This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa
File: syri4gMUyb6a13KvMROJjwlBhZg.roa (raw, json)
Hash identifier: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=
Subject key identifier: B3:2A:E2:E2:03:14:C9:BE:9A:D7:72:AF:31:13:89:8F:09:41:85:98
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 019B76EB669EEA5CBB306138C9E8B1AF874B
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa
Signing time: Thu 01 Jan 2026 00:18:17 +0000
ROA not before: Thu 01 Jan 2026 00:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206483
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:66:9e:ea:5c:bb:30:61:38:c9:e8:b1:af:87:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 1 00:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32ae2e20314c9be9ad772af3113898f09418598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:42:f3:3d:11:27:18:ff:1f:5a:1a:a9:79:
6c:1f:9b:fe:32:d7:a2:eb:15:a5:6c:69:3c:7a:01:
26:f1:c4:68:1c:f2:34:a8:b0:be:41:f6:fb:c1:78:
5d:3f:7f:4b:f8:34:28:40:79:3e:cd:c7:ec:02:5d:
72:6d:76:9a:e2:7b:62:d2:c3:42:82:86:e0:a3:02:
54:a9:8b:7d:b8:18:c0:71:0f:b4:89:d4:9b:da:4b:
fd:7b:0d:c4:61:6c:89:91:44:93:77:58:d7:3d:11:
39:ef:82:f5:9f:04:9e:c4:a3:45:0a:7f:92:7c:92:
41:93:cc:c7:1d:c9:83:b6:24:50:0a:59:6c:f9:eb:
a5:21:26:b4:db:f8:6e:d8:c1:16:5d:08:6b:4a:e5:
3e:00:56:91:26:0d:31:6f:b0:76:a9:3d:e2:89:55:
b1:5e:57:e8:b3:aa:1e:43:3f:d5:2c:3e:3a:21:b0:
6a:65:7a:e7:e6:b7:48:9f:ed:6f:3c:63:85:5b:55:
0c:85:dd:6a:44:ac:ba:61:40:d7:4c:31:9f:49:0e:
1c:6e:38:f9:72:72:0a:7d:ee:55:6d:29:43:e5:31:
9c:26:86:40:0f:5c:62:47:e1:70:7e:f2:d4:5a:80:
11:ed:f4:00:06:b1:7c:79:cd:39:d1:74:3c:5f:8c:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:E2:E2:03:14:C9:BE:9A:D7:72:AF:31:13:89:8F:09:41:85:98
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/syri4gMUyb6a13KvMROJjwlBhZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cd:8b:65:9b:cf:50:db:d2:f3:27:1f:41:18:1a:0b:f8:80:
fe:ed:46:ab:d6:9d:7f:97:65:e8:67:e0:1e:9d:05:74:66:71:
e2:cf:56:0d:42:a5:63:9d:f4:8b:41:fd:8b:66:09:81:37:70:
e6:9d:fc:a9:94:36:d0:ba:c2:e1:00:c5:4d:78:9b:70:d1:ea:
54:72:b8:66:0f:fe:c2:34:b3:d2:52:2a:ae:52:a0:55:1f:ee:
0c:b3:6d:c3:8d:02:62:11:82:3e:d7:09:f6:73:b8:4d:ea:cc:
ff:18:d1:80:8d:4c:93:db:ad:b7:1f:12:cc:34:a3:84:2c:18:
bc:7b:cf:db:a0:f0:7e:65:11:4d:bc:3d:a3:4c:bf:07:ab:fe:
31:a5:3f:f8:05:d1:69:bb:4f:f2:41:6a:67:1c:70:9a:4c:cc:
d8:4d:f2:3e:b5:c8:a9:0a:01:02:26:9d:47:1d:7a:39:06:51:
07:9c:fc:a6:b7:c9:4a:0e:1c:9f:b5:49:1a:a1:a0:4c:18:ab:
2e:7c:e5:9e:38:6e:48:f3:34:46:2f:94:96:1a:68:49:71:57:
62:b4:ba:2e:b1:27:b6:73:4e:e0:47:6c:8e:75:78:98:93:e5:
7e:fd:74:41:ca:eb:06:1f:c6:68:01:e9:1c:c7:4a:8d:38:4d:
56:22:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:16:08 2026 by rpki-client