This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa
File: m31omT_27UL9_8TqT3dZ0O1Xy54.roa (raw, json)
Hash identifier: rFLDJzjWnty+Ky2kZezUhQGZshkPkxWj6t4wCRGgxlE=
Subject key identifier: 9B:7D:68:99:3F:F6:ED:42:FD:FF:C4:EA:4F:77:59:D0:ED:57:CB:9E
Certificate issuer: /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial: 019B79ECC496E434B1BB5CF3D17E5BE0FCEA
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa
Signing time: Thu 01 Jan 2026 14:18:38 +0000
ROA not before: Thu 01 Jan 2026 14:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42344
IP address blocks: 91.142.32.0/20 maxlen: 20
185.18.144.0/22 maxlen: 22
185.107.8.0/22 maxlen: 22
2a01:418::/32 maxlen: 32
2a06:3fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:c4:96:e4:34:b1:bb:5c:f3:d1:7e:5b:e0:fc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Validity
Not Before: Jan 1 14:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b7d68993ff6ed42fdffc4ea4f7759d0ed57cb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:47:9f:50:3e:a8:50:f1:9e:69:22:ab:2e:
63:cd:de:8e:01:92:96:ff:88:3f:8e:22:d3:67:ef:
cd:f3:00:fc:c8:37:d6:53:6d:4a:00:e0:41:dd:da:
3f:5d:ec:df:84:1a:17:0c:36:35:8f:7e:09:75:7c:
50:38:d5:e8:94:43:69:b7:f6:74:5b:f9:fc:e0:ed:
78:79:16:86:6a:ae:9c:99:c3:87:6a:dc:8a:24:12:
8e:8b:f9:41:eb:e2:12:29:a2:9b:9e:82:68:38:e2:
16:c4:3e:7e:05:b2:9d:86:50:ef:a5:00:b6:ba:23:
29:9f:98:3f:f3:00:ab:1e:b4:c8:c8:e1:43:c3:22:
ca:f8:7c:fc:4f:e6:38:43:8d:bb:b0:ff:fa:fa:f9:
b5:08:3f:ea:d6:91:af:fc:69:92:54:cc:16:ce:57:
64:83:0d:ff:fb:a0:06:93:74:68:48:6d:26:37:37:
0d:be:1e:45:61:a9:56:cc:39:63:f5:24:9d:23:c0:
ec:0c:16:57:fd:07:38:f6:f6:b7:3d:e3:c8:4a:cf:
4b:9a:6c:32:56:3b:c4:4c:6b:2a:cd:a8:0b:fe:86:
f5:02:49:dd:06:ec:b3:a4:0f:6b:ed:e6:92:0d:33:
d6:50:7d:2f:75:b6:47:b6:ec:b4:a8:f9:e9:f8:59:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:68:99:3F:F6:ED:42:FD:FF:C4:EA:4F:77:59:D0:ED:57:CB:9E
X509v3 Authority Key Identifier:
keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/m31omT_27UL9_8TqT3dZ0O1Xy54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.32.0/20
185.18.144.0/22
185.107.8.0/22
IPv6:
2a01:418::/32
2a06:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
26:3d:d5:c8:6f:a3:32:cd:d2:e8:c9:e1:48:18:7c:ce:8d:4f:
2b:93:9e:f6:f4:79:98:1f:ea:ef:db:96:71:3f:2e:65:98:8c:
6e:c4:cc:1f:32:1f:1e:5d:e2:cc:e3:63:fc:b6:a9:3c:43:bf:
d2:ca:50:ce:b1:fc:36:0d:b6:ab:98:23:51:b3:99:9a:1f:08:
1d:aa:2a:97:cd:9d:ac:ba:03:a5:8c:f3:df:da:19:23:1b:01:
bb:cd:7f:5d:9d:73:67:2f:47:9a:99:f3:b6:ce:a9:b5:95:fc:
55:1c:97:b9:f2:8c:f0:8e:b5:f2:20:35:c4:a9:19:4b:d1:98:
06:8d:1d:43:fe:31:63:63:ae:d4:c7:1f:bf:0e:f6:50:c1:db:
ac:f1:93:df:a2:3b:ee:af:ca:86:19:cb:a6:b4:dc:95:a2:e5:
37:25:78:05:41:d8:35:39:f0:42:ca:b7:36:2d:13:4e:5f:54:
ab:23:da:29:24:49:0c:90:03:89:fe:d3:08:00:81:00:e0:c1:
cc:67:b8:f1:28:54:41:84:eb:27:27:1c:5b:4c:56:0b:09:62:
49:8a:7d:bf:be:b7:32:c3:0e:90:4c:7f:f4:ff:2f:5f:f5:08:
c2:ab:b8:3d:05:04:7b:3b:7f:a9:20:59:41:19:92:4c:99:d4:
6f:df:76:ce
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt57MSW5DSxu1zz0X5b4PzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjYyZjlmZjZiNjQzYzQ2N2EyYjQzNGI3NmY4MjVlYmI2
NmZlZDQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjdkNjg5OTNmZjZlZDQyZmRmZmM0ZWE0Zjc3NTlkMGVkNTdjYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrhHn1A+qFDxnmkiqy5jzd6OAZKW
/4g/jiLTZ+/N8wD8yDfWU21KAOBB3do/XezfhBoXDDY1j34JdXxQONXolENpt/Z0
W/n84O14eRaGaq6cmcOHatyKJBKOi/lB6+ISKaKbnoJoOOIWxD5+BbKdhlDvpQC2
uiMpn5g/8wCrHrTIyOFDwyLK+Hz8T+Y4Q427sP/6+vm1CD/q1pGv/GmSVMwWzldk
gw3/+6AGk3RoSG0mNzcNvh5FYalWzDlj9SSdI8DsDBZX/Qc49va3PePISs9Lmmwy
VjvETGsqzagL/ob1AkndBuyzpA9r7eaSDTPWUH0vdbZHtuy0qPnp+FkoNwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFJt9aJk/9u1C/f/E6k93WdDtV8ueMB8GA1UdIwQY
MBaAFEdmL5/2tkPEZ6K0NLdvgl67Zv7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUt
YjBiNGM0ZjJmZDkwLzEvbTMxb21UXzI3VUw5XzhUcVQzZFowTzFYeTU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUtYjBiNGM0ZjJmZDkw
LzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEW44gAwQC
uRKQAwQCuWsIMBQEAgACMA4DBQAqAQQYAwUDKgY/wDANBgkqhkiG9w0BAQsFAAOC
AQEAJj3VyG+jMs3S6MnhSBh8zo1PK5Oe9vR5mB/q79uWcT8uZZiMbsTMHzIfHl3i
zONj/LapPEO/0spQzrH8Ng22q5gjUbOZmh8IHaoql82drLoDpYzz39oZIxsBu81/
XZ1zZy9Hmpnzts6ptZX8VRyXufKM8I618iA1xKkZS9GYBo0dQ/4xY2Ou1Mcfvw72
UMHbrPGT36I77q/KhhnLprTclaLlNyV4BUHYNTnwQsq3Ni0TTl9UqyPaKSRJDJAD
if7TCACBAODBzGe48ShUQYTrJyccW0xWCwliSYp9v763MsMOkEx/9P8vX/UIwqu4
PQUEezt/qSBZQRmSTJnUb992zg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:41 2026 by rpki-client