This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa
File: 4T05fIk1IL5XmP-J7JePysAxRKE.roa (raw, json)
Hash identifier: CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=
Subject key identifier: E1:3D:39:7C:89:35:20:BE:57:98:FF:89:EC:97:8F:CA:C0:31:44:A1
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019B77C674346C030BF28ED0809E002772E6
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa
Signing time: Thu 01 Jan 2026 04:17:33 +0000
ROA not before: Thu 01 Jan 2026 04:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31083
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:74:34:6c:03:0b:f2:8e:d0:80:9e:00:27:72:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 1 04:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e13d397c893520be5798ff89ec978fcac03144a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:1f:6b:7f:1e:00:99:69:f0:e0:84:82:c7:
59:ab:6f:f0:de:f9:b7:09:cb:56:08:2f:cd:ed:7f:
69:8b:91:6d:2d:79:09:35:93:d6:a6:c2:72:90:76:
7f:8b:bd:02:e0:0e:1d:76:64:21:44:12:2a:6d:48:
11:30:22:4d:cd:f4:d8:e8:ce:b1:83:ff:16:ef:c1:
59:68:38:cb:b3:1d:55:c8:b8:a7:95:26:c7:68:38:
26:56:09:5d:fd:0e:25:60:9a:5c:f0:d0:05:7b:35:
aa:bb:d0:39:97:53:db:60:08:60:b3:db:0f:80:fe:
cf:75:aa:55:e7:4d:ba:5c:21:c8:48:b9:3c:34:49:
63:e4:5a:18:20:ba:dc:a5:e9:c7:c0:cf:56:c7:e8:
54:a5:6f:5a:28:3f:66:8b:1a:fd:09:d9:b1:bf:32:
27:6e:4e:19:42:b5:35:3b:09:c2:a6:56:7e:66:15:
86:99:b3:f0:68:51:1e:a9:46:42:2b:f8:07:1f:00:
d8:9b:56:87:29:0a:31:07:d6:33:5d:35:17:74:74:
33:ca:0e:57:51:67:33:f0:eb:1c:51:20:47:db:b9:
3e:1e:c5:d7:65:f3:f2:76:8f:d5:29:ea:46:ff:b9:
07:1d:10:b3:64:c4:52:ca:c4:5b:1d:70:31:be:bb:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:39:7C:89:35:20:BE:57:98:FF:89:EC:97:8F:CA:C0:31:44:A1
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:10:70:4b:3e:83:2d:cd:79:32:65:ad:71:f3:29:67:2c:7e:
08:6b:bb:2e:e3:ec:fe:de:73:4a:22:2e:1a:a5:b2:91:7c:7c:
c8:ca:bd:55:04:46:46:0f:ec:1e:28:34:b3:b4:8f:8b:e1:dd:
0f:9a:3b:72:0f:a4:75:dd:b4:02:32:13:9b:31:90:ae:15:20:
01:2a:de:51:9f:7e:d3:e6:56:01:94:38:ee:b6:e1:9c:96:b7:
a8:6f:22:6f:87:d7:30:47:56:f9:c5:75:8e:e6:28:85:f7:26:
e9:87:47:ec:37:9d:46:10:8e:35:d0:3a:6b:0b:f2:89:dc:30:
72:78:c0:86:95:09:12:fa:f1:01:cd:c9:23:ca:fc:a0:49:a2:
7b:54:e3:13:60:45:65:e1:53:cd:f8:25:95:68:6e:a0:03:11:
50:4d:ba:91:d0:76:9a:51:d5:34:dc:e9:9a:38:31:18:7e:5b:
c8:97:55:72:2c:7f:88:59:22:14:38:a7:fb:32:07:15:c6:f0:
ae:4b:ea:61:39:dc:43:dc:49:cf:7a:c2:c5:e2:d4:f3:5a:39:
c6:3d:e1:f9:d8:26:fb:78:4a:7e:1f:6f:05:a1:0d:ee:ac:46:
13:ae:95:6f:a5:db:77:25:f3:90:cb:f3:b4:7b:e6:1d:9a:a1:
8e:de:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:50 2026 by rpki-client