This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa
File: mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa (raw, json)
Hash identifier: bNhTW0oGynm2yHcv08JZZ9D2dvlwn9a4rlXVwK15lNU=
Subject key identifier: 99:51:7F:D1:C8:2F:B0:4B:5F:E2:25:5E:89:0E:A0:F0:88:C0:B2:60
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019B7F853161AE2A09668717CE57D2140D6D
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa
Signing time: Fri 02 Jan 2026 16:23:13 +0000
ROA not before: Fri 02 Jan 2026 16:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209200
IP address blocks: 2.57.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:31:61:ae:2a:09:66:87:17:ce:57:d2:14:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jan 2 16:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99517fd1c82fb04b5fe2255e890ea0f088c0b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:4e:46:fa:44:5a:73:82:da:0d:ac:cb:9e:
84:d3:f0:e1:39:c6:75:b3:9e:79:80:cf:67:ef:a7:
e8:a0:58:69:e2:c8:ef:76:bf:75:1a:bb:55:86:bb:
75:e1:e6:70:38:4c:2f:71:3b:c8:4f:ab:90:a1:ed:
71:a1:89:fb:6a:cb:7c:94:22:62:77:a0:95:10:c8:
68:e1:f7:50:18:ca:32:90:37:39:ce:2c:f1:79:4d:
68:09:d2:3c:68:93:ca:83:63:06:44:7b:54:b8:4c:
56:23:ed:0a:21:44:78:ba:3c:05:ad:89:bf:03:97:
11:ec:7f:5b:61:f4:d9:20:79:c2:2a:37:c6:7b:29:
19:a1:59:a4:1e:e9:bd:35:0d:3d:1d:19:2d:f0:21:
52:f4:c3:33:70:70:48:3a:1f:f0:71:44:34:5f:34:
21:a3:be:ad:bf:10:15:9d:1c:fa:32:25:08:b5:25:
7d:da:02:09:18:9d:94:0f:e2:9c:d0:31:d7:e4:2c:
6d:24:f2:2f:b3:a3:1f:98:89:af:b9:db:0f:a4:00:
09:f3:40:a3:d4:82:40:8a:ec:cd:3c:af:54:4d:af:
22:52:66:6e:02:e8:e6:11:96:ea:87:44:c3:0a:77:
ec:fb:ad:27:58:6e:61:9f:ca:c5:e4:63:30:12:f4:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:7F:D1:C8:2F:B0:4B:5F:E2:25:5E:89:0E:A0:F0:88:C0:B2:60
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.8.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a4:ec:d6:4d:c6:52:81:1c:39:04:1b:98:7e:ee:b5:e6:9b:
6d:89:91:cd:2f:e1:95:08:10:47:f8:e1:3f:8f:9b:75:8e:52:
bb:c2:5b:43:53:57:12:c4:f0:b4:af:a5:12:b3:28:82:d8:86:
d9:66:6c:43:31:c4:b0:0d:59:36:4e:73:42:b9:95:76:c6:60:
fb:ff:87:61:27:20:b5:b7:1c:9a:55:3b:e3:a5:9b:da:11:66:
30:fb:b8:82:91:5f:07:d8:37:ae:ad:44:88:b1:ac:d8:5e:23:
fb:c6:1a:a7:5c:68:a2:a6:aa:13:ec:92:e8:30:b9:2f:90:0e:
12:a4:63:0a:2b:40:1c:b2:e2:37:77:3c:d2:24:1d:ec:73:19:
8b:6b:5f:f0:8f:12:9c:bb:6a:14:4f:1e:20:77:88:db:9e:07:
75:8c:57:68:bd:d6:56:00:ca:08:4e:db:4e:8e:f4:96:27:08:
9c:3d:3d:91:0a:21:23:ab:61:53:9b:1d:37:7b:83:38:01:b3:
7b:cb:55:32:a8:e4:87:07:e5:7c:99:fd:45:b5:86:3f:d8:fe:
5f:4f:7c:27:c8:a5:63:b6:6c:ea:8b:51:cd:4f:2e:f7:9a:fb:
12:56:89:88:79:a3:34:8b:50:a9:94:39:e6:84:03:0a:28:30:
fa:c3:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:15 2026 by rpki-client