This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/EU0dIexXpepLqV4coUUAIRVb-H8.roa
File: EU0dIexXpepLqV4coUUAIRVb-H8.roa (raw, json)
Hash identifier: Sb2wLX/RqNGdGCSytUaEJdgIu7Q+7vz9Pa8hlXYY0rU=
Subject key identifier: 11:4D:1D:21:EC:57:A5:EA:4B:A9:5E:1C:A1:45:00:21:15:5B:F8:7F
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019B775972E478926CBC8C2074498895C8F5
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/EU0dIexXpepLqV4coUUAIRVb-H8.roa
Signing time: Thu 01 Jan 2026 02:18:29 +0000
ROA not before: Thu 01 Jan 2026 02:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5413
IP address blocks: 45.132.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:72:e4:78:92:6c:bc:8c:20:74:49:88:95:c8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 1 02:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=114d1d21ec57a5ea4ba95e1ca1450021155bf87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:47:28:16:a9:61:bc:f0:36:59:a2:e2:78:
35:87:c3:f9:f1:50:d4:46:2a:ef:91:9a:1e:e7:2d:
9c:81:27:af:33:8b:3c:da:0a:70:c9:e4:16:7b:74:
3d:e5:6b:c0:1b:e2:b3:38:4d:65:71:3b:ed:62:e0:
ba:bf:fe:f6:d0:6c:ac:bc:e3:27:f5:b0:26:19:c7:
34:57:6b:b3:a8:ea:db:21:12:0b:c7:94:21:a2:2f:
b0:70:c8:ba:58:9c:8b:2c:ed:87:c8:4c:11:2c:84:
70:68:97:b2:7d:81:7f:d8:56:75:0c:90:86:0a:8c:
f6:0a:c1:7d:27:20:dd:d6:50:39:02:50:2c:15:bc:
6f:88:56:51:b7:75:2a:7e:5c:ab:e8:e7:cf:ec:d2:
39:24:d7:21:2d:39:fc:73:8b:90:43:63:4f:53:af:
94:0e:cf:79:39:9b:06:d7:c1:f2:5c:97:58:4a:2a:
d3:83:c8:8d:55:91:3b:b4:05:f9:89:19:b4:5a:08:
b0:7a:d0:51:cd:62:4e:48:69:9d:34:eb:1f:b2:49:
9b:0e:b4:ef:b4:ab:f3:47:1b:17:ac:e6:e5:9d:5e:
01:13:82:0b:67:a3:c3:46:df:54:f6:98:b8:51:6f:
54:7c:82:29:4f:eb:75:60:fd:6b:7f:59:27:7e:d9:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:1D:21:EC:57:A5:EA:4B:A9:5E:1C:A1:45:00:21:15:5B:F8:7F
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/EU0dIexXpepLqV4coUUAIRVb-H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.148.0/23
Signature Algorithm: sha256WithRSAEncryption
71:b4:4a:48:c8:08:cd:cd:40:db:23:64:8b:86:0d:20:50:97:
3d:d9:05:80:04:37:df:f8:94:cc:12:be:19:21:52:38:fd:af:
b2:a7:57:8f:ca:20:89:7c:79:73:8e:48:28:0f:f5:4c:50:80:
d9:66:7b:19:c5:a1:ea:91:76:f9:51:23:eb:fc:9a:24:0a:bb:
50:58:01:73:30:96:28:60:5e:cd:9c:2c:ca:14:15:ed:3b:ac:
de:80:da:d7:8f:f5:21:ff:e2:07:8e:86:67:54:9e:8a:f9:26:
68:59:a0:e1:50:8b:8b:12:f1:7a:de:28:4f:d3:4d:e9:3a:14:
46:fa:24:76:9b:4a:01:31:c4:d1:49:02:4f:bc:16:b5:c7:05:
85:01:e3:3b:93:95:68:d6:d3:29:04:02:0e:45:6a:7b:2b:bd:
f3:76:e8:98:4a:3b:46:07:19:03:f7:59:0b:e1:23:83:e2:4a:
10:8d:e1:81:69:d6:65:f9:cf:20:d7:96:5c:c4:73:fa:a4:5d:
63:59:fd:4e:b3:95:c4:99:61:01:bd:8e:f0:16:99:88:59:36:
e3:46:4f:67:67:2c:27:76:32:d7:d6:1b:81:5e:51:23:08:b7:
f0:5d:1d:0d:ae:e0:f6:1c:70:e9:a3:39:aa:ab:53:22:a9:49:
4d:7b:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:03:47 2026 by rpki-client