This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/X5N0k5_edi7TUbUxF9SeBJzV_dk.roa
File: X5N0k5_edi7TUbUxF9SeBJzV_dk.roa (raw, json)
Hash identifier: gP57pvGIpr/XNDn/RWR3jdseR7kJZgIx0hgFuiONUXA=
Subject key identifier: 5F:93:74:93:9F:DE:76:2E:D3:51:B5:31:17:D4:9E:04:9C:D5:FD:D9
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 019ABFD7B3D21EDF8C8A4F9152A00F5EBEB8
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/X5N0k5_edi7TUbUxF9SeBJzV_dk.roa
Signing time: Wed 26 Nov 2025 11:06:15 +0000
ROA not before: Wed 26 Nov 2025 11:06:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58222
IP address blocks: 45.80.16.0/22 maxlen: 24
185.234.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:bf:d7:b3:d2:1e:df:8c:8a:4f:91:52:a0:0f:5e:be:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Nov 26 11:06:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9374939fde762ed351b53117d49e049cd5fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:cd:86:54:d5:f0:c6:30:41:09:44:c5:55:
f8:63:a4:26:ea:3e:b3:d6:a0:e8:3c:6d:48:ab:45:
a6:07:c5:96:1e:df:53:e4:71:e8:14:ea:2b:44:2d:
fa:07:27:09:57:0e:6a:63:77:7c:a4:35:a1:07:ae:
4f:a0:5a:e9:5c:25:10:60:68:ce:3a:24:e8:01:81:
07:f5:60:94:37:9f:97:4a:72:66:ac:fa:bb:5f:21:
6f:5b:8a:56:cd:c6:fa:65:be:b3:6a:b5:27:38:a3:
65:63:cf:f7:ec:2e:2c:26:58:7c:68:49:86:98:09:
80:2e:f6:0c:45:4d:97:ca:f9:9c:14:fc:0a:fc:8c:
68:5c:f0:b0:60:dd:de:9d:41:ba:f8:7c:3a:d4:e8:
b0:85:b9:8c:57:be:3d:19:9f:e2:5b:2e:89:92:29:
10:3b:5f:6e:93:35:25:26:54:46:e1:fc:4f:fe:ac:
01:ab:9f:cf:cb:67:8e:17:9a:0b:d2:aa:d9:eb:1c:
5e:11:ad:f4:02:17:b2:8e:07:52:6d:a6:d9:60:06:
c1:bd:a4:4e:e3:9d:41:8f:43:31:3f:a7:d8:b7:ba:
cd:1f:f4:d4:86:44:7c:c0:8c:d6:f3:64:ce:2a:72:
2a:58:70:d9:14:87:31:a0:52:c8:10:df:ee:b2:a7:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:74:93:9F:DE:76:2E:D3:51:B5:31:17:D4:9E:04:9C:D5:FD:D9
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/X5N0k5_edi7TUbUxF9SeBJzV_dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.16.0/22
185.234.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:fc:67:fb:8a:98:89:b2:d7:e7:89:60:e6:b3:5a:c5:59:82:
31:88:7c:8a:72:b4:66:5c:20:e6:a2:10:39:e1:81:53:71:8a:
ee:49:f8:c4:77:cb:63:4d:33:db:fa:59:b6:33:b7:18:56:46:
9c:fc:ae:88:84:a5:de:a1:73:1d:ea:18:b2:46:19:00:88:4f:
ec:43:e5:d3:1e:48:62:6a:8d:c1:8a:fd:80:8c:af:55:27:e0:
fc:f3:4b:08:e7:42:67:81:2e:2f:f1:ea:1b:cc:41:81:07:da:
21:d9:0f:1e:47:83:6c:28:cc:22:64:b8:e2:6c:9a:3a:69:e6:
88:22:7a:47:de:3c:0b:11:7a:b9:14:59:f0:b4:ec:40:cf:3c:
1a:02:b6:58:ba:ad:45:96:73:4e:61:9a:eb:73:21:db:55:e3:
15:7f:21:3e:eb:ef:32:07:5c:64:9f:09:55:67:e4:7d:1b:c1:
7a:c4:be:91:51:4b:a0:70:9a:6e:90:aa:0d:7b:14:2f:7e:f3:
0e:94:72:29:ea:6a:9d:1d:d5:c8:36:00:b3:87:6d:81:25:9b:
cb:b3:e6:e2:a0:e3:cf:58:05:64:c2:9a:8f:f9:6b:bf:8b:ec:
82:22:5c:8f:1b:2a:34:b0:60:0c:6f:87:7b:f9:04:4e:6a:94:
c9:64:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:01 2025 by rpki-client