This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_w5UYdFDNzYlLB7LTgg14uRWoQ0.roa
File: _w5UYdFDNzYlLB7LTgg14uRWoQ0.roa (raw, json)
Hash identifier: FNlNd2XH5rtIbYtOhYBckkDJYb7wBJCjDTN6zqyAzfM=
Subject key identifier: FF:0E:54:61:D1:43:37:36:25:2C:1E:CB:4E:08:35:E2:E4:56:A1:0D
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 019B783520BEC45D1DA458014386D0E51834
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_w5UYdFDNzYlLB7LTgg14uRWoQ0.roa
Signing time: Thu 01 Jan 2026 06:18:26 +0000
ROA not before: Thu 01 Jan 2026 06:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 80.83.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:20:be:c4:5d:1d:a4:58:01:43:86:d0:e5:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 1 06:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff0e5461d1433736252c1ecb4e0835e2e456a10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:3b:61:6b:e3:36:e1:1b:db:c4:e7:c4:11:
9a:91:38:64:68:36:9c:93:15:18:7e:d4:7b:cc:a5:
9e:f7:9e:44:7e:2a:a5:97:40:b5:58:e5:9c:c2:64:
82:d8:d1:34:b7:f9:5a:da:d3:ba:73:bc:71:f9:ca:
35:5c:f3:21:35:23:c0:c5:8f:98:b3:09:fa:f3:75:
5c:e0:22:e7:26:7f:bd:be:38:f5:66:a7:39:5c:ab:
f4:8f:82:42:60:8f:59:6d:e2:4c:ff:e5:43:99:e9:
3b:b7:5b:88:8e:17:e6:29:93:31:a8:0c:2c:06:9f:
bb:3d:48:80:9c:6d:64:50:56:4e:19:d8:b2:f9:39:
9a:1b:59:1c:c1:23:5b:a2:6c:c9:51:ee:d7:4d:71:
4e:37:91:41:d1:39:94:5c:54:f8:98:e6:ab:9c:94:
9d:85:da:c7:e7:cf:72:03:56:f8:5c:4e:1c:f2:ce:
27:9b:7b:bf:5c:b7:2b:3b:d3:a7:c9:0a:09:16:a6:
67:a5:8c:69:ac:3a:1b:8e:51:6b:16:e2:4d:a4:98:
32:bb:ad:3b:bb:89:8d:ac:d5:45:30:fd:1f:47:0a:
4c:4d:1b:dc:75:8b:e7:f1:92:91:ab:d2:8d:bd:eb:
9e:0f:01:48:b8:4e:e0:2c:e8:ab:66:8c:85:a9:e5:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:54:61:D1:43:37:36:25:2C:1E:CB:4E:08:35:E2:E4:56:A1:0D
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/_w5UYdFDNzYlLB7LTgg14uRWoQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:bd:75:81:25:6a:59:e2:77:21:1c:22:7b:6d:b7:b6:6d:49:
07:08:25:ec:11:17:84:59:e0:2b:fd:32:78:68:19:bd:21:a8:
ac:a9:78:4a:4d:ff:41:00:0b:75:19:5f:27:b9:45:27:e0:a8:
fc:fb:e7:cc:02:d3:3c:fb:aa:a7:90:6d:ce:3c:1e:0c:49:90:
8e:c7:3f:99:06:90:05:6e:e8:84:31:e8:ca:cb:77:f6:17:2f:
98:21:21:8d:45:76:2a:a2:fa:c4:c8:52:62:6f:72:0a:46:4d:
56:2f:ef:7b:03:9b:ed:11:4c:f8:8d:33:2d:e1:fa:cb:b1:85:
a1:e8:5e:03:de:2f:6b:4b:1c:86:0e:63:7b:2c:e6:87:af:1a:
a6:72:38:21:5c:07:c2:e9:56:fe:10:98:f8:32:cb:08:4e:6b:
b2:9b:fe:0e:ad:c8:9e:f1:8e:84:d4:e7:41:9b:13:82:8c:58:
de:08:77:7a:49:80:04:91:20:ed:0c:31:90:74:2d:e0:df:93:
c7:43:44:81:91:d0:6f:39:0e:15:f4:35:6e:66:55:83:4d:16:
c8:cc:2f:38:e9:88:8e:c9:16:3e:a3:77:2c:11:92:f2:31:50:
73:71:4b:3d:b4:db:fd:7b:1b:26:ca:46:a8:6b:73:ed:21:0e:
51:ee:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:12 2026 by rpki-client