This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/15UE9HDgWyp_cAsmKQd04BSa6H4.roa
File: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (raw, json)
Hash identifier: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=
Subject key identifier: D7:95:04:F4:70:E0:5B:2A:7F:70:0B:26:29:07:74:E0:14:9A:E8:7E
Certificate issuer: /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial: 019B7E387B1006279E5EBF89FD0E7CC53652
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/15UE9HDgWyp_cAsmKQd04BSa6H4.roa
Signing time: Fri 02 Jan 2026 10:19:49 +0000
ROA not before: Fri 02 Jan 2026 10:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206783
IP address blocks: 45.143.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:7b:10:06:27:9e:5e:bf:89:fd:0e:7c:c5:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Validity
Not Before: Jan 2 10:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d79504f470e05b2a7f700b26290774e0149ae87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a1:cb:52:00:cb:4f:04:37:59:8a:a9:7a:3e:
93:55:88:d2:e6:7e:71:3c:3b:a4:e1:49:8c:67:3f:
a9:55:1a:3c:d7:7e:36:3c:bc:f8:4a:1c:8d:aa:70:
e0:de:5f:37:69:32:eb:93:ec:99:43:92:c1:e9:58:
96:78:25:33:23:98:fb:4e:b8:80:03:52:3a:f3:80:
f9:e4:cf:99:0d:af:db:58:6d:f9:c2:a4:8a:29:9c:
70:ad:7b:c1:71:a5:d9:9c:1a:a1:bf:5b:ac:43:5a:
14:77:ec:92:0e:53:b9:9c:a2:0d:3c:4a:0e:7c:a3:
77:63:a0:ce:93:4d:9c:a0:d2:78:f6:66:27:09:08:
5f:46:87:f9:96:54:79:ec:86:bd:06:f2:e3:c8:00:
4f:17:df:3f:b6:13:99:c7:f4:60:f2:45:29:42:4b:
59:0d:40:8c:a1:fb:89:87:e8:f1:45:53:b9:fb:72:
4e:f6:7e:9e:93:23:8d:d5:7f:94:72:3c:24:43:7c:
44:fc:74:7e:be:44:36:ea:fc:9d:6c:92:07:67:59:
fa:9d:c3:97:57:f0:20:55:18:e0:6c:c5:8c:38:5f:
f1:19:8f:e4:b0:a9:99:13:8c:1d:0e:f6:55:2b:89:
e5:f6:91:7a:91:bf:64:27:e6:43:6f:cd:87:96:ad:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:04:F4:70:E0:5B:2A:7F:70:0B:26:29:07:74:E0:14:9A:E8:7E
X509v3 Authority Key Identifier:
keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/15UE9HDgWyp_cAsmKQd04BSa6H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:39:af:38:2b:88:9e:3c:32:9a:14:cb:e9:6d:90:34:39:c0:
80:e3:a1:a2:1e:9a:84:08:a9:d4:be:14:84:4b:2d:f9:bf:41:
22:ba:bf:bb:4f:76:13:5d:3f:d7:75:ad:a4:99:6c:5b:8d:9c:
b5:8f:dc:2c:38:1e:07:70:cc:2a:25:99:0c:eb:5b:bd:b2:83:
9a:16:a3:39:f6:f7:c8:89:10:95:25:e7:28:3a:c7:c4:36:12:
d5:fa:b9:0b:0c:5a:76:aa:c4:9b:ff:a3:be:87:8d:78:f9:2e:
ed:a7:67:5c:81:95:98:0b:c8:01:5e:ed:42:62:5e:b0:28:9b:
cc:c2:76:c3:0d:e5:c0:fd:a9:70:65:0d:85:e8:08:c4:d5:f6:
68:56:eb:03:d0:48:4d:be:5b:5f:6e:7c:67:73:db:59:57:c7:
9c:96:cc:c9:18:69:3f:80:72:ca:c8:ea:82:0c:df:ad:7e:82:
31:dd:72:3a:22:81:83:89:87:e8:dd:9a:94:26:45:5d:3a:5a:
7e:5c:9e:40:cb:46:d2:a3:55:9a:da:8c:e3:97:fa:bd:7a:c9:
e3:07:67:21:7f:96:22:b8:ec:a1:dc:91:96:75:9f:ef:9b:62:
01:c8:6c:98:0c:04:cb:f7:97:25:f5:4d:d7:07:43:64:86:68:
d1:48:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:00 2026 by rpki-client