This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0UglsNXMRbppVf9UMCr5HfDlZmc.roa
File: 0UglsNXMRbppVf9UMCr5HfDlZmc.roa (raw, json)
Hash identifier: oyBkQKrioZmSa2eCAsP2LzK/llwJAQO2IVzqaTWl5xA=
Subject key identifier: D1:48:25:B0:D5:CC:45:BA:69:55:FF:54:30:2A:F9:1D:F0:E5:66:67
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019B76EACCABBCA407D8E8061DE57AC899F5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0UglsNXMRbppVf9UMCr5HfDlZmc.roa
Signing time: Thu 01 Jan 2026 00:17:37 +0000
ROA not before: Thu 01 Jan 2026 00:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200239
IP address blocks: 5.180.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:cc:ab:bc:a4:07:d8:e8:06:1d:e5:7a:c8:99:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 00:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14825b0d5cc45ba6955ff54302af91df0e56667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5c:f1:37:47:09:10:a6:52:ff:0f:97:36:7c:
ce:2e:78:52:31:fb:33:ea:7a:8e:6a:dd:a7:dc:62:
8e:d6:9b:75:1e:36:f0:90:f2:e3:81:8b:25:30:9f:
57:8e:2c:0d:59:02:75:49:2a:2f:71:62:06:c0:2f:
b5:bc:9a:a7:4c:19:0f:79:4e:09:e2:e5:76:8c:26:
de:e5:1e:4f:08:c4:0e:a4:31:ab:37:89:f0:24:2e:
eb:28:78:24:90:f2:76:e6:fd:70:9c:9f:c8:21:ab:
f7:fc:bc:06:b3:1b:80:6f:5e:01:3f:88:46:ae:a0:
9b:ff:88:72:b6:ab:4c:5e:43:03:86:e1:1a:ab:04:
d0:40:56:16:ed:b4:22:0e:e8:62:6c:24:98:26:ee:
2a:14:81:a0:4d:f3:d5:f7:be:c4:80:51:20:d0:24:
e1:ab:7d:67:01:bb:df:d5:10:f6:cb:0a:c1:43:b4:
46:26:ba:ec:12:53:cf:b9:fa:d0:12:d9:59:45:b5:
e1:15:26:83:5c:5f:ba:bb:ae:b3:5a:e9:ac:90:b0:
a3:3b:24:81:87:6e:a2:3f:ed:15:1b:3b:e2:f7:c8:
d9:eb:54:87:b8:ec:d9:05:45:82:3a:c5:11:cd:8c:
83:a0:1c:6d:a8:ef:eb:0e:90:2b:7a:63:8a:14:b4:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:25:B0:D5:CC:45:BA:69:55:FF:54:30:2A:F9:1D:F0:E5:66:67
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0UglsNXMRbppVf9UMCr5HfDlZmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/24
Signature Algorithm: sha256WithRSAEncryption
52:08:71:ac:9b:b5:5e:7b:40:af:b5:8c:5c:45:55:b0:e4:61:
e8:9f:ca:db:45:13:04:c3:e3:31:73:c9:29:fd:49:a1:f8:f6:
82:e9:10:66:8a:ae:8f:68:a6:95:eb:91:36:07:7a:4d:8d:e6:
43:60:54:80:96:f5:c8:93:a4:29:13:9c:66:57:5a:d2:c7:d7:
5e:09:5e:cf:41:c0:7f:5f:ea:30:50:13:af:ac:e0:e1:0e:e2:
a3:f1:6d:5e:a2:dc:64:b6:f9:2e:99:a7:59:fc:42:05:83:df:
6a:c6:e6:14:af:da:c7:7b:6d:f4:72:12:5f:b3:e6:b4:cc:37:
25:bc:e5:0e:1b:bf:ce:37:85:22:61:16:3a:d3:1a:ba:32:ef:
d9:08:7b:5d:0f:7d:cf:06:f0:a3:dc:e2:04:36:16:ca:5b:8f:
90:8f:d1:ed:f5:e1:ad:80:e2:8d:24:16:9d:a8:3e:f6:b1:3a:
d8:32:0f:cc:10:11:26:f0:6f:a5:c1:ac:8f:12:2c:6c:da:61:
1a:3f:52:93:d1:fd:f6:59:4d:42:69:ef:ed:d4:20:75:ff:09:
79:ba:72:74:26:6d:70:a0:34:0c:fc:21:8e:e2:a0:fa:46:49:
5c:f4:cc:2b:3a:3d:b8:01:4a:cb:48:ba:07:0b:09:6e:80:de:
ba:80:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:49:08 2026 by rpki-client