This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa
File: Ub8GbvDA35aTIzVecXGmXtHsXEc.roa (raw, json)
Hash identifier: elt6C1OboYliVZXwfhYgZV3fxNGiHeY3wGhmbW2ynL4=
Subject key identifier: 51:BF:06:6E:F0:C0:DF:96:93:23:35:5E:71:71:A6:5E:D1:EC:5C:47
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 019B7C7F67E1EAF84E8F06A5CE34BF17FE29
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa
Signing time: Fri 02 Jan 2026 02:18:02 +0000
ROA not before: Fri 02 Jan 2026 02:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7155
IP address blocks: 92.51.216.0/22 maxlen: 24
92.51.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:67:e1:ea:f8:4e:8f:06:a5:ce:34:bf:17:fe:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 02:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51bf066ef0c0df969323355e7171a65ed1ec5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:94:27:2d:b1:75:93:e7:3b:bd:ef:fa:ac:
62:76:ce:ea:4d:0a:93:a6:f3:7f:13:ba:d8:2a:a9:
11:14:19:4f:18:b1:88:29:98:ab:24:22:8c:20:5b:
92:6a:58:83:04:f5:98:9e:19:6a:a1:1c:cb:29:16:
ca:a9:e0:68:a4:35:ce:57:29:4f:89:59:e7:ca:4b:
01:41:2e:7b:6f:60:8a:50:9d:5b:5a:3d:0b:51:24:
13:79:95:80:4c:40:75:51:76:37:f0:7d:d4:6b:a4:
11:a8:65:b6:df:6c:8b:2b:9f:7f:3c:6b:1f:03:f8:
c5:b2:c7:75:60:78:a7:7a:59:31:f5:fe:68:ef:af:
6d:df:85:83:aa:0c:39:c0:2e:4b:9d:56:86:95:c0:
e5:0f:b9:57:52:99:a8:47:d8:09:45:41:2c:df:7c:
ee:b0:1a:eb:7e:06:74:ea:a8:6f:b6:b9:f2:83:11:
bc:8a:6e:71:7c:73:fb:7b:13:1c:de:a7:5a:64:90:
12:f4:96:f2:8f:35:50:f6:5b:5e:fc:95:00:9f:c0:
34:2b:e2:5b:c1:24:ce:b9:0a:f0:bd:f6:72:74:6b:
e0:74:66:c7:c1:86:f1:e3:2d:8f:7a:0e:84:3f:fe:
a3:34:f3:ea:9c:92:c8:28:ca:60:f3:2f:4d:07:83:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:06:6E:F0:C0:DF:96:93:23:35:5E:71:71:A6:5E:D1:EC:5C:47
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Ub8GbvDA35aTIzVecXGmXtHsXEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.216.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:8d:e4:be:4c:b0:ee:99:39:b8:c5:f6:e2:57:5b:84:11:52:
fb:35:eb:78:8d:6a:cf:fc:71:db:ca:a0:a1:11:99:ea:fe:90:
f9:8d:c5:c0:b1:4d:69:6b:7a:3b:cd:56:47:dd:24:32:1f:dc:
05:65:47:31:64:7d:62:89:26:bd:a8:30:aa:36:a1:36:28:71:
85:df:17:d2:7b:ae:dd:19:51:be:ee:92:3a:4c:7e:8d:7a:0d:
32:34:71:aa:b7:ec:15:8d:90:3e:3c:62:81:5c:2d:af:af:85:
a6:59:ca:12:b4:3a:1d:99:3b:4c:a8:0e:e0:ee:46:ad:ad:da:
c9:79:c1:f1:0e:05:17:c3:28:70:36:79:45:36:d8:e3:5b:93:
6e:c1:e6:26:17:39:9f:75:bf:b0:f3:34:96:8f:f9:9a:f4:1f:
60:08:04:ad:34:42:3b:f4:cb:32:7c:f4:5f:16:08:c7:99:e6:
52:6d:03:04:fc:d8:87:b1:51:d5:84:cd:51:79:76:b3:c0:19:
22:46:7d:ac:58:be:1a:d4:9b:a0:fd:83:4e:1d:10:e6:56:df:
5c:89:79:0d:17:4c:8b:41:07:10:4d:bd:f3:e3:e9:d0:fd:e0:
53:5e:1f:de:44:3d:56:d6:ce:3c:6e:58:a2:4d:4b:76:10:79:
00:65:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:13:59 2026 by rpki-client