This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa
File: txhV4jAB0u0krXb4kFMl_-o4obY.roa (raw, json)
Hash identifier: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=
Subject key identifier: B7:18:55:E2:30:01:D2:ED:24:AD:76:F8:90:53:25:FF:EA:38:A1:B6
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019B7F82F73824B2ADD24CB6412F83FC6AA9
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa
Signing time: Fri 02 Jan 2026 16:20:48 +0000
ROA not before: Fri 02 Jan 2026 16:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59720
IP address blocks: 213.166.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:f7:38:24:b2:ad:d2:4c:b6:41:2f:83:fc:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jan 2 16:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b71855e23001d2ed24ad76f8905325ffea38a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:29:b0:21:c6:e8:70:06:44:cc:92:14:8d:b8:
6c:33:b1:7a:ee:df:49:0f:63:90:13:9a:0f:33:a9:
07:ea:f5:32:8b:10:9a:29:9d:5e:8e:67:91:6b:be:
b2:66:2c:6a:43:a4:14:7f:4d:4d:70:20:ce:69:8e:
fe:e8:47:28:fa:e9:dd:56:de:d3:1d:30:ce:ce:82:
96:df:e0:32:5e:12:e6:2d:bc:7f:6a:3d:1f:33:12:
6f:3f:10:30:68:1e:92:57:df:5c:b6:80:b6:52:a5:
13:5b:36:01:72:30:e1:94:8b:26:6e:91:b9:96:2e:
42:60:30:93:9d:f9:b2:40:59:23:05:a5:52:0d:0c:
d1:ee:b4:71:b2:56:65:da:26:c6:53:cd:5f:c4:d0:
98:55:02:04:67:99:7e:27:85:4e:a5:b1:23:e8:da:
4e:df:3f:5f:de:bd:e1:0b:1a:80:71:f1:ae:9a:46:
4d:a9:8d:fa:1d:37:a2:08:7c:56:43:8c:f2:59:28:
ee:63:10:87:cd:6c:0d:f7:0a:54:48:7c:49:3f:7c:
79:31:2c:f1:22:17:a4:d9:bd:42:2d:2a:16:39:fc:
d4:55:86:5f:a1:c3:ea:a6:04:53:fc:a2:0a:5e:9a:
03:ed:0b:1b:43:52:f2:62:45:62:d5:dc:38:c0:16:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:55:E2:30:01:D2:ED:24:AD:76:F8:90:53:25:FF:EA:38:A1:B6
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.166.184.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ba:93:2b:41:67:27:13:ca:70:53:5b:fa:06:6c:e0:b0:74:
eb:2c:68:c3:03:13:e9:a2:1c:be:55:48:0f:29:2b:01:67:6d:
07:06:88:ab:ae:6a:df:d2:e4:94:0f:91:dd:2e:86:8b:12:99:
a6:39:a4:3a:ad:d0:7f:af:0b:0e:3f:79:0c:83:23:02:0f:ac:
65:ac:e3:a6:d9:58:d2:64:70:df:09:a1:27:b8:3b:fc:3d:b6:
88:d1:b8:bf:8b:5c:6a:66:1b:78:b5:8a:8b:f0:06:b3:15:b4:
46:6e:bf:cf:80:63:98:9d:36:9a:d2:89:5d:54:46:ce:29:97:
c8:4e:40:e7:82:40:1e:45:dc:8b:1a:b7:1f:0d:c4:39:01:ea:
c1:91:5a:6c:8c:7a:aa:64:e6:5d:5b:82:d3:2f:e4:21:cb:75:
89:df:01:b7:f2:4c:86:36:aa:04:be:9b:58:06:24:3b:95:45:
dc:58:80:42:01:57:5c:26:51:20:df:43:a4:6c:9a:5e:6f:e2:
8d:29:cc:69:3c:b9:15:a6:bf:cb:39:94:d6:93:39:ec:a3:fd:
bf:a5:73:77:62:85:82:d7:9f:c9:27:a9:95:9d:96:b8:ac:12:
2d:8d:22:13:72:e2:54:2f:4f:b0:ac:0d:ec:a1:2a:31:6c:24:
4f:6a:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:24 2026 by rpki-client