This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa
File: V5CzmbIx8-gHfnzPC49E7HqhlMo.roa (raw, json)
Hash identifier: +ZjsvS6gpb2s6CNBhUyi8VPFe9owHps6IBAN21G6HVI=
Subject key identifier: 57:90:B3:99:B2:31:F3:E8:07:7E:7C:CF:0B:8F:44:EC:7A:A1:94:CA
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019B7F82C7B1481B237E372F12FC9B81A956
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa
Signing time: Fri 02 Jan 2026 16:20:35 +0000
ROA not before: Fri 02 Jan 2026 16:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204615
IP address blocks: 45.81.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:c7:b1:48:1b:23:7e:37:2f:12:fc:9b:81:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 16:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5790b399b231f3e8077e7ccf0b8f44ec7aa194ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:46:b0:88:43:43:1f:f4:f2:d5:c4:f5:fd:
13:56:b8:7c:03:1c:87:22:79:60:6e:f1:6a:40:e5:
af:75:fc:10:bc:bc:52:ca:df:75:51:da:11:45:e6:
0c:8a:d0:40:53:8a:aa:3f:d8:39:13:4c:66:40:ee:
02:bc:c8:de:1a:94:d6:f8:54:67:9b:d0:81:b0:09:
d6:58:ae:44:98:14:22:a7:9f:52:cd:66:cd:a8:72:
c3:a3:0f:01:68:e7:75:fb:1e:74:b2:f3:bc:94:2d:
f9:0a:4e:56:f3:cb:cc:00:64:42:17:2a:f8:ba:31:
e8:81:b6:2e:12:38:e6:b4:5a:84:80:eb:5c:51:1c:
24:6e:03:49:48:75:4d:74:b2:90:6b:8b:b7:18:66:
da:2f:1f:c0:b9:4f:23:3a:bb:d7:dc:50:1f:63:76:
5a:94:4e:bc:94:03:57:ee:04:91:1f:24:e3:dd:53:
3e:a9:9b:60:eb:77:97:19:8b:c4:4f:ed:f6:2a:60:
51:3e:1b:b0:d4:ca:65:87:5d:18:83:84:4d:9b:b5:
3f:a9:93:c9:ed:3d:59:79:5c:15:a2:5d:57:01:b6:
3d:46:a0:64:1d:f2:e2:82:65:2c:d6:8e:f1:cc:6a:
68:57:49:34:64:8d:84:bd:07:4f:70:ee:c2:f9:bb:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:B3:99:B2:31:F3:E8:07:7E:7C:CF:0B:8F:44:EC:7A:A1:94:CA
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7f:ff:c6:85:f0:41:07:01:fb:fc:70:b5:74:0e:c0:b7:bb:
00:cf:b6:a7:21:bf:3c:01:dd:69:97:54:c9:d5:d5:2c:a3:6d:
03:e9:6d:3b:76:91:3b:57:bb:5f:a3:15:ff:ac:22:94:6c:3a:
48:9c:f8:15:19:02:25:9c:86:8f:2c:d1:ec:02:ef:95:08:82:
68:17:66:f3:b9:97:5a:d7:77:30:5b:6a:bc:46:25:11:98:69:
28:52:fe:dc:b3:65:a0:0d:1e:4e:b8:43:17:f8:4f:2f:ad:02:
59:16:69:2e:a0:e3:6b:53:e6:14:4d:8a:c4:de:45:85:fb:87:
31:f6:2d:93:ac:85:fc:24:e6:fd:e2:e2:fe:52:fe:54:25:16:
b2:ea:2f:40:47:56:fa:f8:fb:64:09:7a:44:03:0b:f4:98:ea:
ff:e3:0b:1f:59:bb:6e:f9:61:3f:73:c1:f7:ec:12:e2:cd:e7:
69:98:14:1c:3f:69:09:12:4d:31:fd:18:03:ea:15:ad:8a:75:
ae:a1:25:62:dd:a0:eb:5c:cc:90:e3:6a:24:7a:de:13:17:5f:
21:37:f6:13:9f:25:44:be:46:1b:52:49:3c:8d:13:bd:41:62:
5d:30:1a:c7:f9:77:30:14:85:8d:a0:77:d9:3e:ab:8b:de:0c:
24:da:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:19:04 2026 by rpki-client