This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/d0nUCyy8HLeWP-PCCXeY0G5DHew.roa
File: d0nUCyy8HLeWP-PCCXeY0G5DHew.roa (raw, json)
Hash identifier: j33DDEUgls9Qo7DMMSTZC6ONvqVPRISMZMWPrGVz7XI=
Subject key identifier: 77:49:D4:0B:2C:BC:1C:B7:96:3F:E3:C2:09:77:98:D0:6E:43:1D:EC
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019B7C1180A42079A83F6B2692AA04FBBF58
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/d0nUCyy8HLeWP-PCCXeY0G5DHew.roa
Signing time: Fri 02 Jan 2026 00:18:00 +0000
ROA not before: Fri 02 Jan 2026 00:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200195
IP address blocks: 46.151.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:80:a4:20:79:a8:3f:6b:26:92:aa:04:fb:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 00:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7749d40b2cbc1cb7963fe3c2097798d06e431dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:d3:10:79:08:95:26:cf:35:cf:ba:dc:da:
69:15:01:e9:3f:fc:ee:ed:97:97:dc:0d:27:7b:6c:
05:cf:44:a0:1f:5e:db:ec:b8:0f:85:7c:97:c4:07:
69:d7:ba:e8:0a:67:ca:89:b2:70:de:98:a7:2b:f7:
52:09:29:36:a7:18:76:3e:bd:06:55:70:f5:5e:bd:
55:ba:af:0a:4d:6c:ca:3b:9d:61:b3:59:aa:d2:70:
47:ed:7d:cc:be:1d:50:c5:65:6d:27:2c:d3:85:eb:
2d:7d:ba:71:e1:c2:2b:0d:38:85:f7:e8:6c:f3:8c:
0a:d1:4b:99:a2:11:36:01:8c:b8:ef:bf:38:6f:51:
19:0b:28:cd:17:2b:66:ac:42:13:46:91:1c:12:4e:
c1:81:9b:b6:64:26:bc:25:a9:16:ef:8e:16:e8:d2:
cb:6f:b0:00:87:dc:0f:ef:a9:66:9f:d3:68:e3:fa:
cb:92:d4:ab:5d:6e:2f:b7:e0:1a:cf:b3:ce:0d:ea:
6c:5f:fe:42:ea:44:f1:28:60:13:e9:cd:23:08:2c:
c0:d4:ec:66:38:60:7d:14:43:f7:65:25:11:ea:37:
35:ec:89:5a:21:2d:64:87:8f:cd:e7:f8:02:39:e9:
4c:2d:6e:e7:d5:4a:2d:0f:b7:df:ae:4d:d3:c5:09:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:49:D4:0B:2C:BC:1C:B7:96:3F:E3:C2:09:77:98:D0:6E:43:1D:EC
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/d0nUCyy8HLeWP-PCCXeY0G5DHew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.181.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5c:77:6f:b1:75:ac:e8:6b:f4:99:72:2e:f2:17:a9:08:a7:
70:21:4b:31:b9:4d:06:b2:02:c8:b0:9d:a8:d7:c8:7c:86:6a:
af:b5:1e:78:eb:b1:95:57:37:77:71:f1:db:94:ff:90:ab:72:
e3:29:94:51:47:85:72:fe:8d:fd:71:41:25:3e:74:6b:1b:17:
14:d6:10:0f:29:9c:84:8b:b1:48:4b:8c:5f:25:ee:b7:42:49:
17:81:0c:e8:d2:d4:02:93:c1:e7:39:cc:93:e7:8b:52:af:b6:
3f:f6:69:d5:30:c7:28:e9:d8:49:7b:32:af:bf:24:7c:98:3f:
38:57:ef:65:1b:7b:b6:b4:f2:6e:00:41:3c:f9:bd:07:87:0c:
b3:3f:65:4a:dd:e9:f6:6d:6a:8e:23:b5:6c:f2:31:4b:87:68:
31:5f:25:d0:08:82:60:46:a9:87:ac:83:6e:d6:02:3a:31:f8:
9e:4f:e3:1c:70:09:de:94:f6:4b:45:e8:66:53:9b:5f:79:43:
53:4b:30:8c:60:c5:e1:30:77:92:55:62:1e:f2:d6:f1:be:85:
82:e7:e7:72:c4:50:b6:e5:4f:5e:3e:69:4f:c0:5a:06:f7:63:
63:65:98:f4:2d:51:ba:ea:98:8a:c2:eb:94:ed:9d:52:f6:ee:
6d:06:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:17:23 2026 by rpki-client