This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa
File: C5-n76GjDGgTo3St4TOPzsa8ErE.roa (raw, json)
Hash identifier: wL0KAphUIwIQECc1NQQKJ/DAF+DOTBb5tCVgPHb/KS0=
Subject key identifier: 0B:9F:A7:EF:A1:A3:0C:68:13:A3:74:AD:E1:33:8F:CE:C6:BC:12:B1
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 019B7E379190D14700C490D8EC28AA170CE2
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa
Signing time: Fri 02 Jan 2026 10:18:49 +0000
ROA not before: Fri 02 Jan 2026 10:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207092
IP address blocks: 185.193.12.0/23 maxlen: 23
185.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:91:90:d1:47:00:c4:90:d8:ec:28:aa:17:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Jan 2 10:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b9fa7efa1a30c6813a374ade1338fcec6bc12b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:b0:0d:15:70:8d:95:54:10:f6:c8:66:45:
82:a7:6e:5e:33:35:e3:89:0d:71:0d:88:11:3c:d1:
9d:64:9e:e8:98:61:78:99:44:b4:bf:fa:19:9d:03:
4e:01:3a:ad:46:70:5f:e6:29:62:af:b4:b7:26:5e:
82:6a:7b:db:b7:0e:57:46:75:d9:65:80:58:e2:a1:
68:66:49:68:09:5c:66:d3:d3:18:4f:b4:17:05:08:
21:1a:3b:25:6b:11:4c:7c:89:4b:1a:f4:88:f8:b4:
0c:37:cb:a2:a0:fe:27:76:64:e5:31:ab:82:10:18:
8c:1e:8a:f6:24:1d:d7:14:c3:59:2c:d5:0e:93:24:
1e:9a:e2:5d:b7:42:8d:7f:e2:83:cc:15:5f:50:ab:
57:0d:a2:39:df:0d:02:b5:eb:a4:c8:3c:1b:c2:de:
80:db:16:eb:ef:71:3a:0c:7c:cd:00:1a:44:a0:c5:
25:56:b6:59:35:36:98:d6:ce:db:7a:55:44:03:fe:
7e:22:ff:e8:08:3a:1a:ba:59:9e:70:64:c8:85:7c:
3f:94:69:39:7e:7a:a8:e3:04:ee:40:cc:c5:d0:67:
ba:f0:f2:a2:ea:e3:af:b9:48:5c:4a:d7:ea:ea:5e:
d0:41:ae:d3:1e:c9:d8:a6:c9:fe:77:79:c5:0f:d7:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9F:A7:EF:A1:A3:0C:68:13:A3:74:AD:E1:33:8F:CE:C6:BC:12:B1
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.12.0/23
185.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:21:f1:a0:86:6f:1a:64:87:e2:e8:ec:c5:c1:da:67:d7:e3:
e9:0a:8d:e0:ea:1a:79:ef:9e:5e:4a:9a:05:64:81:c3:a7:ec:
97:24:bd:a1:81:98:05:d6:bd:30:07:6d:11:39:1a:42:2f:63:
71:4f:5c:d4:fd:2e:38:95:dd:ed:fb:76:d3:27:61:68:5f:c6:
39:2d:e3:5b:ea:6c:e6:f9:75:fc:2b:c7:1a:37:27:34:0e:04:
6d:83:c1:cf:2d:7f:ec:db:15:e6:fe:a1:40:38:c5:60:bf:af:
1c:09:0e:da:ec:89:b6:40:c8:6e:2c:e4:ab:8c:8a:0f:de:8b:
6c:6b:32:a5:32:7a:de:ab:40:15:6e:aa:73:a3:ac:a7:22:e4:
56:01:fc:ec:00:0c:6f:1f:8c:6d:99:03:83:38:59:ec:7d:2b:
d8:8e:29:ce:b7:01:bd:ed:49:5e:0f:26:3e:20:1f:d9:c9:fb:
ea:fe:20:f7:8d:62:19:f9:63:d4:96:fe:d0:55:b8:a7:93:5d:
cb:34:ad:53:90:6b:42:5e:73:59:a8:f5:92:ab:eb:97:1c:c9:
0a:c5:f4:58:0e:96:df:54:e8:22:a2:75:a7:99:17:26:f8:89:
28:e9:44:ac:48:d6:79:45:91:30:cb:ad:94:87:21:ab:c7:c3:
28:89:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:01 2026 by rpki-client