This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/k5mFV6WTCmDPiJwT6MLcbnTMHWA.roa
File: k5mFV6WTCmDPiJwT6MLcbnTMHWA.roa (raw, json)
Hash identifier: lWAL2+yKY43RT88+Ax729eyiAF0rhgaZ6mWELevdKk0=
Subject key identifier: 93:99:85:57:A5:93:0A:60:CF:88:9C:13:E8:C2:DC:6E:74:CC:1D:60
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B356BBCDEB33B4B712B19B7022E1A61
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/k5mFV6WTCmDPiJwT6MLcbnTMHWA.roa
Signing time: Thu 01 Jan 2026 20:17:37 +0000
ROA not before: Thu 01 Jan 2026 20:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41087
IP address blocks: 85.120.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:6b:bc:de:b3:3b:4b:71:2b:19:b7:02:2e:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93998557a5930a60cf889c13e8c2dc6e74cc1d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:e0:59:24:57:81:a4:3a:db:89:bb:60:b6:
9e:46:9c:bf:00:c7:0c:cd:97:4d:0a:70:38:c7:5e:
76:a8:d1:1c:71:55:4b:15:e7:50:7e:dc:2a:29:32:
cc:70:62:08:c8:a7:0b:89:68:b8:47:1a:d3:ef:a0:
a4:09:59:d6:15:16:c4:8c:48:66:7c:ca:7c:9d:d7:
cb:1b:97:8d:66:8f:4b:25:95:73:c3:ec:82:3e:8f:
c5:0f:5f:07:f9:68:c0:b0:57:d4:be:fd:38:ff:53:
02:9a:37:69:89:2b:84:21:a8:11:10:36:9e:73:c8:
d7:44:38:17:fb:8e:58:31:fe:6e:b6:e7:13:30:cc:
46:5e:bc:09:45:3f:e9:67:ef:e4:20:f1:3a:45:9f:
f5:9f:df:da:21:a5:96:53:5c:f9:57:c0:b6:07:93:
13:f8:94:35:cc:fc:9e:27:af:73:cd:c1:31:43:9e:
a4:0e:83:43:38:cc:52:33:7c:b5:b6:f1:22:74:ea:
43:ad:3f:39:85:75:68:d9:b7:2c:a3:1b:8f:b4:0a:
f3:35:80:40:d2:91:d6:2a:50:be:1f:d5:1b:8f:18:
80:df:2f:48:fc:04:01:09:e7:ad:9a:dd:e4:cc:e4:
66:aa:1f:04:53:ec:42:ea:f4:25:ef:84:c4:48:b0:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:99:85:57:A5:93:0A:60:CF:88:9C:13:E8:C2:DC:6E:74:CC:1D:60
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/k5mFV6WTCmDPiJwT6MLcbnTMHWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.179.0/24
Signature Algorithm: sha256WithRSAEncryption
44:92:c1:4f:16:15:45:0d:9a:87:cb:e7:61:37:9b:59:e9:a3:
9f:cf:bb:c0:7b:ab:11:db:6e:28:c4:a2:18:72:e2:9a:72:ce:
79:6c:ad:87:5e:28:ca:32:d5:ab:08:83:0c:e1:18:48:f5:39:
7c:54:76:14:85:c7:0b:32:f1:15:e4:1b:16:20:30:ab:82:91:
a1:ee:22:80:6c:c3:19:80:72:80:f8:96:a5:9d:75:c8:b6:9f:
5e:7a:55:bd:c9:30:48:d6:7a:f5:d8:3c:cb:6a:1e:ed:c9:84:
2c:5c:a3:9d:d1:3a:5b:dc:aa:cc:d5:28:28:e4:b5:4e:85:81:
d9:4e:3b:fd:05:10:2b:de:e2:22:fe:0e:d7:8b:40:45:1d:72:
34:89:3a:ed:c0:5f:2d:87:b9:40:34:95:48:d4:74:70:2b:44:
db:bb:b5:42:5f:e1:bd:fd:fd:e1:5b:fd:32:09:31:a2:5a:0b:
df:4b:04:22:11:79:a7:55:eb:96:02:f4:2c:84:57:a1:19:70:
7e:eb:f8:e0:6b:16:a1:19:61:ac:5e:8e:4a:1f:d3:b4:d4:66:
0c:5e:c5:fd:77:e7:80:d7:10:f7:f1:32:5a:9c:b2:fc:bd:22:
9e:c6:fc:4a:c9:53:6b:66:75:fe:f9:5e:97:61:76:ba:e6:c8:
28:88:34:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NWu83rM7S3ErGbcCLhphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMTAxMjAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mzk5ODU1N2E1OTMwYTYwY2Y4ODljMTNlOGMyZGM2ZTc0Y2MxZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR3gWSRXgaQ624m7YLaeRpy/AMcM
zZdNCnA4x152qNEccVVLFedQftwqKTLMcGIIyKcLiWi4RxrT76CkCVnWFRbEjEhm
fMp8ndfLG5eNZo9LJZVzw+yCPo/FD18H+WjAsFfUvv04/1MCmjdpiSuEIagREDae
c8jXRDgX+45YMf5utucTMMxGXrwJRT/pZ+/kIPE6RZ/1n9/aIaWWU1z5V8C2B5MT
+JQ1zPyeJ69zzcExQ56kDoNDOMxSM3y1tvEidOpDrT85hXVo2bcsoxuPtArzNYBA
0pHWKlC+H9UbjxiA3y9I/AQBCeetmt3kzORmqh8EU+xC6vQl74TESLDMdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOZhVelkwpgz4icE+jC3G50zB1gMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvazVtRlY2V1RDbURQaUp3VDZNTGNiblRNSFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXizMA0G
CSqGSIb3DQEBCwUAA4IBAQBEksFPFhVFDZqHy+dhN5tZ6aOfz7vAe6sR224oxKIY
cuKacs55bK2HXijKMtWrCIMM4RhI9Tl8VHYUhccLMvEV5BsWIDCrgpGh7iKAbMMZ
gHKA+JalnXXItp9eelW9yTBI1nr12DzLah7tyYQsXKOd0Tpb3KrM1Sgo5LVOhYHZ
Tjv9BRAr3uIi/g7Xi0BFHXI0iTrtwF8th7lANJVI1HRwK0Tbu7VCX+G9/f3hW/0y
CTGiWgvfSwQiEXmnVeuWAvQshFehGXB+6/jgaxahGWGsXo5KH9O01GYMXsX9d+eA
1xD38TJanLL8vSKexvxKyVNrZnX++V6XYXa65sgoiDSR
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:35 2026 by rpki-client