This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa
File: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (raw, json)
Hash identifier: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=
Subject key identifier: 8B:1D:0A:B9:08:48:F9:F7:B9:B0:21:38:DE:00:DF:F0:0C:03:74:C9
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 019B78A2E3911EA3661BBDAE8AFC76B5B581
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa
Signing time: Thu 01 Jan 2026 08:18:19 +0000
ROA not before: Thu 01 Jan 2026 08:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212396
IP address blocks: 45.84.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:e3:91:1e:a3:66:1b:bd:ae:8a:fc:76:b5:b5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 08:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b1d0ab90848f9f7b9b02138de00dff00c0374c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:6f:d2:a5:91:92:e4:be:90:64:de:65:98:
7b:45:20:9c:b7:83:d6:c3:6f:5f:0a:65:7d:8b:0d:
52:12:ff:8f:fc:91:c1:88:02:fd:e3:71:f2:97:40:
7b:ae:26:be:64:34:8a:05:4e:de:ee:f1:b4:e2:86:
f3:9d:c0:f7:da:32:ab:e8:51:b8:9d:23:ee:55:bc:
fc:77:7b:93:aa:bf:2d:09:b6:e2:63:5f:14:89:13:
86:c3:20:55:15:62:75:c3:c6:10:32:d1:88:39:bb:
8c:77:75:e2:16:80:01:5f:99:b1:69:98:ab:95:8f:
b1:ce:75:e8:8b:d3:bd:e3:32:e4:ef:48:56:9b:90:
f1:45:47:10:15:73:0c:84:0a:4f:a3:a0:f2:ba:7e:
70:7e:51:fd:48:eb:12:5f:03:0d:d1:e6:8a:bd:7e:
2a:ac:03:15:9d:3f:ee:b8:94:2c:97:61:25:74:92:
85:9d:23:4d:dc:c6:97:26:9b:89:73:28:8b:27:74:
e9:ec:51:7e:76:64:36:6f:67:5d:c0:ec:22:f0:fe:
66:3b:70:df:f9:63:ef:f1:6e:c5:d4:3c:2a:00:7e:
c2:e1:6e:77:5f:c2:4c:40:68:5c:47:6e:7f:54:92:
94:06:22:71:3a:72:8c:f5:c2:15:50:1a:d2:37:87:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:0A:B9:08:48:F9:F7:B9:B0:21:38:DE:00:DF:F0:0C:03:74:C9
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.57.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d0:71:9b:c5:5e:6c:c1:3c:9e:aa:cc:9b:78:01:95:9c:fc:
55:1f:57:5e:8c:de:ab:a5:77:20:f0:22:ee:7a:ae:a6:78:96:
bf:db:f2:6f:55:48:ce:c8:cb:65:59:d5:7c:bb:e4:5f:ee:86:
8d:0f:60:bd:b3:7f:d6:16:0f:6c:9f:5a:3b:1c:0b:57:7e:da:
6c:f1:56:da:35:ce:4c:e2:0c:a7:13:7b:f8:51:a9:a8:fb:08:
79:e7:2d:d2:57:f2:b6:89:be:89:41:57:7d:fd:54:1e:8e:00:
67:98:ec:a0:2f:e5:25:c9:83:dd:46:a2:81:f4:d8:7c:d0:b9:
90:a1:b8:26:25:7e:43:fe:f8:d7:1d:c6:85:7f:63:df:ee:91:
cb:2e:7b:50:66:66:79:98:94:95:e0:d9:27:34:67:5a:48:81:
de:20:13:1e:d8:ca:74:3c:dd:43:ce:38:2c:59:0c:c1:61:34:
c4:e3:e0:b1:da:95:0f:0b:c6:03:e3:3e:5a:99:cc:39:0e:21:
55:d2:36:d1:88:62:4a:10:81:16:cb:49:15:b8:fe:67:47:82:
b6:6c:c6:fb:84:d4:3f:f6:61:b0:4f:81:d7:6f:eb:1b:47:5b:
0e:53:fd:1c:06:fc:99:7a:c3:a1:b8:80:be:db:0d:b2:64:49:
90:10:2f:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ouORHqNmG72uivx2tbWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjFkMGFiOTA4NDhmOWY3YjliMDIxMzhkZTAwZGZmMDBjMDM3NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVhv0qWRkuS+kGTeZZh7RSCct4PW
w29fCmV9iw1SEv+P/JHBiAL943Hyl0B7ria+ZDSKBU7e7vG04obzncD32jKr6FG4
nSPuVbz8d3uTqr8tCbbiY18UiROGwyBVFWJ1w8YQMtGIObuMd3XiFoABX5mxaZir
lY+xznXoi9O94zLk70hWm5DxRUcQFXMMhApPo6Dyun5wflH9SOsSXwMN0eaKvX4q
rAMVnT/uuJQsl2EldJKFnSNN3MaXJpuJcyiLJ3Tp7FF+dmQ2b2ddwOwi8P5mO3Df
+WPv8W7F1DwqAH7C4W53X8JMQGhcR25/VJKUBiJxOnKM9cIVUBrSN4fowwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsdCrkISPn3ubAhON4A3/AMA3TJMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvaXgwS3VRaEktZmU1c0NFNDNnRGY4QXdEZE1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVQ5MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ0HGbxV5swTyeqsybeAGVnPxVH1dejN6rpXcg8CLu
eq6meJa/2/JvVUjOyMtlWdV8u+Rf7oaND2C9s3/WFg9sn1o7HAtXftps8VbaNc5M
4gynE3v4Uamo+wh55y3SV/K2ib6JQVd9/VQejgBnmOygL+UlyYPdRqKB9Nh80LmQ
obgmJX5D/vjXHcaFf2Pf7pHLLntQZmZ5mJSV4NknNGdaSIHeIBMe2Mp0PN1Dzjgs
WQzBYTTE4+Cx2pUPC8YD4z5amcw5DiFV0jbRiGJKEIEWy0kVuP5nR4K2bMb7hNQ/
9mGwT4HXb+sbR1sOU/0cBvyZesOhuIC+2w2yZEmQEC8Q
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:04 2026 by rpki-client