This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa
File: T13LWDD-6W9mQD-TNeAbL0hWUWw.roa (raw, json)
Hash identifier: ddCXcXoDrd+DwyLuw9axhKETH5Db3Nq2kLoVrgaevAA=
Subject key identifier: 4F:5D:CB:58:30:FE:E9:6F:66:40:3F:93:35:E0:1B:2F:48:56:51:6C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019AA769BCC210849FA090528BCE4A4D6807
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa
Signing time: Fri 21 Nov 2025 17:15:15 +0000
ROA not before: Fri 21 Nov 2025 17:15:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207238
IP address blocks: 45.150.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:a7:69:bc:c2:10:84:9f:a0:90:52:8b:ce:4a:4d:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Nov 21 17:15:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5dcb5830fee96f66403f9335e01b2f4856516c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:fe:1a:f1:df:71:9a:cb:03:de:11:f5:de:
7e:38:c3:33:0c:d4:2a:00:c8:74:1a:75:f8:dc:da:
ac:f9:26:d5:0f:dc:87:d2:06:f5:dd:9e:ad:69:4e:
fe:23:d5:3b:8d:c3:7c:49:cc:07:63:70:02:ba:b0:
18:71:c9:75:a0:66:f2:f6:4f:2b:75:b3:b9:17:75:
4e:38:ff:34:aa:ec:51:33:50:0c:b5:93:50:2d:42:
14:f5:20:5a:c1:d2:14:78:ab:97:ce:81:a9:ec:b6:
1c:21:d2:21:67:d2:1f:07:15:1a:f7:e8:79:4b:a0:
6c:23:78:9f:ed:43:2f:64:7d:8b:2e:1e:30:fd:15:
55:c7:cd:7c:84:64:ca:f7:5a:27:7f:f6:8a:8c:94:
6f:75:13:d4:f2:66:9c:26:9d:8c:78:dd:97:df:af:
12:94:48:9e:6a:d4:68:e8:65:9d:b5:00:c9:b1:4e:
67:b4:d7:5d:12:84:88:4b:d1:51:4a:3e:f9:41:43:
c2:b7:2b:46:1d:dc:90:c7:2e:7a:c3:d6:20:90:df:
22:c2:f0:6c:da:43:3e:0a:7e:46:3c:3e:58:e4:c8:
a5:44:d4:06:6b:00:04:d7:3a:9b:b4:df:7b:9b:70:
e5:73:a3:6c:88:b2:d7:3a:1a:43:9e:47:c6:0d:ca:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5D:CB:58:30:FE:E9:6F:66:40:3F:93:35:E0:1B:2F:48:56:51:6C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.44.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c1:42:fe:55:3c:5c:5c:90:fb:0b:f8:01:8d:23:9b:1a:10:
3f:e3:ed:7a:b6:ea:db:46:e5:17:55:98:b7:8f:bf:7b:4f:81:
7a:36:d0:75:3b:cc:93:a2:2b:4b:08:86:8a:b0:97:9a:fe:c0:
d7:da:d4:ae:a4:60:09:3e:1f:70:ed:44:69:c7:1f:f0:95:30:
22:cb:9e:4a:d0:af:71:58:f2:28:8a:0e:7b:26:2e:8b:0b:c3:
0d:2a:4c:2e:cc:3c:5b:23:81:f9:87:7f:de:f7:7e:de:a0:92:
d1:80:4a:d7:dd:e6:26:37:b0:69:7e:6d:3b:34:84:3e:6a:56:
ec:86:01:ae:08:59:89:19:3e:af:69:ca:01:2b:87:db:60:60:
56:a2:7e:84:07:1a:54:02:53:c9:50:3e:64:98:7e:79:64:0f:
40:45:f0:11:af:90:b4:cf:6e:bd:2a:c6:43:e4:74:67:57:71:
99:b0:12:87:a1:aa:69:36:57:11:bc:be:53:ac:bc:af:21:72:
4d:6f:59:02:82:f9:90:6a:c7:4b:2e:71:db:77:ae:9b:26:df:
94:ca:e1:6a:bd:e0:d1:41:f7:dc:d8:26:fe:22:08:c3:02:0e:
3b:dd:12:e1:b2:08:92:f2:c0:ed:f0:9a:0d:91:7e:ae:46:1d:
39:ae:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:13 2025 by rpki-client