This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa
File: Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa (raw, json)
Hash identifier: oE5PL3Krr0r9ntiL9YECi1nkIPrZCu90vdTKGFyXWag=
Subject key identifier: 22:FF:91:4B:51:96:5B:EC:4B:9F:C7:4D:C6:AE:EB:E5:85:D7:8D:2B
Certificate issuer: /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial: 019B7F81FFD959159295D0228FA2780B0BC5
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa
Signing time: Fri 02 Jan 2026 16:19:44 +0000
ROA not before: Fri 02 Jan 2026 16:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 5.57.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:81:ff:d9:59:15:92:95:d0:22:8f:a2:78:0b:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
Validity
Not Before: Jan 2 16:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22ff914b51965bec4b9fc74dc6aeebe585d78d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:66:2b:b3:2c:d8:6d:3f:84:3f:34:07:0a:
86:2c:30:5e:af:e3:dc:23:29:82:83:5e:94:7b:60:
bf:c9:17:ac:75:0b:ea:d9:84:79:f2:e0:15:d4:10:
0f:9b:b7:f7:a4:4b:97:ed:72:09:19:f7:0d:aa:fd:
6e:6b:9f:09:e5:89:b9:ea:5e:e6:9a:85:af:dd:b1:
09:22:3e:25:85:13:f8:97:22:d1:d9:b4:a1:af:50:
7a:64:3b:bc:a7:32:44:da:fa:59:3f:ae:cb:17:c9:
2e:e9:f7:8e:b2:76:92:f4:e2:a1:a6:45:97:35:51:
b8:82:1a:e2:59:23:ec:d9:cb:2f:be:3b:af:c6:7a:
99:79:1a:3b:cd:ac:28:35:02:50:5f:fa:5d:33:54:
8c:2c:dc:35:ae:c2:eb:43:fb:d4:90:81:71:01:f1:
f1:07:d5:43:3c:52:73:dc:04:37:29:1f:5b:24:3b:
01:41:1f:28:47:68:49:4d:77:d2:59:ec:ee:fe:21:
97:c5:43:fb:33:54:ce:0a:92:94:eb:35:ae:12:00:
fc:47:da:d0:db:15:52:71:72:cb:77:6d:99:21:47:
42:f7:42:04:bc:a6:bc:dc:8f:db:52:56:6d:15:96:
41:1b:88:01:19:7a:55:51:a6:bd:06:84:84:ef:36:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:91:4B:51:96:5B:EC:4B:9F:C7:4D:C6:AE:EB:E5:85:D7:8D:2B
X509v3 Authority Key Identifier:
keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.215.0/24
Signature Algorithm: sha256WithRSAEncryption
17:17:e1:08:72:cf:b7:81:23:0c:4b:36:3d:96:80:49:b1:49:
4e:40:09:99:78:71:d0:31:b5:34:41:fd:d3:a2:ab:86:59:4e:
d5:bd:19:fb:10:68:6d:9c:c3:89:69:72:1d:4b:37:18:ca:97:
3e:86:18:fc:7e:f0:ae:ef:07:52:dd:09:60:9f:36:ef:66:16:
22:83:40:ac:f3:2d:94:bb:19:61:fd:68:c8:f4:0c:39:3d:fd:
34:fd:5d:53:95:81:39:10:9c:e3:c8:43:b3:55:44:a3:13:2a:
71:d8:be:dd:7c:6e:03:19:92:36:1c:c1:78:8d:e3:6d:bf:e7:
cf:e1:f0:2c:66:46:35:a8:da:a6:0e:f5:1e:6b:8d:78:35:b5:
b5:78:e7:dc:94:96:e4:d2:ac:71:14:3d:a7:3a:b1:8f:58:c1:
3e:23:58:d3:cf:52:bb:a5:00:6a:84:0f:25:14:21:d5:59:d0:
16:33:f8:1f:d1:b3:5b:7e:16:b1:a1:9a:16:14:0b:d2:42:d5:
68:fa:91:0e:91:e2:87:5a:05:b0:c0:02:9d:65:42:53:3c:8e:
74:67:ce:ad:90:85:3f:0c:ae:eb:72:ac:0f:6e:c6:48:b3:a5:
9b:1d:77:0a:05:97:8d:03:86:99:a2:22:08:1a:ff:33:88:11:
f6:ca:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:59:32 2026 by rpki-client