This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa
File: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (raw, json)
Hash identifier: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=
Subject key identifier: 8A:DA:13:89:CE:C6:FF:E1:BB:8D:CA:36:5D:6E:19:D4:D1:1C:6C:2C
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019B7F852382DDEE4C05CFDC855C650A1C6F
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa
Signing time: Fri 02 Jan 2026 16:23:10 +0000
ROA not before: Fri 02 Jan 2026 16:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210237
IP address blocks: 5.181.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:23:82:dd:ee:4c:05:cf:dc:85:5c:65:0a:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jan 2 16:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ada1389cec6ffe1bb8dca365d6e19d4d11c6c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:4a:bc:f8:2d:d3:30:20:11:73:9c:08:fa:
cd:fb:14:2d:ca:e8:8e:85:3a:1a:be:71:e6:75:d8:
df:91:88:d1:94:65:d1:f7:fd:91:f9:27:38:76:9b:
08:12:61:bf:d7:a3:3b:5f:30:bf:bd:d6:e6:b3:96:
ec:98:df:9b:a9:8a:2c:13:14:42:0f:c6:18:b5:aa:
4c:1e:45:ce:bb:81:eb:e2:39:c4:44:e6:27:c5:ab:
82:e2:71:d8:76:17:03:60:74:42:c4:17:0c:d2:ec:
e5:cf:12:0a:93:8e:f4:c2:8a:c9:44:e5:79:3e:47:
e5:da:1b:37:73:df:7f:92:1f:35:e1:bf:93:11:7e:
f8:d5:48:63:bb:59:6c:40:a3:dc:69:dd:76:f0:97:
a1:78:cc:ef:a0:55:1f:74:6a:94:5a:2f:0a:82:b6:
c8:71:57:bd:7c:66:fc:35:f0:6c:26:33:c3:7e:34:
a4:c5:6a:25:52:79:e9:91:72:93:b1:2d:be:b3:31:
64:de:4d:ea:be:7c:15:ee:5c:b4:b8:fd:c3:19:74:
c8:79:21:3f:d0:16:95:2a:a0:f0:da:e8:30:6e:61:
c9:ca:0d:82:20:45:40:cc:bf:81:5c:3a:15:2b:29:
3c:16:bb:f6:de:bd:f2:85:36:9f:eb:0a:e4:d4:a1:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:13:89:CE:C6:FF:E1:BB:8D:CA:36:5D:6E:19:D4:D1:1C:6C:2C
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:13:33:7d:98:e2:18:e7:e3:f6:61:82:e3:9b:76:80:7c:b9:
a7:b8:aa:77:38:ac:de:b6:43:bb:4c:7d:d8:28:84:6c:91:7a:
1a:52:8b:0c:42:d2:67:86:09:dc:ab:0f:7c:f9:53:14:e4:43:
e9:3b:e6:12:35:6a:55:fa:92:6c:f9:10:77:ea:35:05:ff:c5:
fc:73:20:33:39:12:23:4b:b4:fd:1c:a9:03:b1:d6:6e:8a:c8:
80:1e:27:d1:17:b1:d8:42:3a:0e:c8:9f:28:bf:d2:bc:ab:6d:
30:96:40:55:53:4c:48:cb:c3:a5:74:a8:9b:83:66:bb:8b:d9:
1b:a8:bd:e6:2e:81:df:34:b7:77:c3:b5:04:ac:6f:3c:17:9f:
1a:69:f0:03:d8:e4:d4:df:4b:6f:be:02:fa:6b:10:b7:7c:1f:
f0:57:99:d2:f1:1d:74:25:fa:a0:a4:f6:8b:24:5f:de:30:2b:
4c:3c:60:ef:2a:11:08:a2:52:28:8f:86:a3:6a:47:02:fd:4a:
63:be:72:f8:ec:69:c3:c3:35:f4:3c:d0:c9:68:8f:7e:75:7a:
8b:e3:81:12:b5:0d:40:7e:a7:3c:80:15:40:7b:00:12:5e:9d:
44:b4:6d:9c:7c:e0:84:81:79:7f:d9:c5:d1:3b:c9:d6:9a:48:
1f:c2:88:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hSOC3e5MBc/chVxlChxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjYwMTAyMTYyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWRhMTM4OWNlYzZmZmUxYmI4ZGNhMzY1ZDZlMTlkNGQxMWM2YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtKvPgt0zAgEXOcCPrN+xQtyuiO
hToavnHmddjfkYjRlGXR9/2R+Sc4dpsIEmG/16M7XzC/vdbms5bsmN+bqYosExRC
D8YYtapMHkXOu4Hr4jnEROYnxauC4nHYdhcDYHRCxBcM0uzlzxIKk470worJROV5
Pkfl2hs3c99/kh814b+TEX741Uhju1lsQKPcad128JeheMzvoFUfdGqUWi8KgrbI
cVe9fGb8NfBsJjPDfjSkxWolUnnpkXKTsS2+szFk3k3qvnwV7ly0uP3DGXTIeSE/
0BaVKqDw2ugwbmHJyg2CIEVAzL+BXDoVKyk8Frv23r3yhTaf6wrk1KH9CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIraE4nOxv/hu43KNl1uGdTRHGwsMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvaXRvVGljN0dfLUc3amNvMlhXNFoxTkVjYkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbXkMA0G
CSqGSIb3DQEBCwUAA4IBAQCaEzN9mOIY5+P2YYLjm3aAfLmnuKp3OKzetkO7TH3Y
KIRskXoaUosMQtJnhgncqw98+VMU5EPpO+YSNWpV+pJs+RB36jUF/8X8cyAzORIj
S7T9HKkDsdZuisiAHifRF7HYQjoOyJ8ov9K8q20wlkBVU0xIy8OldKibg2a7i9kb
qL3mLoHfNLd3w7UErG88F58aafAD2OTU30tvvgL6axC3fB/wV5nS8R10JfqgpPaL
JF/eMCtMPGDvKhEIolIoj4ajakcC/UpjvnL47GnDwzX0PNDJaI9+dXqL44EStQ1A
fqc8gBVAewASXp1EtG2cfOCEgXl/2cXRO8nWmkgfwoiw
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:36 2026 by rpki-client