This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa
File: 5lccFV7z00Cs1oDdNniBnwJlbmg.roa (raw, json)
Hash identifier: EKtkvQVGangOVXfHSHz8QSCp4ca+LhVxZlvPGnv/+3A=
Subject key identifier: E6:57:1C:15:5E:F3:D3:40:AC:D6:80:DD:36:78:81:9F:02:65:6E:68
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019B7D5C4BAFEEF3BDC43515EFB233B098AB
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa
Signing time: Fri 02 Jan 2026 06:19:19 +0000
ROA not before: Fri 02 Jan 2026 06:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34397
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:4b:af:ee:f3:bd:c4:35:15:ef:b2:33:b0:98:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Jan 2 06:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6571c155ef3d340acd680dd3678819f02656e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:1d:ac:17:8d:d6:55:02:04:db:44:88:53:
04:91:38:5a:38:80:c5:84:5b:f6:5d:e8:bc:59:64:
24:ea:19:e7:de:77:54:7c:4e:99:55:d5:a8:04:bd:
cb:f1:01:c0:1e:fc:ff:a9:b4:2e:f6:d5:82:05:87:
c1:7f:b2:14:c6:05:5e:23:6a:35:15:06:32:6d:25:
e0:75:c6:69:45:cd:66:52:62:fb:be:73:14:d6:9d:
c5:20:fe:56:35:2a:e3:1d:9b:6d:55:98:ed:fb:e3:
fa:bd:2b:07:d8:7f:1f:42:52:74:31:25:d4:09:ec:
27:7f:7b:fc:b5:e4:f5:07:f1:6c:b8:e8:c9:3b:9f:
55:07:c1:27:cd:5b:14:4f:ab:99:71:f0:ea:eb:1f:
26:ba:1c:c6:36:48:76:9a:71:80:fc:0d:aa:4c:6a:
6f:9e:7c:ee:eb:61:9d:d7:b0:b1:e2:11:d4:d9:c8:
ca:64:be:80:8a:42:9b:a3:9c:11:ab:03:99:45:f0:
fa:ae:94:af:12:44:42:2a:76:34:47:2f:b7:88:88:
b5:71:35:02:66:30:eb:ba:56:fb:49:0c:97:a1:95:
be:a0:72:23:98:6a:0b:ab:99:6d:30:73:71:27:1b:
16:1b:c7:6e:e7:d1:1f:e0:a5:99:b3:e4:7d:35:72:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:1C:15:5E:F3:D3:40:AC:D6:80:DD:36:78:81:9F:02:65:6E:68
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
51:70:7e:3e:bc:1f:54:fa:13:12:9d:99:92:b4:ea:ef:d8:9a:
1c:ef:ea:31:22:72:b5:eb:64:5d:48:e0:e3:a5:a4:7d:13:f2:
34:fd:86:dc:7c:bb:97:64:16:4a:2d:4c:5a:ed:05:b9:60:11:
8d:e0:9f:83:ff:a7:0c:91:a0:9d:90:80:36:5b:1a:c1:32:6d:
87:27:a2:22:4f:0f:96:13:eb:e8:03:b8:78:6a:c3:8f:0f:4a:
c8:89:d8:d0:3d:65:5c:04:40:42:5c:52:4b:6e:30:69:78:45:
19:ed:11:84:57:fb:3b:9f:84:65:0b:67:97:77:a4:aa:b5:53:
0b:6c:b9:2a:d2:b1:f9:c8:0e:61:7a:be:4f:ff:29:64:0c:91:
50:44:10:e0:50:2e:53:ba:ad:92:c4:22:1b:44:9c:af:92:dc:
2e:97:f4:d5:28:0e:5e:01:4c:86:e6:60:30:a6:ba:cd:b0:0b:
c0:46:80:dc:b1:f5:e9:a8:7b:6f:6e:8b:60:88:d1:60:3a:2d:
d5:fc:11:d3:a3:38:ef:2d:05:d9:12:47:13:a5:ff:14:3d:78:
72:15:4d:f2:60:fb:02:e0:62:de:73:d9:e9:bb:c0:56:be:d5:
76:d5:be:82:d2:16:1a:37:82:bc:d0:7b:4f:4d:55:f6:52:41:
cb:8b:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:33 2026 by rpki-client