This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa
File: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (raw, json)
Hash identifier: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=
Subject key identifier: 13:FA:6F:95:77:C7:FB:FF:05:97:DC:6D:B7:8F:AB:F0:8F:88:D9:69
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019B7C80C337AD2F5C330087CA8FDE36F7A5
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa
Signing time: Fri 02 Jan 2026 02:19:31 +0000
ROA not before: Fri 02 Jan 2026 02:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 5.250.240.0/24 maxlen: 24
5.250.241.0/24 maxlen: 24
5.250.242.0/24 maxlen: 24
5.250.243.0/24 maxlen: 24
5.250.244.0/24 maxlen: 24
5.250.245.0/24 maxlen: 24
5.250.246.0/24 maxlen: 24
5.250.247.0/24 maxlen: 24
5.250.248.0/24 maxlen: 24
5.250.249.0/24 maxlen: 24
5.250.250.0/24 maxlen: 24
5.250.251.0/24 maxlen: 24
5.250.252.0/24 maxlen: 24
185.67.122.0/24 maxlen: 24
185.67.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:c3:37:ad:2f:5c:33:00:87:ca:8f:de:36:f7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jan 2 02:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13fa6f9577c7fbff0597dc6db78fabf08f88d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:3d:1b:b7:dc:85:bf:88:63:09:13:1b:51:
28:53:89:1a:f0:0b:5f:b1:c8:b4:89:c6:f8:ce:55:
8d:7f:e0:b8:96:a2:47:be:18:29:68:19:df:15:15:
a9:4f:5e:e3:10:44:5e:42:4d:12:59:3e:59:45:45:
97:90:53:94:89:0e:4e:3f:d0:60:e2:6e:5b:17:1f:
71:eb:fb:bb:67:21:42:5e:a6:6e:87:1f:f3:04:3a:
e8:25:89:f5:dc:00:7e:d0:33:f8:49:f3:01:cd:f1:
c4:da:36:0a:65:87:11:00:85:e5:d4:38:fe:07:43:
b5:1a:c4:3b:9b:31:67:c2:db:13:5c:32:6f:67:63:
ea:12:3a:de:b8:54:8d:93:54:b3:3e:23:27:ce:44:
b0:23:50:ac:70:06:9e:ac:df:1e:ea:6d:d5:52:25:
9b:73:1c:58:05:97:5c:81:ad:14:c8:bc:c2:7a:06:
f6:09:1c:81:7a:84:e1:15:7b:ec:fa:80:2f:4e:07:
a1:9e:84:12:c7:41:bc:0f:1e:25:ac:58:39:06:8c:
98:88:87:04:4b:e2:6a:32:cb:9b:c7:1e:8d:0a:e3:
f0:c5:dc:f9:29:4e:6e:22:ac:4b:a5:3e:5b:47:d6:
da:7c:6a:80:93:0a:e7:05:c4:aa:8e:3c:b6:fc:1d:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FA:6F:95:77:C7:FB:FF:05:97:DC:6D:B7:8F:AB:F0:8F:88:D9:69
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.240.0-5.250.252.255
185.67.122.0/23
Signature Algorithm: sha256WithRSAEncryption
82:f7:16:16:1c:5b:8a:96:20:14:e0:8d:47:81:8f:bc:77:01:
7f:dc:f7:25:9a:ca:d6:a3:d0:4f:52:32:1c:57:70:76:ff:5a:
ce:17:6e:5f:be:41:cf:8a:f4:54:c3:bb:67:88:5c:8f:3e:66:
80:d7:26:99:09:b9:43:49:b1:ea:e7:1e:26:b8:92:2a:bd:06:
e8:e2:e6:fa:01:18:df:6b:8f:c0:1f:88:fd:a0:ad:33:3d:1a:
77:d4:45:61:49:b0:a6:5f:22:89:09:06:26:08:55:3f:41:f0:
2c:f8:e1:50:d8:29:3e:c6:a4:a0:ab:10:1c:c5:41:5c:a4:97:
8e:7b:7b:64:64:fc:d9:b9:fc:96:bb:29:bf:89:ac:76:e1:6b:
10:43:70:00:f4:db:56:56:9d:a3:d4:9c:c4:ae:33:d1:5e:c6:
7d:b5:e1:17:19:5e:76:b5:27:83:5c:b8:a8:56:ed:2a:4b:2f:
fe:d5:00:95:29:71:a2:9b:a7:ed:d8:93:2b:18:b0:d3:3f:56:
a1:2e:9b:81:27:5a:a1:00:54:aa:21:7b:a4:f2:31:37:b4:92:
eb:bf:45:81:f2:5a:59:5f:fc:83:7d:ac:7f:7c:bc:40:95:c1:
b0:b9:21:84:f8:9c:05:59:16:a4:ca:de:2a:db:eb:87:01:73:
31:fb:1f:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:22 2026 by rpki-client