This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5-ETDXE6Ruw9_-5TBouIsfEwhRg.roa
File: 5-ETDXE6Ruw9_-5TBouIsfEwhRg.roa (raw, json)
Hash identifier: vHv9FOO1e6wSDnwY991DqvvghH1pyxcXWPa/yYVmSsM=
Subject key identifier: E7:E1:13:0D:71:3A:46:EC:3D:FF:EE:53:06:8B:88:B1:F1:30:85:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCBB0F0AD882650E15583D3882CD3A4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5-ETDXE6Ruw9_-5TBouIsfEwhRg.roa
Signing time: Fri 02 Jan 2026 08:20:59 +0000
ROA not before: Fri 02 Jan 2026 08:20:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 151.241.154.0/24 maxlen: 24
151.242.63.0/24 maxlen: 24
151.244.125.0/24 maxlen: 24
151.244.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:b0:f0:ad:88:26:50:e1:55:83:d3:88:2c:d3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7e1130d713a46ec3dffee53068b88b1f1308518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:de:39:19:34:f6:74:da:a5:9a:86:77:1b:
e1:7d:97:cc:8c:49:ae:1c:55:b3:a5:4b:b5:e6:c4:
36:f4:66:70:00:94:8e:d9:89:c2:06:1d:92:0c:36:
4c:e9:82:91:f4:d5:ff:2b:e7:1b:1f:d8:28:d5:35:
5c:1d:bf:f2:cc:d0:ba:71:a9:af:90:e4:37:51:43:
c9:91:75:ca:9b:40:14:34:c8:d5:35:87:ad:bb:2a:
a9:48:04:a1:a0:1d:1a:4f:a7:1c:7a:ff:93:6d:35:
81:60:ca:c2:b5:d5:2b:e2:1d:2b:64:ae:1d:a7:26:
e4:3f:39:7f:13:14:57:27:38:df:7e:46:36:d8:24:
3a:61:28:a3:65:c8:01:f5:ec:2c:34:92:ce:b6:01:
61:ed:61:a2:c6:1d:ed:78:19:f0:8e:1b:12:3a:1c:
ef:c6:34:11:d3:ad:32:21:d1:b8:43:61:5f:4a:c8:
cd:d3:86:b8:85:9e:5e:c2:30:1b:9e:54:6a:8b:5d:
3e:64:41:ae:77:21:b4:ae:81:ed:25:9c:ce:62:45:
11:e7:8d:c2:ea:f3:5c:ae:54:ea:e9:a7:0c:e9:45:
c9:5d:a6:81:bd:b4:4f:0b:c2:37:96:a7:d0:81:71:
39:f9:fc:68:db:8f:b6:55:61:3c:f6:5d:a4:07:f5:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:13:0D:71:3A:46:EC:3D:FF:EE:53:06:8B:88:B1:F1:30:85:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5-ETDXE6Ruw9_-5TBouIsfEwhRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.154.0/24
151.242.63.0/24
151.244.125.0/24
151.244.234.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4b:5a:09:ea:3f:36:64:02:f8:c8:a5:95:8f:f9:90:1d:33:
f2:68:21:f4:29:b6:18:35:b3:5e:ba:7f:fa:d3:ba:5f:64:24:
f8:98:63:d9:9f:53:55:a9:44:dd:76:63:c7:1c:11:e9:a3:90:
2a:0c:d9:07:62:19:ba:45:58:59:e1:bd:3a:ac:82:c3:44:3b:
11:a1:9c:10:b9:23:54:69:a6:8f:f2:81:07:8e:89:21:e0:e5:
f1:91:00:14:96:40:50:12:03:bc:c5:f1:4a:cd:40:f5:fd:91:
6b:82:a0:79:4e:a0:24:c6:be:ad:91:63:bd:4a:b1:a6:b5:5c:
2c:cc:dc:30:4e:31:5e:86:7a:65:d6:52:38:d8:9e:6a:d4:be:
2a:9f:6c:d3:eb:59:60:67:75:59:cd:df:8b:22:67:1e:bf:f6:
c5:43:72:fa:31:66:a3:2a:cf:fd:00:d9:97:d5:20:f0:05:c6:
53:16:b4:03:21:88:77:73:53:5f:ff:dc:cb:63:fb:7f:18:e8:
68:63:88:d8:c2:9f:57:6d:ce:a1:a6:88:26:7c:ce:31:56:ad:
96:d6:dc:cc:4f:35:01:14:a6:9c:d8:78:2b:a4:b3:df:56:eb:
4d:43:71:99:8d:ce:89:a8:11:95:17:05:10:27:94:3c:5d:26:
c5:2c:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:45 2026 by rpki-client