This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ExQa4_rJNaEHp9KaigvNnKDL6eU.roa
File: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (raw, json)
Hash identifier: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=
Subject key identifier: 13:14:1A:E3:FA:C9:35:A1:07:A7:D2:9A:8A:0B:CD:9C:A0:CB:E9:E5
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019B76EAEC6C5999CA17A90AD2143FB2E954
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ExQa4_rJNaEHp9KaigvNnKDL6eU.roa
Signing time: Thu 01 Jan 2026 00:17:45 +0000
ROA not before: Thu 01 Jan 2026 00:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 329272
IP address blocks: 45.150.188.0/22 maxlen: 24
185.240.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:ec:6c:59:99:ca:17:a9:0a:d2:14:3f:b2:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 00:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13141ae3fac935a107a7d29a8a0bcd9ca0cbe9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:6d:81:26:9a:46:43:2b:cf:e9:83:5e:29:
03:ea:7e:e0:20:a4:94:84:44:d6:59:02:58:ae:fa:
28:6a:44:da:20:96:f3:87:66:60:29:29:8e:89:95:
b7:10:69:11:38:b7:73:f9:ff:ac:45:6e:a3:2b:b4:
7f:d4:a8:2f:da:44:8e:20:36:c5:46:10:59:e6:2e:
45:15:82:c2:90:55:23:75:5b:94:05:71:02:20:51:
e1:47:f8:a3:06:8a:e5:1a:e4:1d:80:8b:47:26:b0:
ed:0e:12:32:32:de:6d:cd:dd:bd:9a:eb:1b:15:b0:
8f:86:81:aa:3d:72:84:0e:11:ea:97:1d:92:80:fe:
6a:52:70:3d:e8:e7:58:b0:9b:af:f6:04:d5:96:38:
58:df:ac:c8:03:03:2b:9e:b9:93:58:90:b0:99:bb:
9e:5c:e9:06:60:b6:0f:ce:08:ec:e0:99:37:43:c5:
f3:bb:3c:62:5c:d4:cb:34:88:50:bb:aa:18:72:23:
a1:b6:71:56:91:be:13:6b:bb:00:db:91:eb:cb:be:
90:4c:64:51:96:33:b7:20:18:77:ef:10:bb:50:de:
75:6a:1f:c1:32:04:33:59:2d:db:ff:44:df:0a:a6:
41:7e:42:6c:fb:6e:9b:6d:53:0d:79:98:d5:f1:c3:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:1A:E3:FA:C9:35:A1:07:A7:D2:9A:8A:0B:CD:9C:A0:CB:E9:E5
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ExQa4_rJNaEHp9KaigvNnKDL6eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
185.240.48.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c2:8f:b7:f3:bd:44:01:49:fc:39:31:4f:92:f8:f3:2e:10:
d3:8a:b5:fc:ae:d5:d7:c8:1c:48:89:f5:88:06:22:53:c5:85:
e5:4b:2a:f4:51:f1:8b:75:d7:45:2e:ad:9c:9b:ff:0f:04:97:
0f:24:2f:f2:d0:48:df:82:51:f9:5d:3c:b6:29:d4:bd:07:af:
f4:6b:af:19:e5:93:39:0b:42:4c:e0:c8:0a:a6:ff:ae:73:60:
b9:9d:82:da:3a:03:45:e4:18:81:65:89:04:cc:87:e3:b5:46:
c0:b2:48:59:63:d5:9f:83:83:8b:02:d5:db:ef:5d:7f:10:6b:
01:9a:e0:73:2d:df:c6:94:34:a4:bf:23:a1:7a:5f:48:58:48:
51:66:60:7c:f8:94:46:0b:13:17:ee:1a:04:b8:74:55:c6:d4:
0a:0f:90:be:6b:6c:2c:6f:e0:a0:3b:58:55:85:79:5d:e2:94:
1b:aa:27:20:c5:2b:7b:f9:ca:44:77:98:cd:a8:23:41:60:4e:
bb:4a:6c:8e:cf:82:20:01:eb:54:4a:e1:ad:83:26:e9:62:e7:
6e:e2:1e:45:81:e6:96:ec:50:e0:7a:87:36:16:9f:62:1a:ba:
4b:b8:11:99:44:a3:a6:33:f7:2c:1c:b7:28:ca:86:44:99:e1:
6a:cf:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:58:32 2026 by rpki-client