This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/L4quBG1QGU6SThCNMzL_Oiq3LlE.roa
File: L4quBG1QGU6SThCNMzL_Oiq3LlE.roa (raw, json)
Hash identifier: KnfWba2c1mQhMIa5B8805wubnU9mhdduU6fDntjx5WE=
Subject key identifier: 2F:8A:AE:04:6D:50:19:4E:92:4E:10:8D:33:32:FF:3A:2A:B7:2E:51
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019B77C79365F91480E1BAE29987A9169E06
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/L4quBG1QGU6SThCNMzL_Oiq3LlE.roa
Signing time: Thu 01 Jan 2026 04:18:46 +0000
ROA not before: Thu 01 Jan 2026 04:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207764
IP address blocks: 81.15.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:93:65:f9:14:80:e1:ba:e2:99:87:a9:16:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f8aae046d50194e924e108d3332ff3a2ab72e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:87:25:3b:c2:4e:a4:e4:26:57:e4:65:20:
cb:eb:23:c7:77:e2:ab:16:6e:bd:5e:18:c9:d1:20:
10:73:0e:6d:d6:a0:ed:5c:29:df:e7:0f:3d:ba:ef:
d9:71:48:dc:3c:80:e7:59:06:fb:21:a1:ee:90:20:
d6:9b:13:c1:d0:34:7f:1f:1a:c3:d7:82:d1:aa:6d:
d3:45:a8:a8:c8:47:94:9b:25:c3:96:13:73:75:51:
21:79:e2:e4:0b:a1:31:17:7e:f5:a3:c8:71:96:75:
5f:44:2a:68:58:26:1a:03:91:12:f3:29:1e:d6:68:
be:2a:eb:11:1a:55:50:d5:bb:e8:43:01:be:9c:28:
b1:1f:f0:c3:22:84:80:43:67:e2:5b:ce:22:36:7d:
58:c7:fd:c3:0a:39:b7:ad:5a:27:18:ae:4f:2d:e8:
2f:9a:15:8b:02:27:06:80:f8:9c:6f:76:c0:88:b3:
bb:6b:a5:dd:05:d6:f5:d7:3b:53:a1:f1:10:e3:b4:
30:92:47:81:6f:0c:0c:5d:11:21:17:e7:6a:4c:57:
84:bd:51:91:90:c2:80:02:8d:c7:10:80:b8:a5:66:
63:86:81:23:7b:ae:f7:88:23:03:db:5d:9d:5d:3e:
26:52:81:04:12:76:07:e5:63:4f:4e:1d:c7:99:82:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:AE:04:6D:50:19:4E:92:4E:10:8D:33:32:FF:3A:2A:B7:2E:51
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/L4quBG1QGU6SThCNMzL_Oiq3LlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.218.0/24
Signature Algorithm: sha256WithRSAEncryption
38:97:e2:db:1c:28:98:ec:20:66:a0:54:e9:34:01:df:db:26:
ac:2c:75:12:ba:2f:34:af:51:a0:a6:c5:a4:a5:a7:82:1e:2c:
41:af:3d:b1:d6:88:a1:97:72:e5:e0:b5:e2:fe:88:11:df:5a:
49:a1:31:6e:a1:71:54:62:09:19:4e:ad:e1:0c:a0:0f:dc:2f:
b2:65:0b:4a:39:fb:c8:87:a1:a6:66:3a:9b:10:6a:01:cb:84:
1e:48:17:90:b8:e3:89:5c:4b:76:dc:d4:54:91:aa:1a:0d:94:
c6:f5:e6:6a:62:15:8e:9a:c8:69:55:3e:de:24:d4:1b:95:4f:
55:8a:3a:1f:f3:cb:dd:df:3c:93:6a:c8:1c:12:49:81:b1:50:
47:2a:60:39:71:49:cc:08:b5:a1:93:2e:93:db:87:6d:7e:48:
57:a9:51:86:94:f8:73:2e:d5:f8:6a:3b:49:ad:5c:43:07:20:
56:d8:4d:2d:a5:67:ac:ad:a5:bb:2b:2a:41:79:c7:69:24:de:
64:fa:ac:0e:2d:fc:da:1d:68:4c:66:2b:72:cb:e7:8d:2a:a8:
72:e5:96:6b:43:30:e8:46:07:c9:12:17:a9:00:37:6a:94:71:
78:b3:59:57:a5:0c:c4:8c:24:6b:91:25:ee:aa:70:ef:66:6c:
a2:58:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:40 2026 by rpki-client