This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa
File: q5QCzkumzST46_juxutwokUmgo0.roa (raw, json)
Hash identifier: MDvObiRF/vbaGYpuLSQ+tLb0/l9IEYefgNBYbZcoyeU=
Subject key identifier: AB:94:02:CE:4B:A6:CD:24:F8:EB:F8:EE:C6:EB:70:A2:45:26:82:8D
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019B12F11C3AF2576EFA5E7AE0603D846890
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa
Signing time: Fri 12 Dec 2025 14:22:29 +0000
ROA not before: Fri 12 Dec 2025 14:22:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5533
IP address blocks: 77.91.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:f1:1c:3a:f2:57:6e:fa:5e:7a:e0:60:3d:84:68:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Dec 12 14:22:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9402ce4ba6cd24f8ebf8eec6eb70a24526828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:15:3d:57:6b:64:49:fa:79:cc:81:d9:85:
f3:d3:6f:b2:4d:76:be:36:33:b9:cc:5a:43:7c:27:
80:af:a1:61:81:c9:81:c8:23:52:29:88:ff:de:94:
b3:8d:20:38:f0:2b:4c:00:de:b3:90:5c:1a:39:27:
92:26:0f:dd:53:85:10:eb:7c:93:e3:dc:e6:fe:2f:
2a:0c:e7:65:96:76:06:54:fa:2b:a6:56:c9:cb:ba:
d1:6b:2e:0e:84:07:07:9d:36:6f:bc:fd:5c:53:92:
61:c1:a6:66:5f:9e:f2:8e:a8:7f:0f:1b:2c:c3:bf:
7e:0d:35:2a:c2:99:25:3b:2a:33:a4:f3:b7:4f:03:
75:e2:27:f2:9e:f5:61:35:2f:db:5b:cb:3b:0e:d7:
ec:3d:14:95:60:a1:ff:b3:b3:9e:72:0a:75:61:1e:
e5:22:f5:6c:c7:24:84:be:f3:62:2c:23:79:9a:5d:
d1:9d:0c:4b:28:3c:dd:d7:a8:ac:35:ba:06:3a:bd:
6e:31:70:86:99:a0:40:97:5e:c1:d6:0a:e0:f9:85:
ed:be:06:d7:57:ce:d7:cb:54:dd:15:16:f5:b7:14:
a9:47:b4:3b:0b:d3:c5:f1:ca:0a:31:3e:4c:5b:0c:
2d:bc:61:87:f2:7f:00:7e:b7:4c:d5:64:39:68:87:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:94:02:CE:4B:A6:CD:24:F8:EB:F8:EE:C6:EB:70:A2:45:26:82:8D
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/q5QCzkumzST46_juxutwokUmgo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:d9:63:1f:9b:b8:86:05:e1:89:25:5e:20:de:4e:85:35:81:
e4:67:70:d5:b3:d0:dc:16:3f:08:65:d3:90:7a:85:88:8f:5d:
96:f8:ed:49:96:0b:90:62:ef:a3:05:b2:da:bc:96:08:d3:56:
eb:66:f8:69:ed:9d:97:c1:80:b8:8c:8b:70:13:d1:aa:75:59:
88:bd:dd:f5:62:d3:6c:6d:d2:b8:90:45:32:e5:9b:1b:08:1e:
64:77:c4:1d:8c:21:6e:4d:ad:c5:37:f7:d8:65:5e:fd:61:b0:
61:9e:d8:21:f5:b1:ad:da:87:0d:57:00:c7:78:d5:2b:0f:77:
29:d1:55:c5:f2:15:b0:21:4d:01:be:47:69:ab:0c:20:2f:70:
a0:75:0b:4d:40:a9:11:3d:f4:3d:0f:6b:dd:09:be:0f:45:a5:
78:ed:ec:6f:40:6f:8a:bf:b6:93:d3:0f:a8:d0:f6:fd:44:7a:
82:99:37:46:4e:56:93:f7:ff:25:0d:1f:47:e2:39:ea:a1:8b:
50:43:8b:4f:70:40:ec:73:2f:df:8c:60:38:27:56:8b:69:d1:
d6:87:27:c4:78:19:33:35:5d:f0:73:5c:06:00:a6:6c:0c:44:
2f:37:30:4f:0c:90:bc:74:c3:e7:62:83:40:da:16:e5:74:a8:
70:21:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:31:48 2025 by rpki-client