This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cWmuz8rWpsLyYzFuVbnm5r2sozM.roa
File: cWmuz8rWpsLyYzFuVbnm5r2sozM.roa (raw, json)
Hash identifier: j0YU3bB3glv/xEPniuCcBHAL2FOz8BwUw+pnEkDQbqM=
Subject key identifier: 71:69:AE:CF:CA:D6:A6:C2:F2:63:31:6E:55:B9:E6:E6:BD:AC:A3:33
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019B783523827C6492B3EC1C81559E954BD3
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cWmuz8rWpsLyYzFuVbnm5r2sozM.roa
Signing time: Thu 01 Jan 2026 06:18:27 +0000
ROA not before: Thu 01 Jan 2026 06:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 80.83.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:23:82:7c:64:92:b3:ec:1c:81:55:9e:95:4b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 1 06:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7169aecfcad6a6c2f263316e55b9e6e6bdaca333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:7a:6d:6d:6b:d4:19:f3:c9:89:da:ef:f6:
16:d1:45:8e:f3:26:67:32:86:1a:4e:7b:b6:e4:46:
be:4d:58:a4:1a:c0:e4:eb:68:a4:13:27:39:c2:00:
b4:4c:6d:73:29:41:97:87:9a:7c:12:17:d5:09:aa:
cb:cb:37:5d:14:1c:ed:9a:19:f8:c4:ee:ba:1b:99:
46:92:6d:5d:9b:cb:38:15:58:d3:6b:52:21:1a:7b:
02:c2:b6:60:31:01:7e:3c:9f:9d:9f:74:79:07:f6:
f7:ba:c1:89:32:99:a2:2d:ba:39:ba:d8:d2:cf:9c:
49:e6:c1:e4:b5:b8:26:de:79:d3:fa:4d:81:66:47:
27:9b:47:87:31:38:be:84:96:69:b7:e7:f9:62:95:
3b:70:d6:01:2d:2c:a5:d5:50:97:d3:9d:5c:bb:87:
ec:f7:f1:6b:7a:20:43:19:91:54:ef:b3:31:22:20:
7c:5e:81:bd:32:2d:18:7f:43:28:b5:92:e7:f3:d9:
3d:d3:d9:03:87:ae:67:56:c9:4a:87:1d:62:45:37:
fc:25:15:ab:28:9b:66:19:83:a9:3f:2a:08:34:6a:
9e:ef:53:03:db:4d:ac:cf:bd:ea:ac:3f:c1:1e:cf:
84:f8:98:d2:1b:38:95:f6:cb:e1:b7:f2:35:3c:58:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:69:AE:CF:CA:D6:A6:C2:F2:63:31:6E:55:B9:E6:E6:BD:AC:A3:33
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cWmuz8rWpsLyYzFuVbnm5r2sozM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:33:bd:71:32:b3:5d:57:7d:38:72:d2:63:c9:aa:ec:cd:55:
75:3b:73:d5:8d:a6:76:ab:c6:e2:37:d2:e6:46:d7:28:c0:57:
75:76:9b:ea:8a:a0:62:d8:03:a1:f8:90:bb:c5:96:92:ca:3f:
9d:e1:d6:8f:18:2c:7e:e0:1a:13:b8:51:cb:0b:cd:30:a6:d5:
5a:75:ab:a4:18:bf:35:db:6c:bb:58:f7:5f:af:2d:6b:00:7c:
e6:6d:92:a7:38:32:da:22:b3:04:e1:18:ca:7f:ee:f5:af:d1:
b6:03:07:97:a2:ee:4a:3d:a1:87:18:bc:91:e0:c7:fe:d8:aa:
da:d5:e8:42:78:29:5b:3d:9b:9f:d8:f3:ce:47:2f:78:e8:fc:
ea:73:08:89:23:5b:44:4d:61:b7:9d:e6:fe:b6:89:d0:f0:a5:
0d:2d:36:ab:85:4b:04:e0:e2:7b:66:43:cb:c0:37:19:ec:86:
77:6b:c4:fd:82:91:56:c2:05:79:49:a7:69:d8:5a:05:07:f2:
52:95:ed:77:61:d9:db:a8:6c:c6:7d:d9:e8:9c:02:58:2b:b8:
9e:3c:68:57:1c:5d:c5:63:58:55:4b:d1:09:78:84:1c:37:2c:
bc:1e:7b:6e:06:56:52:b3:e9:df:52:8a:c1:ae:9d:b8:a7:79:
a9:aa:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:09 2026 by rpki-client