This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Bs52ULR00BRx6atFoH4fG8hX_U8.roa
File: Bs52ULR00BRx6atFoH4fG8hX_U8.roa (raw, json)
Hash identifier: Qz6fZ5T/cYHph0HuxyvbAhUBjOZP1VA7SYSZNGsZ9tI=
Subject key identifier: 06:CE:76:50:B4:74:D0:14:71:E9:AB:45:A0:7E:1F:1B:C8:57:FD:4F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019B77C76E67403177B502C1B701295A2EC2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Bs52ULR00BRx6atFoH4fG8hX_U8.roa
Signing time: Thu 01 Jan 2026 04:18:37 +0000
ROA not before: Thu 01 Jan 2026 04:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51219
IP address blocks: 5.8.180.0/23 maxlen: 24
81.23.10.0/23 maxlen: 24
109.73.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:6e:67:40:31:77:b5:02:c1:b7:01:29:5a:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06ce7650b474d01471e9ab45a07e1f1bc857fd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:9c:74:0c:6c:a9:e9:41:1d:4f:9d:52:98:
6a:84:16:14:bc:45:c4:7c:07:03:77:96:85:c2:8c:
b1:66:de:df:85:bd:43:84:86:14:cf:ce:75:8f:ff:
59:17:af:4f:9b:2a:db:cd:8d:b6:4d:46:45:19:4b:
65:30:c6:0d:38:c3:20:f4:29:cf:4a:19:78:be:e1:
5c:0c:54:a3:c7:26:21:67:47:10:60:2f:59:45:3a:
de:85:6f:a5:f2:0a:2c:44:aa:86:af:24:9a:f1:cc:
4b:5c:00:e5:68:9a:ad:c8:37:bd:e4:ba:7a:40:5e:
3d:e7:a0:2a:c8:1e:21:8a:c3:5d:dd:61:bf:57:0e:
46:65:ea:40:40:90:3a:a9:c4:03:f4:c6:59:a0:e4:
44:67:aa:62:0d:b1:02:83:62:a6:73:1c:ec:79:e2:
e3:ac:9b:ae:5a:59:f4:c0:08:d2:e6:3c:78:29:78:
82:1e:b2:a8:de:8c:79:68:2c:f7:5b:2e:0a:92:f2:
f0:60:9e:8a:21:06:b6:36:c3:93:fe:a1:81:8c:3f:
5c:a4:bd:fd:01:ce:86:27:63:c5:e7:ff:c3:73:cf:
59:9c:10:da:2f:75:ac:b9:f9:b8:2c:aa:07:0f:6c:
e8:4d:90:06:89:a6:8e:bc:22:c7:8d:01:25:ce:91:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:76:50:B4:74:D0:14:71:E9:AB:45:A0:7E:1F:1B:C8:57:FD:4F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Bs52ULR00BRx6atFoH4fG8hX_U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.180.0/23
81.23.10.0/23
109.73.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7b:d8:5e:da:7f:d6:9a:75:60:96:20:c9:4a:0e:39:a1:24:
96:58:73:43:f1:08:0f:35:51:05:39:6e:3c:57:c9:d3:dd:f4:
3c:54:68:8f:dc:f1:ab:d3:1f:a4:8a:5b:86:e2:4e:5c:86:85:
8c:b3:4e:be:e2:af:d8:bd:4c:3b:a0:dd:b0:19:64:7b:d9:6d:
f9:81:b0:06:85:0e:d1:f8:12:b2:ca:e4:cc:22:52:a2:c4:dc:
ae:35:48:0c:1c:33:15:de:ab:56:1e:2e:97:2f:3f:a0:68:0a:
17:e5:ad:36:86:1f:e2:09:4e:46:49:ab:d4:45:90:92:ea:b1:
95:c1:1c:40:29:b1:cb:07:c0:f1:a1:88:61:4e:ae:26:d1:d8:
1e:3f:24:79:c6:5b:c4:36:41:af:6b:ba:68:35:15:9b:3a:02:
e4:81:82:89:3d:08:29:86:35:1b:9f:d8:9c:f9:04:6b:3c:6b:
29:2b:10:82:2b:fe:f6:19:ab:7d:6d:6e:08:c0:1d:ab:86:45:
fe:54:11:88:2b:59:67:4e:ea:11:a5:49:33:55:0a:45:a5:16:
aa:a2:15:07:33:ac:ac:dc:23:be:c4:5b:cf:ae:a8:7f:86:d5:
1d:7d:5f:4f:1b:86:94:46:3d:9a:c6:a9:00:9a:c9:1e:10:ad:
30:19:61:14
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt3x25nQDF3tQLBtwEpWi7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmNlNzY1MGI0NzRkMDE0NzFlOWFiNDVhMDdlMWYxYmM4NTdmZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3ScdAxsqelBHU+dUphqhBYUvEXE
fAcDd5aFwoyxZt7fhb1DhIYUz851j/9ZF69PmyrbzY22TUZFGUtlMMYNOMMg9CnP
Shl4vuFcDFSjxyYhZ0cQYC9ZRTrehW+l8gosRKqGrySa8cxLXADlaJqtyDe95Lp6
QF4956AqyB4hisNd3WG/Vw5GZepAQJA6qcQD9MZZoOREZ6piDbECg2KmcxzseeLj
rJuuWln0wAjS5jx4KXiCHrKo3ox5aCz3Wy4KkvLwYJ6KIQa2NsOT/qGBjD9cpL39
Ac6GJ2PF5//Dc89ZnBDaL3Wsufm4LKoHD2zoTZAGiaaOvCLHjQElzpEGOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAbOdlC0dNAUcemrRaB+HxvIV/1PMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvQnM1MlVMUjAwQlJ4NmF0Rm9INGZHOGhYX1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBQi0AwQB
URcKAwQAbUkOMA0GCSqGSIb3DQEBCwUAA4IBAQCce9he2n/WmnVgliDJSg45oSSW
WHND8QgPNVEFOW48V8nT3fQ8VGiP3PGr0x+kiluG4k5choWMs06+4q/YvUw7oN2w
GWR72W35gbAGhQ7R+BKyyuTMIlKixNyuNUgMHDMV3qtWHi6XLz+gaAoX5a02hh/i
CU5GSavURZCS6rGVwRxAKbHLB8DxoYhhTq4m0dgePyR5xlvENkGva7poNRWbOgLk
gYKJPQgphjUbn9ic+QRrPGspKxCCK/72Gat9bW4IwB2rhkX+VBGIK1lnTuoRpUkz
VQpFpRaqohUHM6ys3CO+xFvPrqh/htUdfV9PG4aURj2axqkAmskeEK0wGWEU
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:46 2026 by rpki-client