This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Be8ZE-3fUDOUREKbRltRl9iw1eI.roa
File: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (raw, json)
Hash identifier: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=
Subject key identifier: 05:EF:19:13:ED:DF:50:33:94:44:42:9B:46:5B:51:97:D8:B0:D5:E2
Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial: 019B7CEE2D4718915FF0854E1A664162C5C5
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Be8ZE-3fUDOUREKbRltRl9iw1eI.roa
Signing time: Fri 02 Jan 2026 04:19:02 +0000
ROA not before: Fri 02 Jan 2026 04:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 5.23.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:2d:47:18:91:5f:f0:85:4e:1a:66:41:62:c5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
Validity
Not Before: Jan 2 04:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05ef1913eddf50339444429b465b5197d8b0d5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:50:b0:79:6a:59:57:ae:b8:84:2f:6a:36:
82:15:49:14:22:82:92:fe:58:ac:f8:b6:a0:f4:26:
40:6c:c2:72:0f:b9:50:7c:a4:e4:36:46:5e:a5:bd:
db:8b:d1:b5:01:ab:83:59:17:de:1e:c9:96:58:52:
87:df:df:48:3e:62:33:0a:60:50:a4:60:ae:9a:11:
0c:b3:f3:31:14:bd:29:40:7b:d7:b0:cc:9d:b6:94:
a5:c5:f4:d2:f1:0e:e1:b4:3a:b6:b4:92:d5:b8:a5:
19:7d:b8:d6:da:b3:ec:83:d3:a6:92:e5:55:18:6e:
fb:47:fa:dc:f6:a8:6e:bd:94:35:86:3d:81:eb:9c:
50:a8:9d:bc:37:3d:4d:2f:b1:0c:fd:c1:69:56:25:
53:29:57:f7:87:9f:f3:89:27:07:88:2a:22:9b:5f:
7d:5d:c0:da:28:19:9b:e0:05:20:ac:f6:85:90:04:
98:0e:ed:81:e4:cc:dc:21:28:53:70:43:04:27:7a:
e1:a9:63:47:c4:c8:98:be:5e:1d:90:2e:ed:9f:4e:
51:55:11:23:14:f3:7c:ef:af:25:b8:41:70:a8:94:
d6:98:f9:db:e9:59:7c:ed:60:f5:e4:14:c8:f8:7d:
19:bc:51:d0:c9:00:2b:37:5f:60:b0:f8:a2:bd:f3:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:19:13:ED:DF:50:33:94:44:42:9B:46:5B:51:97:D8:B0:D5:E2
X509v3 Authority Key Identifier:
keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/Be8ZE-3fUDOUREKbRltRl9iw1eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.34.0/24
Signature Algorithm: sha256WithRSAEncryption
62:62:dc:e0:0d:e4:63:1c:ae:7a:8f:e2:1b:8c:ad:83:63:3b:
e6:7a:b5:39:d4:ec:30:e2:4a:ec:7e:4c:03:e0:59:5b:43:e3:
0e:76:7f:4f:90:01:39:d9:3a:19:2f:b0:3e:14:3a:6b:c1:c4:
78:79:9b:51:56:ef:e3:5d:63:5a:a8:ab:76:d4:61:27:91:03:
52:51:6d:a8:a8:b2:ee:f0:5e:62:95:b9:fa:78:e4:c7:0b:df:
e7:46:01:1b:69:1c:6a:50:c5:15:36:10:56:5a:83:5c:9b:0a:
84:92:2d:f8:02:0a:b6:58:e0:a1:b0:80:fa:89:b0:23:f0:8c:
08:8f:4d:f0:3b:57:8d:1b:cb:02:c0:87:4e:92:dc:04:25:a6:
e0:aa:20:04:a3:c3:80:f3:42:b3:d4:ea:11:44:14:ac:30:37:
7b:6d:3b:3c:3b:5c:61:b5:3f:5d:c2:e7:9a:a9:0a:1a:aa:dc:
39:0a:ab:bd:06:d8:8a:6e:18:be:9e:f6:4c:7a:31:38:d8:dc:
23:4f:25:eb:0d:c3:c2:83:2d:d1:33:1b:29:10:fe:ff:49:20:
ba:05:bb:04:8f:04:46:5f:5d:05:1c:2a:5c:1d:6e:55:7c:34:
c1:85:83:77:b0:2f:1c:0c:e2:a5:7e:77:48:13:3e:32:fe:b5:
06:01:15:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87i1HGJFf8IVOGmZBYsXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4
MjFiZjMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWVmMTkxM2VkZGY1MDMzOTQ0NDQyOWI0NjViNTE5N2Q4YjBkNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxRQsHlqWVeuuIQvajaCFUkUIoKS
/lis+Lag9CZAbMJyD7lQfKTkNkZepb3bi9G1AauDWRfeHsmWWFKH399IPmIzCmBQ
pGCumhEMs/MxFL0pQHvXsMydtpSlxfTS8Q7htDq2tJLVuKUZfbjW2rPsg9OmkuVV
GG77R/rc9qhuvZQ1hj2B65xQqJ28Nz1NL7EM/cFpViVTKVf3h5/ziScHiCoim199
XcDaKBmb4AUgrPaFkASYDu2B5MzcIShTcEMEJ3rhqWNHxMiYvl4dkC7tn05RVREj
FPN8768luEFwqJTWmPnb6Vl87WD15BTI+H0ZvFHQyQArN19gsPiivfN6DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXvGRPt31AzlERCm0ZbUZfYsNXiMB8GA1UdIwQY
MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt
MDI5NjRjNTBkMjEyLzEvQmU4WkUtM2ZVRE9VUkVLYlJsdFJsOWl3MWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy
LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABRciMA0G
CSqGSIb3DQEBCwUAA4IBAQBiYtzgDeRjHK56j+IbjK2DYzvmerU51Oww4krsfkwD
4FlbQ+MOdn9PkAE52ToZL7A+FDprwcR4eZtRVu/jXWNaqKt21GEnkQNSUW2oqLLu
8F5ilbn6eOTHC9/nRgEbaRxqUMUVNhBWWoNcmwqEki34Agq2WOChsID6ibAj8IwI
j03wO1eNG8sCwIdOktwEJabgqiAEo8OA80Kz1OoRRBSsMDd7bTs8O1xhtT9dwuea
qQoaqtw5Cqu9BtiKbhi+nvZMejE42NwjTyXrDcPCgy3RMxspEP7/SSC6BbsEjwRG
X10FHCpcHW5VfDTBhYN3sC8cDOKlfndIEz4y/rUGARUC
-----END CERTIFICATE-----
Generated at Sun Jan 18 16:37:47 2026 by rpki-client