This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/5frQX9750HL3NN8-MyZHPLOJTsI.roa
File: 5frQX9750HL3NN8-MyZHPLOJTsI.roa (raw, json)
Hash identifier: pxj83AtJMZvXD4c0K+PkZXGVzhxJMxFhP3iPQm4dFuQ=
Subject key identifier: E5:FA:D0:5F:DE:F9:D0:72:F7:34:DF:3E:33:26:47:3C:B3:89:4E:C2
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019B7D5BE1DCDB5CD71C85EEA86F37EA5218
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/5frQX9750HL3NN8-MyZHPLOJTsI.roa
Signing time: Fri 02 Jan 2026 06:18:52 +0000
ROA not before: Fri 02 Jan 2026 06:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.112.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:e1:dc:db:5c:d7:1c:85:ee:a8:6f:37:ea:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Jan 2 06:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5fad05fdef9d072f734df3e3326473cb3894ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:ce:b9:fd:88:18:1e:99:94:d6:42:f3:1e:
fd:e3:e9:25:16:fe:be:98:91:15:9f:8a:06:ef:36:
21:9c:92:a0:64:83:08:99:a6:27:85:50:83:98:d8:
e0:63:f7:31:0a:9d:3f:9b:74:a2:b9:6f:02:cd:3a:
09:2f:30:28:b5:0a:16:7a:a8:11:ca:d4:fe:28:ae:
10:7d:89:9b:64:e0:62:4a:ca:35:ea:42:6c:fd:af:
12:c4:6e:b7:bf:bf:05:e0:60:63:08:4b:2a:40:07:
49:98:b6:5b:b1:5e:2d:32:ea:89:31:ec:e3:f5:1d:
bd:82:b9:07:9f:71:aa:c3:ec:18:03:2d:39:fc:eb:
72:97:28:37:d8:f9:13:ad:a6:1e:ec:d1:ad:62:c0:
be:c0:8c:c6:ab:91:1d:ce:6b:98:91:52:ed:29:69:
db:7c:54:ed:4f:7a:55:78:79:bd:c4:c5:9a:13:30:
f4:3a:ce:95:5a:53:75:67:c5:40:02:5e:7b:b8:56:
95:97:b1:b7:ed:ea:7f:8b:fe:df:5d:c0:af:5b:60:
92:e9:76:d7:3a:4b:33:ea:1c:1e:6c:2e:d8:32:7e:
b1:60:95:c4:78:42:80:36:08:0b:2f:2c:c9:3c:ae:
a2:e1:01:47:e4:d6:3c:67:26:e6:07:c0:a6:56:78:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:D0:5F:DE:F9:D0:72:F7:34:DF:3E:33:26:47:3C:B3:89:4E:C2
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/5frQX9750HL3NN8-MyZHPLOJTsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f6:19:60:af:bd:d1:38:11:57:cb:a1:76:06:2d:d8:2a:08:
1a:68:26:f6:f2:5c:39:d2:ec:26:b3:5a:53:d5:e6:04:5f:7c:
5e:c6:ae:df:f4:d0:11:e6:a6:9c:b4:a6:84:2c:1c:f3:79:50:
13:7d:0e:54:de:7f:3f:fd:19:96:e5:57:f0:48:f8:05:fb:6c:
28:d2:1f:1a:60:96:84:c6:2d:b3:99:d3:15:b1:17:3f:6a:b0:
fd:ce:64:21:e3:28:c7:84:73:2e:e1:7e:88:0b:bc:99:d3:27:
2f:af:96:9b:96:f6:8f:82:be:cd:ea:19:3a:1b:53:d4:63:ca:
5a:98:30:85:1c:3c:1a:5b:e4:36:31:94:73:15:ac:33:5c:76:
06:da:16:1f:3b:4c:96:5e:a9:47:89:e4:62:b0:d5:ae:24:5e:
67:e3:b2:39:82:5c:66:61:1e:c6:5e:29:76:38:72:0a:a3:5f:
b6:e1:42:0d:9d:2c:3b:87:8e:f7:36:69:74:39:d8:f3:0f:55:
a9:62:27:dc:ef:46:cb:c7:91:86:0b:6a:b1:cc:ff:6b:de:47:
1e:e7:4f:4d:ab:3a:52:65:0f:ae:d8:49:f7:fd:ef:3c:38:ea:
49:e0:0f:60:7a:aa:2d:56:17:64:7a:e3:fb:86:a6:4e:c4:e1:
74:87:68:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W+Hc21zXHIXuqG836lIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1
ODQ2MzEwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWZhZDA1ZmRlZjlkMDcyZjczNGRmM2UzMzI2NDczY2IzODk0ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHnOuf2IGB6ZlNZC8x794+klFv6+
mJEVn4oG7zYhnJKgZIMImaYnhVCDmNjgY/cxCp0/m3SiuW8CzToJLzAotQoWeqgR
ytT+KK4QfYmbZOBiSso16kJs/a8SxG63v78F4GBjCEsqQAdJmLZbsV4tMuqJMezj
9R29grkHn3Gqw+wYAy05/Otylyg32PkTraYe7NGtYsC+wIzGq5EdzmuYkVLtKWnb
fFTtT3pVeHm9xMWaEzD0Os6VWlN1Z8VAAl57uFaVl7G37ep/i/7fXcCvW2CS6XbX
Oksz6hwebC7YMn6xYJXEeEKANggLLyzJPK6i4QFH5NY8ZybmB8CmVnjAHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOX60F/e+dBy9zTfPjMmRzyziU7CMB8GA1UdIwQY
MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt
M2Q1N2I2NmIyMTM0LzEvNWZyUVg5NzUwSEwzTk44LU15WkhQTE9KVHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0
LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXDoMA0G
CSqGSIb3DQEBCwUAA4IBAQCo9hlgr73ROBFXy6F2Bi3YKggaaCb28lw50uwms1pT
1eYEX3xexq7f9NAR5qactKaELBzzeVATfQ5U3n8//RmW5VfwSPgF+2wo0h8aYJaE
xi2zmdMVsRc/arD9zmQh4yjHhHMu4X6IC7yZ0ycvr5ablvaPgr7N6hk6G1PUY8pa
mDCFHDwaW+Q2MZRzFawzXHYG2hYfO0yWXqlHieRisNWuJF5n47I5glxmYR7GXil2
OHIKo1+24UINnSw7h473Nml0OdjzD1WpYifc70bLx5GGC2qxzP9r3kce509NqzpS
ZQ+u2En3/e88OOpJ4A9geqotVhdkeuP7hqZOxOF0h2h4
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:20:52 2026 by rpki-client