This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa
File: 5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (raw, json)
Hash identifier: esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=
Subject key identifier: E5:C8:AE:40:C6:95:27:EE:52:A0:58:2C:6C:AA:50:0E:50:9E:5E:94
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 019B77C6C97CADB358E5E2FA4C94F9EA118B
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa
Signing time: Thu 01 Jan 2026 04:17:54 +0000
ROA not before: Thu 01 Jan 2026 04:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200276
IP address blocks: 81.28.248.0/24 maxlen: 24
81.28.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:c9:7c:ad:b3:58:e5:e2:fa:4c:94:f9:ea:11:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jan 1 04:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5c8ae40c69527ee52a0582c6caa500e509e5e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:9c:3b:2f:e5:67:54:34:42:99:3d:ab:35:
6e:4b:e5:81:4c:5f:28:fc:34:55:c2:a1:75:33:c0:
ca:ba:4c:26:8e:73:7b:78:64:9f:ad:b5:d1:a4:b9:
09:c0:16:21:07:37:41:8f:3a:90:30:cf:f2:7a:f4:
18:d3:bf:27:cc:da:ab:a4:1e:23:8e:9b:95:c3:26:
cf:b0:a9:aa:de:af:d3:70:5f:bd:a1:2d:f9:d7:19:
f5:7e:0b:4c:96:e5:fd:51:d6:ef:ce:96:8a:da:ba:
b7:e8:a8:67:cb:7f:e3:45:6e:97:cb:43:19:9c:7d:
91:11:52:e7:3a:00:b4:84:b1:09:0e:7b:66:98:c3:
a6:e3:d5:05:62:41:ec:35:f9:18:6b:d9:a9:ba:5b:
a9:2d:bc:9c:be:08:42:e1:a7:04:c2:89:a7:22:7e:
cf:76:54:27:d1:5f:69:c5:a3:30:c5:50:78:bd:c7:
ac:4b:f1:22:1d:14:52:eb:cc:58:db:5d:e0:f8:bc:
51:a5:18:d8:10:cb:60:0f:5c:39:09:e8:87:50:23:
8b:14:24:40:a2:e3:94:78:be:f5:9a:87:8d:4b:bc:
b9:09:48:98:24:a3:87:bf:ca:f0:84:75:64:51:58:
f3:d7:61:b7:b6:ca:e2:bf:c9:79:1a:f5:d0:8c:97:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C8:AE:40:C6:95:27:EE:52:A0:58:2C:6C:AA:50:0E:50:9E:5E:94
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.248.0/23
Signature Algorithm: sha256WithRSAEncryption
25:96:5f:7f:fe:63:25:d3:cd:5f:65:48:a4:2e:c4:bb:5f:f3:
8d:33:d6:1e:c8:3e:eb:cb:bb:19:d2:3f:6a:bb:89:1b:35:2c:
a9:c1:35:23:01:06:97:05:97:5f:14:7b:81:bb:79:42:0e:45:
7e:07:85:cc:9d:17:c1:54:a4:16:47:86:48:32:c1:f8:0e:25:
40:44:4a:fa:cc:fd:09:19:fd:ba:fd:a5:0f:bb:09:a5:1c:cf:
f3:0e:ad:5b:70:34:31:a1:5d:77:81:f2:38:f8:0e:48:20:cb:
95:9f:0d:71:53:a5:fb:17:e7:55:ec:5e:48:64:21:98:b4:7f:
0a:65:12:63:fe:b4:5f:23:8e:a0:8a:b9:d0:10:2e:7e:71:78:
35:1f:1c:5d:da:f5:34:9c:31:78:3c:b5:6b:e7:37:29:54:d3:
53:f5:70:c5:0f:b5:cd:3e:41:06:70:66:07:6c:77:94:88:2f:
29:89:c0:cd:86:88:0a:48:e0:97:1e:d8:91:db:cc:1e:0e:b7:
ea:6e:e6:2a:43:1d:5c:6c:c1:05:20:74:f4:81:2e:7c:41:e0:
71:3a:a1:c3:ae:48:f6:77:03:13:15:7f:0e:e8:06:eb:dd:86:
da:6d:8f:c4:d4:d1:90:39:a9:f8:98:a3:a7:f8:a4:14:c5:b1:
20:5f:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:10 2026 by rpki-client