This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa
File: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (raw, json)
Hash identifier: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=
Subject key identifier: E5:ED:2D:A8:7D:B8:05:33:34:DF:28:AA:F1:E5:AC:EE:04:21:7E:35
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 019B7CEE28DD223E438FDAD32475D4952A68
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa
Signing time: Fri 02 Jan 2026 04:19:01 +0000
ROA not before: Fri 02 Jan 2026 04:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60453
IP address blocks: 193.142.234.0/24 maxlen: 24
193.142.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:28:dd:22:3e:43:8f:da:d3:24:75:d4:95:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Jan 2 04:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ed2da87db8053334df28aaf1e5acee04217e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:1f:18:8b:70:e3:88:74:03:ff:1c:fc:46:
16:c9:36:e2:81:62:b7:fe:82:be:3d:cd:c5:44:64:
cd:ff:84:b4:5e:1c:97:d8:67:9b:09:e7:a6:d9:44:
6a:b5:d6:d9:4a:e5:ef:fc:06:be:b6:f6:17:02:3c:
07:c6:01:e5:14:24:27:5c:37:51:8a:ef:ba:c1:51:
dd:61:10:84:95:fb:de:1f:27:80:3c:70:2a:9e:fa:
04:fa:93:fc:b6:20:e1:85:d3:0e:9e:64:7d:a4:4b:
bd:cb:d6:15:b4:ed:96:e6:49:e1:e2:fa:dd:2f:6f:
78:a3:0a:43:d3:b7:97:c9:60:04:24:80:e7:25:fc:
b6:5c:e8:59:58:29:ae:fe:62:2c:c8:60:41:d6:c5:
83:c0:7c:7e:58:d9:ef:ad:b7:db:16:34:40:f9:d9:
8e:a6:75:30:06:bc:3e:48:14:00:63:a7:f2:02:be:
29:2e:29:29:e9:e3:07:fc:f2:13:62:43:19:ba:40:
1c:e5:b9:c4:3e:99:47:50:bd:40:4a:43:95:23:ed:
2a:54:fe:88:ed:3f:23:f4:ae:22:19:03:e6:ae:d0:
32:b3:a7:9e:33:79:7a:35:68:cd:2a:dd:b3:08:07:
3d:cd:63:81:58:0b:00:49:d8:d5:6f:f5:e7:13:31:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:2D:A8:7D:B8:05:33:34:DF:28:AA:F1:E5:AC:EE:04:21:7E:35
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.234.0/24
193.142.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:96:06:ef:25:66:39:d0:88:d7:e8:06:f6:84:4b:dd:d6:d9:
a8:21:a0:9c:47:b8:42:cf:a1:71:0f:a7:12:48:14:84:9d:cc:
d3:a4:2f:9f:8b:81:0b:44:c5:b2:fc:a8:e6:75:e3:10:c9:c6:
cf:9f:2b:a6:d4:1f:be:ac:ef:9c:aa:2d:b6:14:6d:e8:95:e0:
8b:0f:c2:95:ad:07:e4:0d:ca:d3:e3:85:47:be:d3:5e:a5:d8:
86:dc:fd:16:90:f6:e0:3d:f9:93:7e:d6:3d:86:02:6a:2d:1b:
08:46:45:89:1b:22:7f:ce:2a:5c:d1:10:8e:32:d4:bf:f0:be:
8c:58:82:84:78:c0:06:db:2e:4b:66:92:a3:f1:88:ef:89:e0:
02:b9:d1:9e:3a:21:32:d9:9f:1d:f6:ce:61:85:57:10:3d:64:
59:37:ba:f8:dd:5f:cf:d3:0c:3c:c9:41:86:ba:80:7d:a4:6b:
bf:47:eb:04:a1:f0:aa:1f:47:f7:e3:fc:b5:a0:c4:28:67:7c:
18:1f:65:9f:ad:8d:81:55:92:d9:2f:57:b9:6c:d4:2e:14:43:
7b:b7:25:35:50:88:ee:18:e1:0d:70:4d:92:dd:1a:b6:49:35:
f3:03:7c:9f:04:f8:26:a7:9f:8c:a2:2d:38:40:2b:e7:53:72:
02:fc:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:40:52 2026 by rpki-client