This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa
File: 5ysiViCYjFvC9-kctDcIkY-pILA.roa (raw, json)
Hash identifier: G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=
Subject key identifier: E7:2B:22:56:20:98:8C:5B:C2:F7:E9:1C:B4:37:08:91:8F:A9:20:B0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 019B7F1501FE7406E14D18E58D11591E99C3
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa
Signing time: Fri 02 Jan 2026 14:20:41 +0000
ROA not before: Fri 02 Jan 2026 14:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 185.179.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:01:fe:74:06:e1:4d:18:e5:8d:11:59:1e:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 2 14:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e72b225620988c5bc2f7e91cb43708918fa920b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:09:d5:75:f1:88:80:97:13:ca:3b:ca:4c:
d1:5c:77:a4:1b:ec:39:dd:89:52:eb:a0:58:63:6d:
ac:b5:a8:6b:4e:fa:88:8f:99:1b:0f:d1:8d:3c:3a:
33:40:72:35:e1:ed:bf:6e:54:f3:7f:ba:aa:4d:95:
15:27:a1:cc:70:46:28:0e:50:f7:d5:ab:b4:96:e8:
91:6f:b7:89:c7:47:08:ea:cb:78:38:8c:35:0a:40:
60:82:5a:2c:9e:d3:3a:e1:e2:35:2b:63:7e:38:39:
91:1f:98:5f:c6:4c:6e:59:e5:77:af:e5:ab:12:51:
66:62:47:08:d3:2b:bc:2f:12:c2:d4:dc:70:68:b1:
68:51:10:c1:1b:67:a0:a9:60:5c:72:33:07:1c:f1:
20:5b:66:3e:32:60:d8:0f:c1:7f:4d:ec:37:46:3d:
29:20:22:db:69:c2:32:82:58:8a:9f:a8:ba:db:9f:
a0:ea:0b:a4:64:81:79:a4:ad:2e:f4:2d:05:4b:06:
9d:c8:c2:64:bb:32:fd:b3:c9:8c:c6:99:7e:72:5b:
8c:00:f7:62:9f:f8:11:77:0c:3f:3b:a8:48:3b:26:
b9:cf:0f:a0:87:de:ed:b1:e1:64:9a:bf:23:a6:ce:
84:7d:04:c3:27:0f:8d:0e:20:96:79:7e:92:84:ea:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2B:22:56:20:98:8C:5B:C2:F7:E9:1C:B4:37:08:91:8F:A9:20:B0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d3:dc:60:09:5b:29:24:a7:56:0e:30:6d:a8:fc:c7:ba:2e:
aa:3b:cc:5a:b5:e4:28:2b:cd:f1:f3:f0:5e:4b:29:5d:f6:2d:
de:3f:4a:06:c6:fb:9d:51:52:90:a3:5c:25:a8:ba:7b:26:03:
a0:c9:0e:31:b1:6a:4e:f8:6f:79:0c:2b:b0:08:98:af:92:6c:
2e:ae:62:2d:0b:04:e5:33:f0:20:8c:68:d5:2e:c0:91:b1:81:
d1:78:94:84:6e:56:63:b3:72:34:38:44:f3:55:a8:b2:9e:c2:
9c:8f:64:d4:18:9f:aa:d2:0c:80:41:95:53:2e:78:3a:d9:ae:
28:b0:a2:5c:b4:38:2e:50:d5:59:77:cb:69:f0:59:b2:d9:24:
75:c5:b7:6b:31:ba:9a:8c:b1:76:1b:b7:33:f4:03:ba:31:c8:
cb:71:1d:e0:8f:a3:ba:92:f7:c8:56:d0:cf:da:77:99:5c:3a:
f7:8c:76:5a:92:cb:0a:44:5c:d9:27:79:52:88:42:6f:fe:37:
02:3c:df:de:b0:fa:1d:95:4e:6a:6e:b9:24:02:fd:cb:24:4a:
71:e2:9a:52:51:7f:16:c6:8a:5f:dd:ca:5a:7d:ab:a7:c9:35:
d0:33:f8:f3:67:05:1c:ce:5f:2c:c6:f1:f6:65:21:b5:08:94:
c1:97:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:31:37 2026 by rpki-client