This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa
File: InNWe6dZglO7uEDucSJhMoUB55U.roa (raw, json)
Hash identifier: RSzKVRQA+oUsqr256y1ckYtX3s2+tqzZlXY58fpRuM8=
Subject key identifier: 22:73:56:7B:A7:59:82:53:BB:B8:40:EE:71:22:61:32:85:01:E7:95
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019B797EDBF73FDCBBFDAA8915D070488CDF
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa
Signing time: Thu 01 Jan 2026 12:18:35 +0000
ROA not before: Thu 01 Jan 2026 12:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210646
IP address blocks: 151.251.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:db:f7:3f:dc:bb:fd:aa:89:15:d0:70:48:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 12:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2273567ba7598253bbb840ee712261328501e795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:28:28:66:57:55:e7:59:5a:78:0f:0a:25:
c1:b7:61:25:22:c3:52:96:f6:6f:7f:2c:88:08:5c:
05:73:98:63:75:79:3c:36:2c:35:20:44:40:e9:88:
13:05:bc:a0:8e:c6:23:6d:b7:9a:c2:d0:ed:83:88:
e7:3e:e6:ed:d2:c6:b4:d2:de:2e:d7:a0:84:cf:d2:
72:b2:6c:f9:f0:6f:d5:8c:29:55:54:db:63:33:ed:
6b:a0:4b:ee:99:14:0e:36:51:69:42:55:f4:59:b7:
28:79:23:e5:f6:ac:de:91:db:f3:1c:b3:bc:55:e7:
1b:af:36:8b:61:6b:2a:a4:69:f9:b8:ea:3f:59:f7:
b6:8f:d6:f8:e2:a9:d7:91:f5:90:87:c1:76:c3:17:
9c:f2:b4:44:d2:49:0b:61:10:e4:84:81:87:52:19:
76:6d:38:1a:63:4d:7f:9c:ec:0f:00:16:83:fd:a1:
05:26:3d:e6:89:03:3f:ba:86:46:68:5e:6e:85:f4:
58:ec:44:16:9a:ed:1c:55:62:8d:72:42:f0:e6:05:
5d:77:c9:83:50:75:b0:ef:3a:92:04:a4:b6:a4:f3:
fe:3b:fd:c7:75:d5:7e:e0:9d:33:dc:db:cf:3c:57:
67:c9:77:6d:a3:e8:cb:cc:d6:89:3e:1e:80:5d:d5:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:56:7B:A7:59:82:53:BB:B8:40:EE:71:22:61:32:85:01:E7:95
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
30:1b:ce:69:44:b3:73:41:9d:fd:72:d4:89:30:64:bb:de:dc:
9f:d4:19:a6:6c:1b:b1:0c:27:8f:36:53:f2:a1:fd:7c:63:15:
b0:6b:ac:00:ad:db:4f:b5:e2:0b:9a:a8:fa:b1:19:14:21:aa:
48:9c:3d:cf:e1:78:75:67:dd:db:4d:60:47:89:46:16:2d:3c:
95:bf:d1:20:4b:3b:de:e0:9f:55:bd:18:99:a4:73:83:78:e4:
91:58:c2:6f:3e:6e:34:f8:a3:cf:cd:7c:52:4b:69:5f:fa:40:
05:04:a6:3a:32:0d:0e:cf:d1:94:4f:e5:b0:75:c7:21:04:42:
5a:2f:36:68:ba:ae:4d:bd:6c:9a:38:5f:ca:3a:23:24:1e:48:
f1:f1:26:4a:74:f3:8d:75:85:d4:e0:83:24:35:da:9e:05:e0:
ed:49:e3:8b:47:9d:43:39:aa:bc:ad:65:6c:f0:67:f1:1b:35:
9c:00:d1:58:6f:d7:b7:20:33:ee:f1:c7:86:13:00:01:0c:75:
1d:72:89:fa:c1:a0:9d:35:6f:0a:ad:96:ae:1d:4c:9d:36:bb:
23:42:34:51:6a:ee:ef:23:e3:ed:74:b3:1c:1f:93:b4:41:45:
a4:8b:1d:50:88:d5:8a:43:b0:56:89:35:b4:c8:05:14:bd:9c:
b1:c8:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:22:56 2026 by rpki-client