This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa
File: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (raw, json)
Hash identifier: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=
Subject key identifier: 48:ED:C1:97:33:7C:DB:0B:92:13:6E:8F:90:01:E8:2F:D8:1D:58:AD
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019B7AC7A8C7CEC9F18C38F0F61280D676EE
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa
Signing time: Thu 01 Jan 2026 18:17:43 +0000
ROA not before: Thu 01 Jan 2026 18:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3269
IP address blocks: 45.82.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:a8:c7:ce:c9:f1:8c:38:f0:f6:12:80:d6:76:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jan 1 18:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48edc197337cdb0b92136e8f9001e82fd81d58ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:ca:c5:59:bb:af:9c:24:dd:1c:fe:f4:5e:
55:16:5a:b2:41:be:67:d3:59:68:87:27:12:f0:9d:
24:77:06:1a:cb:64:76:ab:06:53:f1:5a:2a:09:40:
86:df:83:42:89:52:47:96:f4:14:96:ae:bd:91:c8:
6c:2c:b7:3e:93:63:13:00:e9:85:e0:1c:79:ba:83:
10:d5:91:44:40:11:51:c2:4c:3c:b4:d8:02:ef:35:
9d:ba:71:39:ff:60:5b:d0:02:f2:d4:6c:99:cc:de:
1f:e7:dd:f2:55:10:e9:14:c5:9a:b1:8d:87:81:a1:
99:c4:6e:8d:2d:1d:b5:9e:fe:8a:bf:df:cd:ea:ec:
a1:c5:c2:9e:58:cd:e8:16:f5:e7:ef:75:d5:14:88:
94:c8:a8:e6:75:f0:2c:91:dc:1c:ee:d4:24:96:93:
9b:46:06:bf:d1:82:e3:2a:b3:02:3c:4a:52:53:21:
6d:9c:a0:b4:2b:7a:f4:33:7f:bc:e9:0f:70:c3:68:
a1:73:d1:83:04:dc:60:2a:dd:91:3b:9c:b6:60:ae:
1a:7f:e7:f5:ec:79:20:06:8c:d8:e2:2a:e2:a9:7f:
8d:e9:3d:d8:08:20:d8:2f:16:40:71:c8:61:26:44:
c3:95:ea:53:3f:6e:ea:12:a4:a7:f0:26:12:a9:cc:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:ED:C1:97:33:7C:DB:0B:92:13:6E:8F:90:01:E8:2F:D8:1D:58:AD
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.203.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4e:b6:fa:53:ba:9f:22:8c:8f:03:29:b5:31:76:7c:1a:25:
95:0d:0e:01:a5:2d:c6:45:43:e7:85:5b:38:8a:a3:38:ec:d1:
c4:d3:a7:d7:fc:4e:e7:2e:42:fc:87:ce:be:56:3e:c5:29:5f:
91:01:ac:b5:be:5a:a8:50:12:b2:61:6d:79:65:9a:84:eb:f7:
27:70:e1:f6:51:f5:ab:29:a5:4d:cd:08:f0:c8:24:b7:b8:15:
fc:40:57:83:b9:a2:c1:98:ab:d1:c8:3f:34:11:9c:32:50:06:
23:39:c5:72:95:bc:d5:e8:2a:1b:ed:c1:c6:75:e9:d6:72:61:
05:8a:7f:d7:dd:d8:09:74:23:a9:52:de:fc:91:76:82:f8:a0:
da:ee:3e:6b:7a:93:b5:37:39:54:a8:62:95:97:4d:e2:53:ca:
17:94:b9:bb:43:ac:61:e1:7c:ed:22:e7:fd:27:dc:da:90:b0:
b6:d4:06:3c:3c:e3:b8:1e:fd:47:56:85:24:c4:2d:52:ed:f7:
42:99:00:f5:f7:86:8c:35:d5:ca:14:7b:b1:81:8f:dd:92:28:
ce:8c:c9:61:41:cb:fc:d9:91:e4:00:32:04:50:6b:b7:cf:1d:
c8:f9:52:3b:15:08:93:35:ec:cd:b2:79:8e:db:26:3a:8e:f0:
d8:fd:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:30 2026 by rpki-client