This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/J5xYYbeJ_te65Xv7xz07zAj6f-I.roa
File: J5xYYbeJ_te65Xv7xz07zAj6f-I.roa (raw, json)
Hash identifier: H6HLeHF12Jxz9+TguAyIB+SiOH3fzKS1WVXypIulN7Q=
Subject key identifier: 27:9C:58:61:B7:89:FE:D7:BA:E5:7B:FB:C7:3D:3B:CC:08:FA:7F:E2
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019A8267467DB9A6997FF42346885BAF5EBD
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/J5xYYbeJ_te65Xv7xz07zAj6f-I.roa
Signing time: Fri 14 Nov 2025 12:46:37 +0000
ROA not before: Fri 14 Nov 2025 12:46:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:82:67:46:7d:b9:a6:99:7f:f4:23:46:88:5b:af:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Nov 14 12:46:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279c5861b789fed7bae57bfbc73d3bcc08fa7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:0c:34:d1:c6:68:5e:de:bf:06:d6:23:f4:
1b:ef:4f:7f:3b:c1:ab:83:42:ac:2b:3b:36:24:dd:
b3:ee:64:63:45:53:c4:6a:af:29:27:95:03:9a:cf:
86:ef:0c:a5:a2:b7:fa:3c:0b:3a:8c:98:af:c6:9c:
a5:09:bd:b0:4b:82:f0:45:6d:e8:78:e2:a2:8a:0e:
8f:02:9a:f6:ad:51:f6:56:0b:dc:40:5c:68:50:a8:
b8:e2:15:da:e0:f4:f5:54:79:f3:50:96:c7:04:14:
ab:b5:ab:a7:86:6a:9b:ae:31:29:77:c5:68:d3:42:
9c:ae:58:ea:95:d8:de:72:b9:13:b0:ef:1e:d3:52:
6a:ee:c7:c4:24:cf:e0:5d:1d:18:64:5d:a2:84:08:
bb:b2:ec:3f:4f:7a:50:89:3f:df:d5:4a:d8:23:fb:
07:43:60:13:cd:9a:d2:55:e0:14:03:99:20:ff:28:
32:f8:aa:00:58:94:ec:52:10:ee:2a:66:04:ff:4a:
51:a0:e0:e3:2e:ef:8b:aa:ce:f2:89:29:d8:a8:54:
3f:58:e4:e5:cb:8b:ad:89:92:58:4c:de:a1:97:80:
e4:64:88:34:82:7a:5e:a1:ae:61:c9:cc:1a:b4:31:
3c:37:c7:8d:69:fa:9d:1c:41:88:ad:2b:89:c1:5b:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9C:58:61:B7:89:FE:D7:BA:E5:7B:FB:C7:3D:3B:CC:08:FA:7F:E2
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/J5xYYbeJ_te65Xv7xz07zAj6f-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:73:14:2e:03:29:11:2f:f8:da:dc:a3:86:89:83:cc:28:f3:
bd:05:00:82:80:cc:d2:0b:2e:7f:c1:6b:83:83:e0:11:80:ce:
36:6a:d6:5f:37:a9:fc:73:a8:a2:80:2a:35:cf:7d:cf:8c:60:
fc:6b:2c:97:89:f3:ad:c3:42:00:3f:0a:7a:b0:6a:85:89:ef:
74:e7:97:e3:47:96:ca:48:67:40:d9:6e:86:cf:03:24:d8:f9:
ef:ae:ea:46:d2:85:ed:37:05:78:8b:97:9a:63:c9:0d:8e:7d:
e1:b1:1a:c9:92:6c:86:5e:66:9d:aa:2d:4e:74:0d:3a:cc:28:
72:50:50:9b:86:06:6c:9b:57:6b:af:51:9f:86:ba:5d:53:df:
4e:5d:eb:3e:80:90:c9:9b:c3:08:9d:f0:68:74:59:af:d8:70:
81:13:50:5f:9f:a5:40:6e:14:47:f2:fa:41:8a:b2:0a:f9:64:
54:51:05:2c:66:56:e7:f7:c7:53:92:83:9a:72:09:c7:83:56:
55:b0:5c:af:b7:c6:6c:8b:bb:e9:96:1c:64:0c:60:4d:e2:36:
fb:af:1d:30:ed:e5:c3:a0:fc:11:61:1e:c9:f8:d8:87:4f:6a:
40:35:71:70:50:b8:ff:c6:79:cf:a2:4e:48:bf:d4:8d:c3:c1:
49:98:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:43:47 2025 by rpki-client