This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa
File: E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa (raw, json)
Hash identifier: 9f37/tNohAMGdruEvWhcUxavSXF2Z9dpN0nP011TZfM=
Subject key identifier: 13:9C:F6:4A:5C:17:8D:35:25:FD:DC:6E:16:7E:47:8F:C0:C0:D7:71
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019B08FD32B8DD5542E36BDECE9DB1043706
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa
Signing time: Wed 10 Dec 2025 15:59:29 +0000
ROA not before: Wed 10 Dec 2025 15:59:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 00:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:08:fd:32:b8:dd:55:42:e3:6b:de:ce:9d:b1:04:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 10 15:59:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=139cf64a5c178d3525fddc6e167e478fc0c0d771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:98:eb:a9:db:74:5f:8f:4a:c5:53:e3:4b:
f0:fa:fb:29:5e:81:a3:07:1d:cd:d0:03:e5:a8:50:
97:39:a1:63:44:23:0b:49:1f:dd:2d:1b:fe:de:ec:
7c:48:66:22:33:b6:f0:ed:d0:8e:d2:1e:5e:01:c9:
e8:3f:4c:bf:db:16:90:8e:28:da:fd:62:c8:b9:77:
a9:42:4c:87:e8:aa:3f:93:50:ae:19:37:f2:94:60:
5b:9d:72:af:07:5d:08:8d:ed:90:a5:69:b6:58:c8:
98:b0:1d:6e:88:9a:2a:5a:dd:2c:fd:a1:55:5a:d1:
85:33:3a:b5:cf:83:74:91:c3:8a:52:42:31:49:4a:
86:db:7a:51:d0:a1:e7:22:08:63:45:cd:ba:97:1c:
8a:45:3d:64:5d:5d:68:a6:29:a7:7b:96:b4:1f:1b:
e3:1a:40:35:b3:fb:54:83:9a:7a:03:c6:af:6c:eb:
83:2c:80:c6:e1:74:08:0a:75:c8:00:2e:16:49:e7:
1f:85:99:a5:42:71:41:b5:93:de:12:c7:c9:20:33:
2d:59:d7:9c:f7:8f:dc:95:f9:58:61:86:f0:30:85:
77:ae:8c:a0:02:eb:ef:d2:83:e2:13:76:45:c4:f6:
bb:df:3d:e6:32:3c:ad:95:71:c2:d4:39:4e:59:86:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:F6:4A:5C:17:8D:35:25:FD:DC:6E:16:7E:47:8F:C0:C0:D7:71
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E5z2SlwXjTUl_dxuFn5Hj8DA13E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
77.83.200.0/22
91.208.204.0/24
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
12:a2:15:cf:5b:8d:ed:bb:20:28:ac:71:c1:e6:24:bb:dc:ba:
72:19:cd:5e:db:84:a0:c2:32:9a:6a:67:41:a4:98:31:bb:47:
82:12:79:cc:83:0d:5c:6b:ca:f9:f1:af:ab:ce:e4:be:11:d3:
6e:e6:65:ea:fd:4b:f5:d2:b2:af:bf:c6:ec:33:98:22:f1:e1:
3f:3d:3a:a2:b6:af:0c:74:f2:ef:66:e5:2d:f6:18:ad:4d:2e:
30:42:2d:8f:d9:06:03:63:62:d2:84:b1:6b:2c:67:b9:a2:ee:
21:3c:e2:81:c0:5d:b4:81:bc:af:da:52:5e:42:19:7f:be:8f:
dd:65:fa:28:4b:f8:21:68:46:b6:4a:e9:1e:67:38:f2:a4:60:
62:81:c4:a4:13:10:3a:5c:86:f2:0b:aa:1c:4e:5b:62:3a:0b:
47:37:18:6c:04:7e:17:4c:56:30:5d:81:22:d4:c5:55:04:a6:
78:13:c0:19:d6:22:52:d2:7c:b4:6b:30:a5:16:25:6f:2e:d7:
7b:43:8a:fc:21:b5:e0:62:37:56:82:2f:22:5a:53:42:96:e9:
f5:0a:4f:1e:fe:f1:2a:18:ea:c6:e2:fd:1d:65:79:a8:2b:a3:
b5:7a:34:bd:3e:29:03:f6:68:3b:a1:24:44:8c:bb:ba:37:b1:
eb:e1:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:17:13 2025 by rpki-client