This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa
File: ZETEwDkcVRTiVgseF2fcKRSalSo.roa (raw, json)
Hash identifier: oTGOylHsvsQb4i5TXwlgyF54WovHzp3kgq2AqjIPKuE=
Subject key identifier: 64:44:C4:C0:39:1C:55:14:E2:56:0B:1E:17:67:DC:29:14:9A:95:2A
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019A968E6FE32750BFF161277B70DB5289DC
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa
Signing time: Tue 18 Nov 2025 10:41:48 +0000
ROA not before: Tue 18 Nov 2025 10:41:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 45.154.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:96:8e:6f:e3:27:50:bf:f1:61:27:7b:70:db:52:89:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Nov 18 10:41:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6444c4c0391c5514e2560b1e1767dc29149a952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:8b:cd:12:30:b6:76:67:e3:bd:8c:a1:fe:
d1:3e:d3:89:4d:2b:2e:95:59:4d:0d:e6:a1:57:bc:
ef:dc:69:e9:f9:e7:5f:7e:a4:86:c5:5c:8f:85:6d:
92:ac:90:02:db:48:92:6c:c0:e1:86:74:b0:d4:10:
9f:d9:95:d9:0b:ac:6a:9a:0d:3a:03:0c:e6:0a:8e:
cf:b3:07:e1:8f:9f:56:5d:4b:73:0d:f1:8f:cf:db:
1c:c0:39:be:23:d8:10:5d:a1:45:4b:9d:55:55:af:
71:e3:cb:b4:5e:ce:92:b3:39:72:3d:36:60:cd:68:
62:df:35:6b:d6:79:cd:ff:c6:88:43:58:bf:3b:6f:
66:86:ec:3e:fb:50:1d:60:ee:47:17:61:a0:85:a4:
f7:88:2a:e3:48:6b:13:1a:cb:f7:68:f7:13:e0:60:
ba:06:25:59:0a:75:ef:af:f7:35:94:4d:d0:bf:cd:
e0:81:8f:b5:bb:e2:50:eb:48:f4:cf:2f:45:20:a6:
51:13:04:72:c2:af:db:a4:97:ac:eb:98:22:41:f3:
fc:d8:f9:03:38:a9:4c:6f:3e:5b:ab:39:d6:80:2d:
58:02:db:82:72:b1:4b:51:e3:31:c1:7f:a3:a3:89:
9b:ae:16:28:7f:5e:80:69:af:27:e4:a5:2c:10:80:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:C4:C0:39:1C:55:14:E2:56:0B:1E:17:67:DC:29:14:9A:95:2A
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/ZETEwDkcVRTiVgseF2fcKRSalSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.0.0/24
Signature Algorithm: sha256WithRSAEncryption
91:15:57:36:5f:eb:0b:e7:fc:c7:2c:12:db:8a:06:de:af:4c:
fb:2e:8f:42:64:08:8a:0d:4f:d6:e5:cf:b3:6e:a0:10:3f:d9:
27:b3:ab:d0:0a:a4:99:88:44:39:49:5d:17:6e:e5:01:25:dd:
55:ff:bb:6d:3c:1d:8e:f0:a7:b0:f5:81:3d:77:50:56:e8:15:
e4:d4:31:1a:69:84:4a:8e:d0:4a:bb:08:d6:d8:bb:4f:1c:5d:
49:4b:bd:c8:ba:16:dc:2c:a4:b9:30:9c:52:61:01:e9:cf:f8:
39:7c:36:82:f9:a3:c2:81:99:fb:20:74:32:41:76:5e:6c:9f:
4f:f0:91:03:b0:94:c5:6d:ea:9f:d8:12:21:45:9e:9d:f1:f5:
27:d7:23:84:c3:84:c3:f4:7b:d4:77:4a:f9:ff:41:77:b0:fb:
01:38:75:5a:16:98:bb:10:8d:8e:12:81:db:fb:3a:fc:f2:a1:
0f:89:d0:0f:46:c0:a1:21:c4:a6:1c:30:65:ba:60:9b:f7:24:
6d:a3:a5:0f:01:f1:b2:f8:0b:4c:47:86:ee:05:70:a4:1b:54:
1e:f6:c2:e1:91:32:54:de:46:dc:9e:b4:da:74:41:04:24:56:
30:5a:9e:f8:0c:c7:12:b5:c0:da:29:7c:70:e2:d9:f3:23:93:
80:2b:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:58 2025 by rpki-client