This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa
File: 5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa (raw, json)
Hash identifier: jonWwn1zIDBZ/vrTcGpWTsw/eo5gVMGyObXA0g7CkyA=
Subject key identifier: E5:CF:B2:25:38:79:A9:5F:EE:99:A2:D1:F2:00:CE:F1:0C:02:CB:D6
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019B79ED1DE63EBDAC15506C80A4C3754A5C
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa
Signing time: Thu 01 Jan 2026 14:19:01 +0000
ROA not before: Thu 01 Jan 2026 14:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59422
IP address blocks: 194.39.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:1d:e6:3e:bd:ac:15:50:6c:80:a4:c3:75:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 1 14:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5cfb2253879a95fee99a2d1f200cef10c02cbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:6c:49:dd:d4:f5:85:dc:4e:ec:ca:23:a3:
b1:19:75:af:2b:b9:62:c7:c1:87:d9:a0:ed:a3:b2:
25:e2:0c:9a:ee:21:11:d4:32:1a:a4:d6:f3:9e:ba:
56:26:0a:3c:bb:c7:cb:a7:df:de:9a:1d:ba:e2:b9:
ad:37:58:45:10:a5:c4:78:69:f1:20:66:d9:4a:96:
d9:21:2a:7b:ac:2b:a9:58:7f:02:99:5e:7f:c8:30:
aa:9b:98:a0:ec:97:7c:3c:1a:a6:f5:8a:3b:4d:79:
09:bf:17:57:b0:f8:3b:40:59:11:04:72:91:45:e3:
52:b8:f6:64:7f:bb:2d:92:37:06:dc:30:93:8f:3b:
d3:a2:e6:1d:2a:1e:95:d0:74:7a:f9:43:09:41:1e:
06:55:73:5d:e1:64:f6:cb:be:4a:c3:14:d7:c3:3f:
37:63:8b:bd:1d:c2:15:2c:5d:1f:c4:8d:43:77:d9:
28:07:c9:9b:d1:b7:03:72:99:c9:3a:ef:ae:68:eb:
14:b3:25:00:f8:2c:ec:a2:b6:b4:20:21:6d:2c:6d:
45:97:72:0d:69:a1:87:12:fe:76:9e:ba:64:0e:e6:
65:6e:48:ac:4b:59:ba:0a:11:4f:b9:e9:0e:45:0f:
b5:59:78:a5:e8:cd:c3:f6:15:75:27:13:5b:4a:88:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:B2:25:38:79:A9:5F:EE:99:A2:D1:F2:00:CE:F1:0C:02:CB:D6
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:b0:ae:3f:81:29:1b:23:44:0b:9c:6a:b1:35:10:7b:ab:
b9:b6:b2:fe:1e:f3:72:72:0d:bc:d9:1b:a6:00:ba:7b:a3:7c:
7c:15:d3:b1:ba:a3:53:c4:a5:7b:6f:ed:01:79:67:7b:15:81:
db:e4:d7:7c:ed:fd:0e:e0:a7:c6:c0:72:57:be:20:d2:5f:50:
be:24:31:9d:87:4c:b8:51:95:36:82:4a:fc:44:a6:87:85:dc:
39:7b:0b:f2:ac:f5:9d:54:9b:a5:f5:41:4e:7a:ca:81:7c:c7:
cb:77:25:fd:81:e8:e1:a9:04:3c:a9:03:11:f2:66:d3:3b:6d:
84:88:b9:31:fa:42:98:4a:b8:74:38:e4:55:9f:3d:82:1a:07:
65:77:42:b6:db:46:b8:ab:d3:11:43:99:57:99:db:fe:8c:49:
8e:21:0d:f2:f0:98:d1:03:8b:46:8f:43:82:a0:9b:d0:13:d4:
df:df:ef:a3:47:23:6e:04:36:8e:2d:eb:ad:db:27:21:a1:b7:
de:57:ab:0b:8d:8f:86:2f:c7:ad:31:43:49:86:03:4b:d4:58:
be:ec:d6:cc:a1:a0:28:a5:c1:ec:64:cc:30:55:13:95:e1:d3:
55:15:85:2c:e4:bf:d2:e1:6c:9a:a6:f1:c9:61:df:ac:d3:f6:
e8:4d:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:47:58 2026 by rpki-client