This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5MxZL-PvG0wDmhYScC_DKO0ewr4.roa
File: 5MxZL-PvG0wDmhYScC_DKO0ewr4.roa (raw, json)
Hash identifier: 4T+ZEaQmT++GHLG2Qb3MaX4/iyQz4rfa8WqE4gEZw1w=
Subject key identifier: E4:CC:59:2F:E3:EF:1B:4C:03:9A:16:12:70:2F:C3:28:ED:1E:C2:BE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B358904B4D8AB922AED458DECFC0AD1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5MxZL-PvG0wDmhYScC_DKO0ewr4.roa
Signing time: Thu 01 Jan 2026 20:17:44 +0000
ROA not before: Thu 01 Jan 2026 20:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199429
IP address blocks: 217.156.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:89:04:b4:d8:ab:92:2a:ed:45:8d:ec:fc:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4cc592fe3ef1b4c039a1612702fc328ed1ec2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:6b:e4:8d:ba:30:1c:41:c9:d3:8c:a9:d2:
63:f1:38:80:20:eb:79:7f:d6:af:44:02:ed:c0:63:
62:f1:50:46:92:0b:f8:4b:c9:5d:64:fa:fe:04:12:
70:c8:c5:5c:d2:b0:37:c0:e0:7b:af:ea:29:0a:9c:
1e:86:f6:23:3b:49:c2:97:32:3a:2f:10:f7:8f:dc:
e9:74:b3:08:99:23:e3:99:15:da:55:28:6f:5c:74:
b9:02:0f:5a:5e:8f:15:09:6a:61:98:f6:e7:48:90:
c3:a1:27:d1:2a:84:be:96:38:0a:ce:dc:8a:60:96:
ae:4c:16:f7:b0:50:aa:0d:b6:b5:b3:15:6c:58:1d:
93:61:f1:3c:c0:e0:75:db:d0:dc:20:21:61:a1:d6:
17:6d:8c:1e:a5:45:06:a8:2a:ce:f1:ac:52:dd:4d:
be:57:8e:f9:8a:74:a5:17:e0:70:d1:f1:e2:be:fa:
73:ff:a3:77:13:9d:18:39:e3:16:32:c0:70:16:6c:
29:27:d7:89:b0:8e:23:5f:17:e6:01:cc:58:12:69:
c4:47:78:fc:2a:fd:e3:f6:3e:76:86:21:f6:c7:c1:
ab:77:8f:3a:53:a9:fc:f3:43:17:cd:1c:ce:62:2e:
4e:5d:7f:b7:9d:ee:0a:83:df:b7:31:63:45:e7:07:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:59:2F:E3:EF:1B:4C:03:9A:16:12:70:2F:C3:28:ED:1E:C2:BE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5MxZL-PvG0wDmhYScC_DKO0ewr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.90.0/24
Signature Algorithm: sha256WithRSAEncryption
74:14:bb:0a:d3:ee:1c:c9:0f:b0:95:3e:73:f3:5e:8a:ba:0c:
27:f1:b1:79:ed:58:83:be:4a:4a:80:e4:56:62:a1:b9:18:00:
22:f6:49:60:81:2d:2e:eb:33:3a:d3:87:9e:e4:f9:25:65:43:
1c:8d:fa:8b:e8:ba:bd:4e:bc:ff:02:c1:8f:41:70:79:c2:4e:
60:25:d5:66:e1:23:d6:85:05:2d:9b:36:9f:8e:0c:1e:31:e5:
10:ba:5a:7f:b9:30:08:c7:fc:59:b4:05:3e:f9:12:ab:72:84:
d5:b6:a5:3f:4a:98:79:7e:a4:7a:fa:69:36:eb:fb:3c:d8:09:
1f:7d:fd:7e:c1:de:66:1e:49:35:2b:78:c1:3f:d6:1c:db:4e:
74:4a:82:28:a9:78:36:24:63:ec:8b:dd:58:d4:82:73:10:c2:
c7:84:79:fc:98:ee:1f:9c:1e:a2:51:27:6a:d0:86:f2:7e:af:
e4:8a:e3:54:67:0e:65:ba:3d:eb:a1:3b:59:54:2b:34:c0:34:
b1:06:41:12:17:3d:99:b4:b4:3f:2f:d1:fb:88:0f:50:a7:67:
6b:5a:0b:c0:4d:56:e8:eb:72:06:0c:90:fc:37:f7:74:c1:eb:
bd:02:31:8a:54:cf:4c:30:78:4f:24:6f:bf:0d:ce:42:84:8f:
d4:e2:43:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NYkEtNirkirtRY3s/ArRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGNjNTkyZmUzZWYxYjRjMDM5YTE2MTI3MDJmYzMyOGVkMWVjMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C9r5I26MBxBydOMqdJj8TiAIOt5
f9avRALtwGNi8VBGkgv4S8ldZPr+BBJwyMVc0rA3wOB7r+opCpwehvYjO0nClzI6
LxD3j9zpdLMImSPjmRXaVShvXHS5Ag9aXo8VCWphmPbnSJDDoSfRKoS+ljgKztyK
YJauTBb3sFCqDba1sxVsWB2TYfE8wOB129DcICFhodYXbYwepUUGqCrO8axS3U2+
V475inSlF+Bw0fHivvpz/6N3E50YOeMWMsBwFmwpJ9eJsI4jXxfmAcxYEmnER3j8
Kv3j9j52hiH2x8Grd486U6n880MXzRzOYi5OXX+3ne4Kg9+3MWNF5wc2RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTMWS/j7xtMA5oWEnAvwyjtHsK+MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNU14WkwtUHZHMHdEbWhZU2NDX0RLTzBld3I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZxaMA0G
CSqGSIb3DQEBCwUAA4IBAQB0FLsK0+4cyQ+wlT5z816Kugwn8bF57ViDvkpKgORW
YqG5GAAi9klggS0u6zM604ee5PklZUMcjfqL6Lq9Trz/AsGPQXB5wk5gJdVm4SPW
hQUtmzafjgweMeUQulp/uTAIx/xZtAU++RKrcoTVtqU/Sph5fqR6+mk26/s82Akf
ff1+wd5mHkk1K3jBP9Yc2050SoIoqXg2JGPsi91Y1IJzEMLHhHn8mO4fnB6iUSdq
0Ibyfq/kiuNUZw5luj3roTtZVCs0wDSxBkESFz2ZtLQ/L9H7iA9Qp2drWgvATVbo
63IGDJD8N/d0weu9AjGKVM9MMHhPJG+/Dc5ChI/U4kPe
-----END CERTIFICATE-----
Generated at Tue Jan 20 00:01:16 2026 by rpki-client