This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/luwzE6T9g1FODC1IWX_092L80go.roa
File: luwzE6T9g1FODC1IWX_092L80go.roa (raw, json)
Hash identifier: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=
Subject key identifier: 96:EC:33:13:A4:FD:83:51:4E:0C:2D:48:59:7F:F4:F7:62:FC:D2:0A
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019B7834871599784F5038894F6CF552FE7D
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/luwzE6T9g1FODC1IWX_092L80go.roa
Signing time: Thu 01 Jan 2026 06:17:46 +0000
ROA not before: Thu 01 Jan 2026 06:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216385
IP address blocks: 5.252.98.0/24 maxlen: 32
5.252.99.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:87:15:99:78:4f:50:38:89:4f:6c:f5:52:fe:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jan 1 06:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96ec3313a4fd83514e0c2d48597ff4f762fcd20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:5c:95:10:46:f0:cc:94:23:ed:88:d9:31:
f9:3f:62:dd:9f:d7:ee:ca:ee:6f:00:d0:fc:6e:40:
b3:b6:95:1c:36:ed:47:fe:fd:36:4e:2b:bd:a3:7b:
eb:3b:4f:da:2a:8f:f2:2d:f0:ec:ad:f1:2f:8b:ee:
d1:38:a9:dc:99:a1:9d:17:e4:ad:1c:2f:41:16:bd:
71:61:ce:a3:5e:7b:6d:33:29:b7:ad:fb:26:ad:e1:
b4:25:01:67:75:cc:06:a5:8d:d7:dc:fb:7d:2b:98:
fa:df:d7:36:05:4e:2f:69:32:8f:4f:66:a8:29:a8:
12:a2:27:d4:51:09:3b:87:e7:33:2b:a7:3a:5b:6c:
c6:36:3d:3b:2d:b8:ec:94:ad:f0:fc:fb:91:13:51:
a8:19:ca:81:8d:cc:a1:68:1f:e9:f1:e4:39:a9:b9:
2a:3d:56:26:76:bc:01:f5:49:73:f2:10:60:c1:f2:
41:9c:39:dc:8e:4d:0d:22:76:5f:d7:f4:45:3c:9a:
2c:5a:f3:3f:d8:9a:34:1b:34:66:0c:11:04:a8:0e:
a2:fb:49:82:fa:7e:ee:43:ee:ba:19:64:60:9c:13:
92:0f:8f:ba:9b:45:f5:af:b4:fa:07:52:e7:0b:b3:
40:a3:0d:31:c3:ac:23:24:ed:25:15:0b:1a:22:5a:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:33:13:A4:FD:83:51:4E:0C:2D:48:59:7F:F4:F7:62:FC:D2:0A
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/luwzE6T9g1FODC1IWX_092L80go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.98.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:77:cf:8d:23:57:a9:c4:fb:81:bf:92:c6:b8:f3:9e:54:bb:
3e:0e:a2:11:00:1b:f2:5e:69:8c:2f:1b:a5:be:97:89:a6:48:
3f:87:57:1e:7b:70:e4:d8:c6:da:74:19:36:f3:56:55:91:cb:
5f:ce:da:53:ea:92:6b:54:35:33:8d:96:e4:d3:cd:2a:33:72:
2f:74:30:2d:7a:e8:3c:ef:f3:9b:8f:49:cb:34:00:b4:11:7b:
ff:85:7c:78:4b:71:2b:44:e3:59:cf:51:47:1f:09:52:79:a1:
01:5c:6c:fd:df:8c:4e:2d:62:29:d8:67:c3:a1:f8:8b:73:5c:
6f:66:98:46:68:0c:d1:a6:f4:94:6b:db:bd:0b:e1:92:f3:25:
2a:38:18:7b:76:70:48:c5:63:80:9f:2e:2c:1f:31:b6:a4:c9:
5e:d2:ab:8f:ac:af:ee:5b:2c:ce:7a:85:f4:78:0a:8b:24:78:
d6:a1:3d:dd:56:b7:ea:4a:71:4a:21:d1:b3:3c:fe:8e:bf:95:
8b:6d:83:d9:01:29:06:e6:3e:bd:15:c3:9c:2f:ee:2b:b6:c3:
3a:b0:3e:41:96:65:37:af:64:ed:14:f2:2a:28:41:e3:f7:ca:
b8:fd:ff:4a:c5:f8:45:38:3d:e5:a0:c8:8e:e7:4b:1a:e4:1e:
0c:94:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:19 2026 by rpki-client