This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/75fBNZWLkaIgBslw6k4wj9TuWLU.roa
File: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (raw, json)
Hash identifier: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=
Subject key identifier: EF:97:C1:35:95:8B:91:A2:20:06:C9:70:EA:4E:30:8F:D4:EE:58:B5
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019B7A5A6EF8460B7D22E7A800B0E07E6FAF
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/75fBNZWLkaIgBslw6k4wj9TuWLU.roa
Signing time: Thu 01 Jan 2026 16:18:25 +0000
ROA not before: Thu 01 Jan 2026 16:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57179
IP address blocks: 45.94.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:6e:f8:46:0b:7d:22:e7:a8:00:b0:e0:7e:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 1 16:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef97c135958b91a22006c970ea4e308fd4ee58b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:c9:55:be:f3:f0:21:20:9b:62:fc:b3:9f:
9a:d0:79:31:ff:78:e4:7e:da:de:40:54:8d:f9:74:
6b:a0:d0:27:7f:d9:6b:c5:e1:25:68:cc:89:75:e1:
51:22:fd:e3:16:b7:a4:94:81:e0:0d:3e:06:4f:eb:
ed:a8:21:fd:3f:63:78:35:10:0e:67:33:16:3c:2c:
5a:c0:71:cd:ea:73:b8:e3:34:a9:7a:7e:e6:8d:b1:
76:a6:d4:74:5e:9b:28:6a:80:36:ae:2b:b0:6d:72:
77:65:1c:f1:5a:89:90:ea:e1:46:5e:ed:d4:b7:4c:
e6:33:53:8f:82:a2:18:81:14:37:75:53:2f:99:11:
61:c0:cd:88:0d:71:6a:a7:db:95:5e:ea:89:66:b0:
95:68:41:a8:c9:3f:f7:e9:86:dd:9b:a2:60:a0:a4:
58:55:e1:8f:53:19:db:e9:d5:19:e9:77:7b:b1:ea:
f3:93:ab:20:b9:d3:24:ef:9f:1d:c6:d4:07:c0:2d:
51:8a:28:a2:10:af:7e:f7:08:6a:7a:fa:07:6d:5c:
d9:9f:c3:58:76:2b:85:68:1a:cd:37:58:05:35:23:
5f:e1:f1:89:12:94:e9:8e:00:a9:67:27:52:1f:1c:
5c:91:ec:a6:ea:11:2f:bf:99:e6:20:04:2a:c0:3e:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:C1:35:95:8B:91:A2:20:06:C9:70:EA:4E:30:8F:D4:EE:58:B5
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/75fBNZWLkaIgBslw6k4wj9TuWLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:fd:7e:4d:a0:e3:8d:d9:f9:f2:d9:71:2f:1d:5f:39:9c:9b:
cb:2a:bd:0a:21:99:8a:17:f4:4e:9a:ce:5d:e4:24:e9:5a:1b:
63:1e:c0:75:fc:96:bb:6d:87:0a:16:28:06:e4:a6:b1:56:ac:
63:d3:5d:05:df:f4:03:75:98:07:19:a5:7e:28:77:35:1f:6d:
3e:43:64:69:20:26:6a:27:9a:9a:a7:61:79:9c:91:dd:fb:b8:
3e:59:b4:32:7c:f2:79:c4:13:92:c5:a8:87:4d:cb:42:9c:de:
3a:13:eb:82:6f:fb:c9:8d:7f:f1:05:cf:e5:33:16:46:6c:79:
57:78:fb:75:b7:b2:e3:3d:8b:19:af:81:dd:5e:74:fc:8e:ee:
5e:86:29:ed:d2:b9:39:b3:71:dd:d7:97:ad:f3:16:a1:f3:b6:
6d:f3:b8:4e:30:c6:f1:10:14:e6:92:16:92:7f:b4:b0:75:11:
ce:16:f3:95:2a:d8:7b:5d:78:ea:ce:5a:9b:65:1c:b9:03:33:
c4:1c:b1:0e:a5:ad:d8:1d:ee:1d:b1:d3:aa:40:0a:bf:3b:77:
97:fe:02:4f:bd:a8:a8:32:b6:d9:6a:86:b6:db:02:8c:48:16:
43:d1:4b:b1:e6:d7:f0:7b:c1:20:72:c9:61:7c:ae:11:d0:f7:
b6:e2:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:40 2026 by rpki-client