This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa
File: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (raw, json)
Hash identifier: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=
Subject key identifier: 36:E7:AA:42:F9:0F:E8:EC:1B:62:AD:CA:78:6B:AC:26:22:39:9C:1E
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 019B7B365ACC453B0F78D874E61A7D6BAC31
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa
Signing time: Thu 01 Jan 2026 20:18:38 +0000
ROA not before: Thu 01 Jan 2026 20:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47169
IP address blocks: 45.10.92.0/23 maxlen: 23
185.143.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:5a:cc:45:3b:0f:78:d8:74:e6:1a:7d:6b:ac:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Jan 1 20:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e7aa42f90fe8ec1b62adca786bac2622399c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:65:de:5a:ea:c8:85:a5:86:40:6d:2b:ba:
aa:56:50:1c:00:64:a4:95:4a:fc:bc:43:42:6a:c3:
56:34:a0:04:ff:8a:46:3a:3f:e4:87:4d:0c:27:f3:
01:77:ba:bf:e1:57:63:77:fd:8a:8d:3d:21:af:6c:
3b:b8:d7:42:99:29:86:1b:de:99:61:d8:78:d5:a0:
02:60:8a:99:78:72:2a:e8:6d:b7:46:91:22:64:ba:
c9:d9:fc:0d:3e:25:76:35:90:f3:9e:46:47:38:78:
90:e1:08:b4:8d:fb:a7:c8:ee:53:ab:7a:e9:99:3f:
01:be:2d:03:9e:db:af:2a:2d:70:25:83:32:81:12:
b0:1d:b2:de:7c:2b:b1:bc:ab:14:40:da:1b:79:12:
cf:bc:cd:01:df:f2:c6:39:69:25:5a:db:ea:3a:05:
f6:a5:ac:20:db:0e:27:53:e1:df:c9:db:b8:3c:dd:
e4:5c:3c:8f:c5:19:8a:6f:ab:9b:be:18:ac:19:67:
29:27:98:a8:e7:24:b8:4b:7d:77:36:ec:78:02:9b:
d3:b7:76:67:f0:9f:68:c9:6a:e7:75:84:58:eb:de:
1c:a9:3e:56:11:cf:ec:d0:da:17:e8:c5:6c:54:8f:
5a:c6:da:95:f8:d4:75:0f:62:d3:9f:4d:f6:98:31:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:AA:42:F9:0F:E8:EC:1B:62:AD:CA:78:6B:AC:26:22:39:9C:1E
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/NueqQvkP6OwbYq3KeGusJiI5nB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.92.0/23
185.143.200.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:85:b2:71:91:20:52:35:2c:ea:93:88:78:76:72:73:1a:58:
07:24:ca:96:f4:27:d2:8d:5b:43:30:7b:f3:69:1a:d7:7a:e5:
d2:95:bc:ea:0e:2e:19:c7:83:1c:5f:63:4f:99:f9:92:b0:48:
1b:25:99:01:03:5c:b8:59:3d:fd:42:79:78:02:3f:6d:8d:29:
b0:34:32:27:94:e8:9c:60:ec:df:b4:ac:55:87:2d:d6:6a:38:
f8:d9:b9:ea:bc:b6:4b:0f:b9:d2:b4:fa:ea:e1:2c:d2:66:50:
a8:95:10:10:88:2d:d3:41:c6:2c:e9:af:39:ec:16:d8:c7:b6:
2d:a6:bd:9e:86:a9:0a:0c:69:99:36:51:36:88:af:9c:45:70:
fe:81:77:9b:07:87:aa:1d:3f:3d:91:72:16:15:26:4d:a7:af:
fb:24:91:2d:b1:67:8b:fe:b5:89:bc:6b:e4:6f:26:8c:d2:ce:
2e:63:b1:61:7a:c5:3f:5a:fd:b4:26:81:8b:5c:bc:a6:c1:59:
97:de:33:bb:6a:f6:99:29:78:11:24:8a:62:3e:45:22:80:35:
d2:f8:b9:46:64:76:22:bf:2e:c2:77:ff:dc:eb:47:46:07:c5:
a0:49:87:22:b4:69:04:ea:60:0c:e3:a9:42:e1:ce:65:f9:64:
e3:d3:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:05:15 2026 by rpki-client