This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa
File: _ucYlKcSV9u4dKTixz5tuwFZdbs.roa (raw, json)
Hash identifier: MihutH8dIC7eqe5OKGCAT1jtLG34edPGvZzCl++Gy0A=
Subject key identifier: FE:E7:18:94:A7:12:57:DB:B8:74:A4:E2:C7:3E:6D:BB:01:59:75:BB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019A9D4ECAC094DF1662AE1ED8896BC649FF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa
Signing time: Wed 19 Nov 2025 18:09:37 +0000
ROA not before: Wed 19 Nov 2025 18:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201813
IP address blocks: 45.67.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:9d:4e:ca:c0:94:df:16:62:ae:1e:d8:89:6b:c6:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Nov 19 18:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee71894a71257dbb874a4e2c73e6dbb015975bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:3c:d2:b5:7d:34:3e:fd:1f:a6:98:61:ac:
38:65:d8:8b:ef:72:ab:fb:13:10:cd:1e:24:8f:25:
95:78:c0:83:93:d0:b3:db:1b:20:87:99:b9:c4:e8:
a3:2c:7f:7a:3c:1c:5c:a2:32:b2:c5:d5:6d:d4:7b:
95:59:4a:a9:dd:b1:82:db:21:dd:5e:16:e4:f2:f4:
d0:54:7b:27:59:00:09:ca:f8:91:c8:f9:49:9b:a6:
ba:bc:03:fd:c8:ee:db:a9:d4:af:4a:70:34:b1:94:
59:e4:fb:cc:0a:a1:01:f2:ed:5a:93:0e:9a:08:dc:
ef:72:fe:ea:d5:91:e1:49:1d:c6:ce:25:e7:1c:42:
ee:12:12:f7:15:99:9b:c1:e5:c6:c2:73:aa:55:3d:
9b:9f:e3:25:92:96:f0:c1:96:e3:e7:21:69:ef:c0:
1b:f3:4c:66:e4:5d:bb:d1:4c:e8:da:a0:a8:8a:92:
4e:9f:d7:fe:e1:93:9d:e7:9e:d2:32:5e:16:2a:f9:
6c:74:9c:b0:0c:4d:2c:03:5f:a9:41:1e:7c:85:f5:
70:8f:0f:11:41:ca:6a:2c:45:a8:80:7a:5c:1e:0d:
36:72:51:a5:ac:50:19:16:b9:01:d5:96:06:61:34:
0e:e8:dc:b2:7e:bd:3d:8d:44:86:f9:b0:03:5d:08:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:18:94:A7:12:57:DB:B8:74:A4:E2:C7:3E:6D:BB:01:59:75:BB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/_ucYlKcSV9u4dKTixz5tuwFZdbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.196.0/22
Signature Algorithm: sha256WithRSAEncryption
44:af:e8:8b:46:bb:48:20:a8:90:05:a4:1d:8d:99:7b:8f:89:
fb:db:2d:86:b4:16:70:62:0e:85:76:22:27:eb:21:66:01:71:
43:de:d8:16:8f:d0:e8:27:71:11:0a:5f:ca:81:9f:9d:e0:b8:
ad:46:de:8f:51:70:90:07:c4:ac:55:df:bf:1d:e9:8d:d1:71:
37:af:8b:b1:90:56:0b:f8:68:05:7d:fb:bc:bb:83:fa:0c:50:
78:5c:f8:b8:3e:72:7a:27:0d:a0:1b:c4:09:25:60:65:2a:cc:
28:d5:68:1c:a0:3a:1b:7d:c8:5c:19:d1:71:21:1d:75:c6:00:
1e:39:62:3a:13:76:4d:fc:7e:6c:45:a2:72:7e:b6:a5:8d:a0:
eb:46:2d:df:88:63:ae:97:bd:7f:d7:93:bd:46:cc:a0:22:12:
9b:3b:04:32:11:db:a4:19:10:35:7f:2a:57:cc:a2:75:b4:e0:
15:5f:43:4d:9f:d6:c4:2e:06:41:90:95:69:d1:de:44:c2:88:
00:28:87:75:19:d1:2b:ac:75:00:89:42:79:d7:85:08:43:94:
8a:6b:5e:a4:25:82:cf:01:38:e0:7f:a7:9a:6e:7a:73:e2:d5:
4f:e5:bf:57:2c:16:0d:35:af:0a:6f:23:71:84:df:5e:d9:c1:
68:d2:de:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqdTsrAlN8WYq4e2Ilrxkn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUxMTE5MTgwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU3MTg5NGE3MTI1N2RiYjg3NGE0ZTJjNzNlNmRiYjAxNTk3NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+k80rV9ND79H6aYYaw4ZdiL73Kr
+xMQzR4kjyWVeMCDk9Cz2xsgh5m5xOijLH96PBxcojKyxdVt1HuVWUqp3bGC2yHd
Xhbk8vTQVHsnWQAJyviRyPlJm6a6vAP9yO7bqdSvSnA0sZRZ5PvMCqEB8u1akw6a
CNzvcv7q1ZHhSR3GziXnHELuEhL3FZmbweXGwnOqVT2bn+MlkpbwwZbj5yFp78Ab
80xm5F270Uzo2qCoipJOn9f+4ZOd557SMl4WKvlsdJywDE0sA1+pQR58hfVwjw8R
QcpqLEWogHpcHg02clGlrFAZFrkB1ZYGYTQO6Nyyfr09jUSG+bADXQgOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7nGJSnElfbuHSk4sc+bbsBWXW7MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvX3VjWWxLY1NWOXU0ZEtUaXh6NXR1d0ZaZGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUPEMA0G
CSqGSIb3DQEBCwUAA4IBAQBEr+iLRrtIIKiQBaQdjZl7j4n72y2GtBZwYg6FdiIn
6yFmAXFD3tgWj9DoJ3ERCl/KgZ+d4LitRt6PUXCQB8SsVd+/HemN0XE3r4uxkFYL
+GgFffu8u4P6DFB4XPi4PnJ6Jw2gG8QJJWBlKswo1WgcoDobfchcGdFxIR11xgAe
OWI6E3ZN/H5sRaJyfraljaDrRi3fiGOul71/15O9RsygIhKbOwQyEdukGRA1fypX
zKJ1tOAVX0NNn9bELgZBkJVp0d5EwogAKId1GdErrHUAiUJ514UIQ5SKa16kJYLP
ATjgf6eabnpz4tVP5b9XLBYNNa8KbyNxhN9e2cFo0t74
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:54:56 2025 by rpki-client