This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/k-VbzELH-GtTzKJV3QryUB5yNms.roa
File: k-VbzELH-GtTzKJV3QryUB5yNms.roa (raw, json)
Hash identifier: L3JQxdHIKnjkd8Wk7Yt/m6bhVlk+u7PLTVb17sju4/o=
Subject key identifier: 93:E5:5B:CC:42:C7:F8:6B:53:CC:A2:55:DD:0A:F2:50:1E:72:36:6B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019B7E3823FCEBA925A0A2977A6555154EA2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/k-VbzELH-GtTzKJV3QryUB5yNms.roa
Signing time: Fri 02 Jan 2026 10:19:26 +0000
ROA not before: Fri 02 Jan 2026 10:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 5.188.86.0/24 maxlen: 24
5.188.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:23:fc:eb:a9:25:a0:a2:97:7a:65:55:15:4e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 10:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93e55bcc42c7f86b53cca255dd0af2501e72366b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:d8:1b:a4:5e:e1:d6:fe:76:64:e2:31:dd:
93:4b:cc:8e:49:58:a3:58:8b:fa:cc:94:77:59:96:
65:43:f4:c7:51:c3:ef:c5:35:84:88:82:94:fe:33:
92:76:33:62:82:52:ec:ea:0f:13:26:57:62:15:08:
e2:64:ca:bc:4b:2d:71:c0:d1:a9:12:94:f6:5b:48:
cf:54:09:9e:8e:b8:54:d1:9e:aa:e9:0e:16:67:06:
8d:aa:ec:33:aa:e1:e0:e5:26:a4:1b:82:59:0a:9c:
b6:25:84:4a:93:f8:c4:b3:61:89:00:3f:ac:5e:67:
74:80:fd:17:e3:e3:58:d4:74:bf:c1:84:a3:36:a0:
99:f9:88:ac:71:4e:5e:01:08:5a:17:95:20:95:48:
a9:93:f3:58:3e:3b:24:a3:9e:8f:23:95:c6:c8:9f:
35:94:99:44:e5:28:12:21:4f:f1:4a:20:ec:a6:b1:
67:13:bf:88:bf:2e:51:3d:88:c9:93:17:ca:48:a9:
03:6f:9c:76:4d:3c:67:68:8f:b7:3a:6f:c1:ef:fd:
fb:e7:47:dc:9d:fc:fc:cf:a2:9a:63:c5:90:e4:93:
1c:cc:22:98:ff:50:c8:20:9b:42:dc:95:aa:bc:1b:
64:f9:46:e4:c9:16:7f:5f:16:94:d0:8b:1e:f7:3c:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:5B:CC:42:C7:F8:6B:53:CC:A2:55:DD:0A:F2:50:1E:72:36:6B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/k-VbzELH-GtTzKJV3QryUB5yNms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.86.0/23
Signature Algorithm: sha256WithRSAEncryption
34:27:c0:bf:46:05:64:4d:12:cd:ca:f5:1f:b1:51:52:9a:c2:
46:23:98:1f:31:25:9f:3c:30:18:09:ee:8a:61:bb:cb:0c:e7:
e7:be:d4:d1:1a:78:30:27:ea:1c:7e:ae:08:76:b4:d0:f0:9a:
4c:a8:9e:3d:b1:a7:3c:df:96:b7:b7:1e:64:85:b0:4f:5e:7d:
26:3d:51:a2:b1:db:60:22:52:64:3f:e8:56:53:35:65:f9:73:
14:b6:7b:05:37:03:8d:72:2d:05:45:fc:3e:4f:09:af:dd:f4:
b5:2a:53:2e:5b:7c:aa:a9:14:87:5f:4e:53:f4:e5:f8:fd:12:
44:1a:f1:dd:28:78:77:4c:06:47:96:66:30:51:a6:dd:32:f9:
94:14:df:0e:68:09:ac:2f:24:b6:b9:b7:29:a4:87:1a:54:82:
be:86:88:b7:71:9a:af:fc:eb:41:ab:a2:2e:bf:7a:30:7b:ff:
43:26:4e:f1:1d:74:5d:4b:fc:92:0f:2d:70:72:a7:4a:c4:7e:
a6:10:8a:f6:12:73:31:a1:49:9c:f9:f1:5a:bf:51:6c:49:c4:
35:a1:4b:d3:41:20:27:9c:7a:3c:39:8e:d1:dc:3c:8b:e3:f7:
8d:52:a2:fa:84:95:b8:a3:35:5a:9d:79:5f:0c:d4:96:50:85:
b7:8d:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:23:14 2026 by rpki-client