This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/8PoZgyeee-3NyutlenTuH9T7Nno.roa
File: 8PoZgyeee-3NyutlenTuH9T7Nno.roa (raw, json)
Hash identifier: 9N/nhd5C7s33+6YWS7dQM0ugP84B2/FwTC6YAlckydw=
Subject key identifier: F0:FA:19:83:27:9E:7B:ED:CD:CA:EB:65:7A:74:EE:1F:D4:FB:36:7A
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019B7AC81B490ED496BBD11A36094D3539C0
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/8PoZgyeee-3NyutlenTuH9T7Nno.roa
Signing time: Thu 01 Jan 2026 18:18:13 +0000
ROA not before: Thu 01 Jan 2026 18:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211181
IP address blocks: 94.101.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:1b:49:0e:d4:96:bb:d1:1a:36:09:4d:35:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Jan 1 18:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0fa1983279e7bedcdcaeb657a74ee1fd4fb367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:e7:50:34:8c:59:48:3f:c6:22:00:a3:4c:
10:c2:fc:48:17:5d:3b:31:8f:4c:7f:07:25:de:c2:
6e:5d:5a:96:77:81:76:ed:e8:f3:d0:13:2b:87:2c:
93:7d:53:75:28:90:0a:24:fe:b6:ad:80:ac:e6:fc:
6f:d5:5e:bc:3e:2c:ad:09:a4:9c:4c:48:80:0e:08:
f7:cf:39:a1:35:a0:d6:39:9b:cc:85:c6:e9:cf:ab:
78:e5:d1:67:74:61:fb:d3:19:3f:e3:5c:75:ea:e4:
18:3e:9c:61:4e:ed:ee:28:40:f4:c3:d0:1c:6e:b1:
69:7b:92:d4:4c:76:6a:c2:50:c1:9e:2a:fc:25:9d:
9e:b7:ef:0a:38:84:1f:2e:f1:d6:46:b1:69:aa:6b:
60:9b:9d:ce:8e:09:0e:df:e1:fc:dd:fb:18:99:24:
bd:94:39:77:2d:ea:47:a6:e2:10:92:95:32:08:77:
be:01:dd:15:f9:0e:79:20:96:2a:f8:fa:b6:ab:07:
c9:7e:96:4e:6d:77:95:1e:26:f6:c0:bc:7d:fa:98:
06:21:79:88:07:01:0a:7f:3a:ee:34:ef:ee:a8:f2:
22:57:f2:33:56:94:39:24:3c:b9:29:41:fd:c1:48:
16:f4:3f:a2:c2:53:97:3e:5a:59:02:30:73:54:06:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:19:83:27:9E:7B:ED:CD:CA:EB:65:7A:74:EE:1F:D4:FB:36:7A
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/8PoZgyeee-3NyutlenTuH9T7Nno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.111.0/24
Signature Algorithm: sha256WithRSAEncryption
51:96:6f:43:0d:81:48:42:da:d1:39:e3:7d:cf:05:83:d1:1f:
6a:96:a6:11:a0:20:0c:dc:b3:24:32:88:39:8c:4d:4c:60:d0:
f3:07:a8:e7:3c:14:55:97:8d:a7:63:6b:b0:44:0c:80:ec:ff:
33:ad:77:87:1c:5c:1a:99:85:90:6a:1c:c3:5a:fe:92:f5:47:
a0:3d:ea:2f:4c:b7:9e:89:f7:6d:cd:d6:9a:4b:7e:76:0e:be:
84:66:0f:5a:86:08:c0:53:2a:ac:85:b0:be:b3:db:75:ec:38:
b6:cd:38:4c:1b:dd:59:ec:66:f6:b6:34:e6:d4:9b:b2:5e:0d:
69:f3:bc:f6:66:48:44:84:fa:3b:06:17:c6:77:49:f7:43:ad:
95:91:01:7b:fb:79:97:95:9c:cf:3b:1c:6b:27:86:37:40:bd:
71:c2:62:a1:2b:49:02:98:d0:c2:52:e0:2d:33:76:d7:85:6c:
47:21:55:88:c9:d8:09:b7:d2:bd:d6:96:bb:f8:25:ab:80:54:
3f:28:59:03:7f:23:68:66:12:c4:1f:da:d3:c6:4e:28:5f:8e:
dd:d1:d2:56:cf:d9:b4:99:5e:68:1b:bb:24:b4:96:bc:d5:e4:
5a:0c:e0:f8:ed:bb:54:0a:fb:66:38:02:22:2a:31:31:02:d2:
81:2f:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:03 2026 by rpki-client