This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa
File: 4p5MDgx80WrNV4qWtYD29zqy-Vk.roa (raw, json)
Hash identifier: 1uvtk+0FlzJu9XJBd0te2sWPClZtr04c0PqiVDd+kic=
Subject key identifier: E2:9E:4C:0E:0C:7C:D1:6A:CD:57:8A:96:B5:80:F6:F7:3A:B2:F9:59
Certificate issuer: /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial: 019B79102CA95858DA3FBA5F159576891903
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa
Signing time: Thu 01 Jan 2026 10:17:41 +0000
ROA not before: Thu 01 Jan 2026 10:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52092
IP address blocks: 91.227.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:2c:a9:58:58:da:3f:ba:5f:15:95:76:89:19:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Validity
Not Before: Jan 1 10:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e29e4c0e0c7cd16acd578a96b580f6f73ab2f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:19:96:c0:8c:ac:73:bc:c6:10:1e:41:c2:
c6:d9:1b:9d:4a:5f:e0:bc:9e:1d:94:6f:77:b9:27:
53:b8:69:a6:e3:7b:e2:da:e6:58:91:b0:e8:5a:81:
cc:86:18:f4:a3:9e:1d:a1:0d:fe:b4:5b:29:cd:01:
1a:64:2d:7f:05:3b:04:c6:f5:8d:b7:e6:49:d4:27:
fe:07:05:23:14:ca:02:37:31:5f:5f:3e:83:37:02:
1b:51:3a:72:32:a7:ae:da:e6:5f:87:44:7b:d0:05:
38:10:e9:da:3f:42:2a:82:2c:20:75:80:30:00:91:
03:8d:4e:12:fc:7a:fa:b4:b6:77:c1:13:28:fb:37:
95:08:a0:64:1b:54:f0:96:64:ba:5d:c3:09:b6:24:
7a:01:80:b0:8e:cd:b7:bd:e5:4b:bd:49:4a:c7:11:
e1:1a:f7:12:6b:86:04:50:29:89:58:04:73:2a:88:
68:ab:bb:a0:7e:24:c7:62:b2:7d:2e:e1:11:92:b4:
d1:bd:69:7e:cf:f6:1c:e1:63:92:a9:11:44:a8:36:
7e:7b:64:89:80:7c:05:27:79:eb:b6:01:de:3b:79:
25:b0:ea:12:4b:ec:61:20:71:5a:78:0e:2d:f7:c0:
32:8e:45:c9:3c:d9:08:5a:fb:c1:6b:39:6e:16:e6:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:4C:0E:0C:7C:D1:6A:CD:57:8A:96:B5:80:F6:F7:3A:B2:F9:59
X509v3 Authority Key Identifier:
keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.134.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:ef:c9:c1:6f:9b:26:61:7c:f8:16:e2:90:50:cc:a4:ea:31:
ec:52:99:85:18:13:ea:36:c9:cf:f2:37:30:e4:29:e2:da:ef:
d2:cc:01:40:ff:0b:37:16:11:4e:90:80:a0:cb:10:e4:1f:e0:
1d:96:1c:c1:db:48:9a:4b:8e:b6:20:b2:33:a5:ff:a2:ae:f3:
28:4c:1d:00:e7:65:4a:c3:e0:30:11:a8:4e:6a:fb:16:cc:b8:
a0:4d:c1:91:f0:3d:ac:d2:92:10:58:3e:b8:24:67:58:67:bd:
58:84:7c:2a:e0:bb:05:21:1d:21:3d:80:0e:69:17:58:1e:54:
a2:c3:38:6c:14:ae:17:1a:78:5a:11:f6:5a:60:cb:a7:6a:67:
f8:59:88:8f:cd:54:da:0a:3f:78:81:48:92:55:75:80:22:bf:
9c:04:50:8a:15:90:7e:ab:1e:d0:f7:79:9f:6e:d0:7a:4e:ff:
a8:eb:e2:2d:3a:8d:3f:de:47:35:99:b9:0e:ab:3c:89:5c:51:
9b:bf:87:f2:34:73:7c:9a:90:ce:1e:ed:ef:5b:b5:d2:aa:8d:
0b:ec:e9:25:8f:58:5c:27:d2:8d:95:87:9c:e0:01:95:a2:cc:
20:f5:51:50:e1:df:d2:a6:19:87:ec:48:e0:68:54:b4:54:a2:
71:13:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:21 2026 by rpki-client