This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Z5RBjzEeFPwihcYlPJNyRcixESI.roa
File: Z5RBjzEeFPwihcYlPJNyRcixESI.roa (raw, json)
Hash identifier: fdqasAOvVoEBB3kSQA8dHiqOaBX8EbtzMd601xjzdAo=
Subject key identifier: 67:94:41:8F:31:1E:14:FC:22:85:C6:25:3C:93:72:45:C8:B1:11:22
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B359C0016C6AF4B89246154D652E626
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Z5RBjzEeFPwihcYlPJNyRcixESI.roa
Signing time: Thu 01 Jan 2026 20:17:49 +0000
ROA not before: Thu 01 Jan 2026 20:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214725
IP address blocks: 217.156.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:9c:00:16:c6:af:4b:89:24:61:54:d6:52:e6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6794418f311e14fc2285c6253c937245c8b11122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:e5:62:5f:dd:29:1b:6a:5a:c0:30:d0:70:
52:0f:5c:1e:13:b6:1d:a9:aa:48:fb:3c:19:a4:57:
8a:59:27:c2:73:f2:9c:b0:fc:41:38:e7:5e:36:02:
47:e1:6f:df:9e:82:a2:e9:0c:d8:23:bc:9e:47:90:
8e:46:3d:b3:3e:34:ca:7a:90:d5:cf:d8:21:7c:4c:
d8:95:34:7e:ba:3a:28:c8:32:01:6b:ab:62:08:5c:
9e:8e:56:06:1a:db:db:2a:e3:1e:b2:9d:e3:fd:f2:
e5:59:f8:f0:19:3f:86:8e:9b:bb:ca:54:e4:04:b7:
cf:f4:2d:5a:c9:db:ec:76:65:a0:08:dd:eb:2e:e1:
84:7b:e9:b3:20:b1:13:88:05:2a:7f:0c:e6:26:f4:
89:41:f1:2a:0b:20:59:66:ec:ac:27:bc:e8:48:7a:
91:cb:e8:2b:21:6f:41:8d:c8:20:81:f8:fa:9e:58:
4e:a0:05:b8:72:70:39:1b:7a:98:a8:f1:bb:a3:4a:
28:8a:2b:40:dd:d8:17:39:17:27:7f:65:5b:1b:91:
ca:3c:e2:f2:19:e6:40:9f:18:f4:8b:34:4e:e2:2f:
db:c4:7d:3e:22:da:4a:a7:41:e5:e4:5b:37:19:f3:
d8:44:bd:6d:d7:b8:db:a1:e2:da:06:27:3e:31:0f:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:94:41:8F:31:1E:14:FC:22:85:C6:25:3C:93:72:45:C8:B1:11:22
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Z5RBjzEeFPwihcYlPJNyRcixESI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b8:56:dc:c0:37:9e:39:6b:f3:4d:bc:85:3e:33:71:b5:e1:
91:3a:bb:7f:56:8d:85:2b:34:6e:4d:62:ec:a6:53:58:fd:f6:
81:00:bc:1d:94:95:9f:a3:3a:a7:14:c4:95:0f:75:7c:a7:e1:
5f:35:3d:89:05:0a:66:ab:b5:df:1e:32:34:a1:2e:e0:03:24:
c4:56:fb:0c:55:71:12:c0:fe:68:1f:4b:5e:48:ff:cb:dd:fd:
35:ec:4a:37:69:e2:46:95:b2:d0:fe:a0:bb:59:52:4a:c9:36:
98:2a:a4:af:72:ef:b7:2b:38:44:a3:f1:31:2d:78:6a:9d:23:
5b:75:41:8a:d8:b5:1e:35:e0:6e:3c:6c:bd:cd:63:35:91:a2:
62:f0:72:28:7e:a1:da:0b:89:d5:c4:a8:41:25:aa:6d:9e:4e:
fc:38:a0:fa:ab:86:e3:cc:be:cc:0e:83:d2:18:27:ee:e6:dc:
ba:b9:22:78:55:3e:63:9c:66:fa:32:ad:8e:15:39:f3:81:27:
0c:b2:56:03:38:d1:bc:aa:e9:e4:a5:1b:bf:a4:f1:34:69:ce:
52:1c:e0:d5:c3:45:73:d4:95:c6:10:8a:63:4b:76:56:05:62:
50:65:07:c2:d4:2e:89:c4:7e:eb:d6:92:1c:a7:d8:be:14:b3:
aa:78:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:02 2026 by rpki-client