This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa
File: i5wzAWhzD6thOzcjAU711zxCavE.roa (raw, json)
Hash identifier: P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=
Subject key identifier: 8B:9C:33:01:68:73:0F:AB:61:3B:37:23:01:4E:F5:D7:3C:42:6A:F1
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 019B78A30607CC23B96FFE05D0513463F9A3
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa
Signing time: Thu 01 Jan 2026 08:18:28 +0000
ROA not before: Thu 01 Jan 2026 08:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50988
IP address blocks: 193.200.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:06:07:cc:23:b9:6f:fe:05:d0:51:34:63:f9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jan 1 08:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9c330168730fab613b3723014ef5d73c426af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:07:16:4e:96:0c:71:34:53:04:26:63:e2:
86:f3:98:ce:5c:88:4c:4d:25:e9:a3:03:15:01:4b:
29:78:c3:8f:d5:c7:e3:b8:c2:2e:03:8f:00:71:9b:
03:58:80:8c:e0:f4:4a:82:f3:ea:3b:45:b7:cb:cd:
ed:e4:b7:6d:b5:f1:84:42:6e:98:e8:90:8a:19:73:
88:32:0b:d2:b0:0e:86:a8:38:d8:5c:5c:54:41:eb:
5d:28:6b:d8:b5:23:bd:09:a3:75:4d:8d:ff:ef:bd:
0b:d1:c2:21:47:63:d7:3e:23:61:93:64:c6:e1:7f:
bb:14:c4:f3:ca:bd:ef:9f:06:9f:7b:e8:e9:c6:1f:
6f:b9:cf:bf:30:62:8f:19:94:61:46:86:55:46:2a:
a3:0b:55:ad:1a:4f:bb:ff:af:d0:e9:f8:82:44:9e:
f2:76:00:0a:51:cd:e4:d5:6b:f1:59:46:8f:b0:79:
eb:ae:1b:19:fe:f8:b1:d0:ae:5b:31:ce:27:ad:e6:
b6:7b:3e:cd:39:a9:5a:a0:06:64:60:2a:00:cb:e9:
12:97:37:4c:ca:9a:77:58:b1:d9:2c:ac:6a:3d:2e:
c4:1b:9f:db:9f:a2:93:5f:4f:3b:d1:c7:b2:32:0f:
30:69:df:cd:84:2b:4e:92:03:b7:f9:33:36:bd:82:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9C:33:01:68:73:0F:AB:61:3B:37:23:01:4E:F5:D7:3C:42:6A:F1
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.232.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c0:ae:f7:ca:ab:f2:13:4e:29:af:85:2d:f8:2d:07:0e:6f:
89:7f:7f:c6:c7:d8:96:ab:47:37:9b:d3:7a:c1:4f:7f:ca:52:
86:2e:7c:66:f3:f3:ca:ea:30:4c:6f:35:41:0c:a8:72:5d:fe:
05:44:9f:5e:76:5e:58:04:d3:86:01:2d:2e:4c:33:a6:92:20:
b7:ef:77:80:0d:c9:47:5f:ea:4b:50:50:75:ce:7b:47:02:b5:
51:be:6f:be:ee:a2:77:2f:9a:37:bc:9a:cc:fd:c0:e7:a8:55:
ab:90:16:01:64:56:30:a3:16:87:a2:5a:c0:b8:2d:60:a3:3a:
12:23:ed:f8:66:21:ad:b2:c0:d9:27:98:50:2d:d6:04:9e:1b:
17:4d:a8:ac:17:8f:f8:34:bf:97:a2:bf:f7:ed:14:38:6d:38:
73:96:7d:14:b4:18:76:52:22:eb:c2:29:d1:92:8b:ac:1c:52:
59:98:04:60:a7:3f:b8:c6:39:89:6f:5e:5a:e7:e1:e1:c5:2f:
ea:98:7d:15:c7:14:92:76:d9:a6:0b:67:08:24:08:ab:8b:8e:
64:56:73:6b:4d:fb:58:7f:35:0f:65:3e:00:93:cc:05:a0:fa:
13:14:2e:fa:c5:ea:66:05:98:4e:f0:3a:cf:4f:65:19:40:07:
fe:bc:16:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4owYHzCO5b/4F0FE0Y/mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U0OTI1NWY0MDZhNzI1NTkzYzYyZTFjNDA4Nzc5NTg2
ZDU2ZWYwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjljMzMwMTY4NzMwZmFiNjEzYjM3MjMwMTRlZjVkNzNjNDI2YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy14HFk6WDHE0UwQmY+KG85jOXIhM
TSXpowMVAUspeMOP1cfjuMIuA48AcZsDWICM4PRKgvPqO0W3y83t5LdttfGEQm6Y
6JCKGXOIMgvSsA6GqDjYXFxUQetdKGvYtSO9CaN1TY3/770L0cIhR2PXPiNhk2TG
4X+7FMTzyr3vnwafe+jpxh9vuc+/MGKPGZRhRoZVRiqjC1WtGk+7/6/Q6fiCRJ7y
dgAKUc3k1WvxWUaPsHnrrhsZ/vix0K5bMc4nrea2ez7NOalaoAZkYCoAy+kSlzdM
ypp3WLHZLKxqPS7EG5/bn6KTX0870ceyMg8wad/NhCtOkgO3+TM2vYKZ7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIucMwFocw+rYTs3IwFO9dc8QmrxMB8GA1UdIwQY
MBaAFNbOSSVfQGpyVZPGLhxAh3lYbVbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmIt
NjcyNWQ5ODE5NmM2LzEvaTV3ekFXaHpENnRoT3pjakFVNzExenhDYXZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmItNjcyNWQ5ODE5NmM2
LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjoMA0G
CSqGSIb3DQEBCwUAA4IBAQCRwK73yqvyE04pr4Ut+C0HDm+Jf3/Gx9iWq0c3m9N6
wU9/ylKGLnxm8/PK6jBMbzVBDKhyXf4FRJ9edl5YBNOGAS0uTDOmkiC373eADclH
X+pLUFB1zntHArVRvm++7qJ3L5o3vJrM/cDnqFWrkBYBZFYwoxaHolrAuC1gozoS
I+34ZiGtssDZJ5hQLdYEnhsXTaisF4/4NL+Xor/37RQ4bThzln0UtBh2UiLrwinR
kousHFJZmARgpz+4xjmJb15a5+HhxS/qmH0VxxSSdtmmC2cIJAiri45kVnNrTftY
fzUPZT4Ak8wFoPoTFC76xepmBZhO8DrPT2UZQAf+vBbD
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:12 2026 by rpki-client