This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa
File: 5tnuY_EervGGDUz3gXIn8wuI43w.roa (raw, json)
Hash identifier: uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=
Subject key identifier: E6:D9:EE:63:F1:1E:AE:F1:86:0D:4C:F7:81:72:27:F3:0B:88:E3:7C
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019B79101813B462AB6F357DCCF376A9CAF2
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa
Signing time: Thu 01 Jan 2026 10:17:36 +0000
ROA not before: Thu 01 Jan 2026 10:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34986
IP address blocks: 193.104.166.0/24 maxlen: 24
193.188.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:18:13:b4:62:ab:6f:35:7d:cc:f3:76:a9:ca:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jan 1 10:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6d9ee63f11eaef1860d4cf7817227f30b88e37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:58:83:f7:2c:a0:e4:40:8c:37:d3:93:52:
eb:c8:f0:c8:b1:52:2f:d1:5d:ae:b5:8d:b5:65:9a:
8e:93:9a:29:83:f3:d8:98:5d:b5:33:cc:8e:14:94:
01:4e:38:20:be:86:7e:f5:00:24:4d:2f:a7:69:5e:
91:5b:a9:51:e9:7f:19:2e:10:b6:14:60:22:7a:32:
07:15:2f:2d:78:c5:91:58:0f:44:71:4c:3c:f5:7c:
20:ca:2c:66:38:d5:92:e6:80:7e:ff:74:c9:61:40:
39:d2:c4:4b:67:92:fa:62:50:ed:34:fe:05:06:af:
ad:78:21:a1:8f:ba:a8:8b:b2:0c:4c:ce:5e:e8:55:
cb:0b:e4:e4:49:ee:62:e8:7e:18:cb:f7:ff:5f:25:
24:13:25:72:9f:9f:2c:67:2b:aa:90:98:23:02:d4:
8a:9e:9f:aa:46:9c:7e:be:21:17:a7:d2:ab:56:db:
a8:c8:91:a1:02:56:62:13:e7:4d:0f:c8:f8:c2:d3:
ef:cc:01:b4:25:15:ed:8b:b2:33:73:1a:d3:8b:b3:
de:5b:01:7e:c6:19:55:af:7e:94:6e:9a:21:63:5b:
f1:d9:8f:65:73:bf:5e:4c:37:58:32:30:bb:f0:f2:
eb:aa:fa:d5:df:fb:65:91:a9:c3:d6:e4:29:72:60:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:EE:63:F1:1E:AE:F1:86:0D:4C:F7:81:72:27:F3:0B:88:E3:7C
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
193.188.253.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e7:c1:14:8f:4a:50:e0:eb:28:d5:91:80:81:e5:fe:74:de:
63:f7:ab:a6:4a:cd:21:0f:50:86:4e:a3:0b:64:79:94:c0:c9:
90:46:b3:20:ab:37:db:5e:1a:34:d9:d8:80:c9:6d:21:4f:c8:
64:32:04:a0:6e:21:f6:83:89:5b:42:db:b2:ae:e3:90:79:47:
18:11:6a:ed:de:eb:a6:77:d5:bc:30:f1:05:5f:cf:d4:a6:80:
1b:9c:50:60:94:e5:87:2c:fc:22:a8:cb:49:80:38:93:07:27:
5b:1b:27:88:65:a3:90:4c:96:97:12:9e:73:0f:4a:21:92:45:
99:ce:d1:ca:ea:9e:fa:11:eb:b4:ef:13:ec:17:e5:5e:d7:f1:
34:fd:24:92:f2:ef:f5:8d:77:19:a1:dd:c8:55:48:d9:61:63:
e0:05:c2:f6:ea:5f:b1:7c:be:0a:47:92:f4:4a:1b:89:b9:d6:
bd:ad:7c:4e:ef:c7:35:0a:9f:02:cd:fb:81:6e:ac:27:d1:5b:
1e:70:ec:a3:68:87:03:15:c5:ea:31:85:ab:0d:52:b7:23:f7:
11:9a:b0:43:43:22:e0:e7:76:e7:ba:e5:9f:78:2b:e2:6a:6e:
fa:ca:03:91:d0:24:84:9d:ab:5b:2e:0f:be:2a:76:81:36:a7:
b2:f4:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:16 2026 by rpki-client