This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/HIrm6sRoTksRGtSnmk5VERHaRBI.roa
File: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (raw, json)
Hash identifier: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=
Subject key identifier: 1C:8A:E6:EA:C4:68:4E:4B:11:1A:D4:A7:9A:4E:55:11:11:DA:44:12
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019B79111D7E75EC525672BA4EACED47A450
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/HIrm6sRoTksRGtSnmk5VERHaRBI.roa
Signing time: Thu 01 Jan 2026 10:18:43 +0000
ROA not before: Thu 01 Jan 2026 10:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215186
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:1d:7e:75:ec:52:56:72:ba:4e:ac:ed:47:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 10:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c8ae6eac4684e4b111ad4a79a4e551111da4412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:dc:ba:46:dc:7d:19:63:83:9a:a5:4e:c3:
b7:da:96:8a:45:db:1d:1f:71:46:5f:96:11:28:01:
a6:42:70:de:1b:b0:d1:0e:68:f6:47:18:fc:9d:06:
54:7f:55:45:a5:d9:f4:96:96:86:38:ee:4b:2f:2c:
d0:60:19:a2:86:42:3f:a8:62:27:ef:bf:83:37:80:
92:97:39:04:2a:86:73:f0:45:33:e5:4b:59:c3:23:
72:16:f1:56:68:d1:b2:60:c6:18:c5:29:27:bd:75:
9c:bd:2c:4d:0f:be:ef:f3:8f:e3:c1:65:52:3e:9f:
4c:2a:d9:f1:ca:b7:a1:ba:20:a8:43:2c:e1:24:75:
7f:ac:fb:f2:a9:42:8d:63:39:41:c2:12:58:98:08:
c9:fa:01:2a:b4:9c:e2:3f:bb:19:24:05:6d:de:09:
2e:fc:c0:95:40:08:53:2f:6b:a8:a8:23:25:f5:2c:
57:b6:26:b8:6c:06:90:21:ca:ef:32:26:fd:3b:2c:
eb:24:bf:69:da:ad:f1:1d:ff:a6:b9:11:7d:a2:fe:
84:93:24:87:22:f8:3e:c4:08:c3:9b:55:bf:32:32:
12:91:fe:28:fb:f1:1e:56:92:1e:0a:06:4c:d8:07:
ce:74:5a:79:8e:25:f0:9f:34:34:06:54:b8:97:e0:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:E6:EA:C4:68:4E:4B:11:1A:D4:A7:9A:4E:55:11:11:DA:44:12
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/HIrm6sRoTksRGtSnmk5VERHaRBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c3:2c:85:ec:3a:d8:80:0a:5e:12:fd:bc:1f:85:2e:e6:8e:
6b:f9:f8:97:7b:25:0c:ff:d6:93:66:2b:5f:c1:a5:d7:29:b5:
27:0a:ba:6e:73:53:72:c4:63:fb:aa:0e:19:c0:b1:59:51:92:
75:c0:60:20:29:32:64:10:2d:fd:4b:05:0d:ab:63:fd:cd:e3:
d4:93:5f:06:70:ca:9f:31:42:ff:43:66:42:d2:86:51:b8:26:
6d:da:55:56:5e:1e:78:08:42:58:e0:2d:de:f7:d9:eb:3d:10:
6d:86:6c:77:e7:81:f5:a5:db:67:86:cc:d9:56:17:52:04:75:
d3:e3:9c:c3:e1:42:72:81:ff:9c:6a:b8:ca:77:99:51:67:78:
ff:58:0a:ff:c5:6f:6a:30:d8:5d:11:23:ca:6f:5c:6d:c9:6c:
b7:96:38:9c:ac:93:59:f4:20:4c:93:f7:17:21:57:ac:7c:65:
5e:84:9f:cf:5d:f1:e0:d8:d0:80:21:39:80:9d:97:69:80:89:
dd:60:fb:75:84:41:07:aa:94:d8:fb:ba:76:bc:d8:46:b3:8d:
f8:fa:d2:36:68:5a:1f:6d:d5:8c:b2:d7:28:4b:89:4d:54:63:
8d:0f:58:5b:b1:14:06:3f:ad:5c:d4:a2:14:b0:21:7b:3c:33:
3f:99:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:45 2026 by rpki-client