This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/t5g9JJgTeTxlzlS2-l4KatgQqhI.roa
File: t5g9JJgTeTxlzlS2-l4KatgQqhI.roa (raw, json)
Hash identifier: i6WKydZbQwmwygFZkL0wGJ79C8EFlVc8aiS0Dhfq4Io=
Subject key identifier: B7:98:3D:24:98:13:79:3C:65:CE:54:B6:FA:5E:0A:6A:D8:10:AA:12
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 019B7F1585A8B65A5E5FEB8D6A1E002F3D3B
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/t5g9JJgTeTxlzlS2-l4KatgQqhI.roa
Signing time: Fri 02 Jan 2026 14:21:15 +0000
ROA not before: Fri 02 Jan 2026 14:21:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212833
IP address blocks: 91.223.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:85:a8:b6:5a:5e:5f:eb:8d:6a:1e:00:2f:3d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 14:21:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7983d249813793c65ce54b6fa5e0a6ad810aa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:b5:9e:7d:a7:7f:1b:61:a9:f7:16:e4:2b:
c9:24:d1:47:e9:eb:a3:89:76:e4:00:e7:59:41:b9:
be:3b:43:fb:05:0b:aa:52:ad:7c:a3:1b:3a:91:56:
7a:19:f6:9c:d2:3b:3b:5d:8d:d7:9b:8f:fb:a3:82:
85:79:7e:46:06:30:c6:ba:ae:54:4a:29:09:39:32:
d4:7c:b7:4e:a6:2b:78:82:43:11:fe:fe:83:d6:5c:
7a:bd:2d:45:5f:9a:db:06:e3:f4:37:3b:30:04:38:
78:8f:35:9a:05:10:f3:74:f8:f4:81:71:0a:75:1f:
75:a6:68:22:5f:10:5d:c3:8c:3a:be:a4:ac:e7:1b:
1b:4f:8f:16:db:43:87:6e:c4:09:2a:f3:7b:23:a3:
ea:b7:84:95:00:5a:8e:93:8b:48:2a:4c:4c:e3:ee:
2c:1f:68:e9:b8:1f:26:60:bc:9b:e0:75:13:93:74:
f3:3d:b9:69:56:02:54:87:95:d7:4a:c7:72:ee:51:
4a:68:b9:20:f8:e4:e4:9a:aa:3c:50:a3:f6:bb:49:
cd:57:d2:89:57:4a:ba:55:4d:8e:77:ac:f4:65:48:
40:3f:3a:9d:12:df:51:ea:6b:3a:cb:1c:a9:74:02:
24:f4:2b:57:80:b4:1d:0c:1b:90:97:a2:dd:e9:45:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:98:3D:24:98:13:79:3C:65:CE:54:B6:FA:5E:0A:6A:D8:10:AA:12
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/t5g9JJgTeTxlzlS2-l4KatgQqhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:00:18:ad:1a:0b:e5:c6:55:ca:e3:6a:9d:4a:cd:63:5a:74:
66:4b:b6:f4:69:4c:8c:8d:c8:c3:9a:ec:34:ae:91:d0:a5:7c:
87:72:3d:d3:ad:88:a3:68:bc:83:40:7a:a8:2c:25:58:81:23:
4d:31:fe:82:1f:7e:4a:74:b2:d9:df:45:f9:26:c0:bb:53:68:
52:f9:b4:96:48:2b:c9:c0:3a:b9:af:45:90:ee:63:b3:b4:5c:
73:68:e0:2d:c8:38:99:93:f2:79:ae:5d:56:c2:b4:e3:8f:1f:
56:12:41:b1:01:ce:bf:e8:fb:d9:71:a7:68:d7:87:11:e5:9e:
33:34:44:a0:be:2c:1e:07:a3:26:c0:85:1b:94:c6:47:38:ad:
92:3a:74:de:19:c7:2f:c4:f6:3e:bf:51:27:16:ae:d1:e9:75:
71:27:a7:e4:ae:43:48:d5:cd:87:84:38:a6:b1:af:dc:14:fc:
bd:5d:eb:55:ca:fe:1f:c7:7e:5d:b2:a1:7c:15:c2:80:e0:39:
63:14:4d:04:c4:3e:1f:a8:13:ad:cb:6a:b2:bf:57:f2:f4:90:
70:71:df:6c:a2:f1:1c:f3:a2:4d:b6:89:7a:36:18:ec:19:a9:
8b:7b:c1:80:87:70:16:f6:7f:0e:6d:a1:46:ab:a9:2c:e2:9c:
8c:4e:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:28:21 2026 by rpki-client