2:95:3d:fa:4f:ba:05:c7:65:5f:43:b0:0c:fc:97:52:e1:ed:
9f:48:7d:de:a7:4e:b2:8c:0c:3e:b1:3c:84:6e:9b:77:b0:ae:
83:86:ef:a5:57:66:99:87:35:09:32:77:ec:38:97:92:af:0f:
af:18:5b:d2:20:52:88:1c:20:3d:c3:d1:02:44:fc:19:0f:81:
8c:ec:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:01:39 2026 by rpki-client