This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa
File: koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa (raw, json)
Hash identifier: vHwbWKarLLDrFkXHBPDr+Eb8BnaoGU6cB871++he+oc=
Subject key identifier: 92:84:BC:E6:41:19:8B:45:6B:27:69:41:4D:68:09:EE:AF:1B:7D:C2
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019B7C11873EA188D07AE62C619E8C76A3C3
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa
Signing time: Fri 02 Jan 2026 00:18:02 +0000
ROA not before: Fri 02 Jan 2026 00:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212372
IP address blocks: 45.83.0.0/23 maxlen: 23
45.83.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:87:3e:a1:88:d0:7a:e6:2c:61:9e:8c:76:a3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jan 2 00:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9284bce641198b456b2769414d6809eeaf1b7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:7c:22:59:59:0a:1c:8d:fe:c6:f4:e8:6f:
d7:55:a1:c1:f6:d0:5c:e7:e5:56:c6:c6:91:e6:98:
53:3d:5d:21:b9:66:b7:17:e3:b6:45:5d:80:81:2e:
8c:c0:2c:cb:b6:1b:0e:33:fa:59:d1:a1:4a:99:9e:
68:ca:ff:ba:1f:63:da:c5:e6:f2:0a:c3:2d:25:09:
d2:76:68:5a:6d:46:c6:f6:87:84:c3:ee:12:8f:04:
d9:83:f2:91:08:a8:28:a5:7f:68:3d:53:08:05:e6:
3b:0c:f2:a0:bf:51:e4:9a:12:68:9d:10:b1:5a:d2:
e1:18:d0:14:d5:b7:7c:11:55:ea:14:10:0b:91:45:
2b:24:e6:79:8b:6f:c7:d3:6a:3e:51:95:12:32:10:
37:cc:e6:99:8b:56:b2:3a:e5:71:21:36:2d:fb:db:
77:eb:09:ef:f8:89:cb:ef:bb:dc:27:d3:2e:fd:7f:
55:77:b8:cb:96:de:b6:b6:62:5a:27:fa:b2:46:00:
cc:ce:5d:4a:df:20:45:a9:bb:23:a0:15:07:dc:99:
a6:7b:74:28:74:99:21:cf:06:fc:88:ea:b9:d6:97:
e1:53:c5:fd:03:f3:70:3d:d3:f1:d1:5b:b8:f2:46:
ef:5a:05:cc:63:7c:47:f6:ed:94:0e:ec:6d:46:2d:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:84:BC:E6:41:19:8B:45:6B:27:69:41:4D:68:09:EE:AF:1B:7D:C2
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:0e:d3:f1:e5:75:cc:c5:58:42:8e:6f:de:34:b0:d2:59:7b:
a4:e2:9b:7e:24:4a:44:05:89:32:89:06:d8:04:b3:fb:a0:48:
f9:d2:ec:0d:14:96:c1:cb:1b:6f:59:b1:ba:19:7a:bb:3f:d4:
71:4b:8b:fa:b3:88:4c:f1:de:50:75:9e:46:12:51:5c:eb:d3:
48:c4:a2:0d:ac:b8:71:ff:54:c1:15:64:18:82:de:aa:54:32:
1f:37:a0:cd:e6:59:63:39:75:51:e0:8d:e4:d0:fc:e4:c6:d1:
c6:1d:83:da:c6:c8:ba:f1:13:9a:38:c8:7d:d1:57:85:d5:3b:
d3:a1:6c:5c:c4:f5:10:1a:bc:de:e8:a7:23:0c:d0:19:9b:2a:
ab:28:b6:56:87:94:e4:da:9c:ea:fe:e4:14:e3:6e:1b:1f:01:
bc:55:b7:83:67:41:ce:16:f7:82:cb:c9:9f:28:fe:c7:e4:a0:
b5:f9:6d:0b:c3:55:1e:14:c5:06:45:5a:44:61:dc:67:73:ae:
a0:a7:bb:be:5f:00:35:2e:c1:85:d0:0d:17:d9:47:3a:b3:56:
cc:29:63:5f:7c:c9:c4:3e:dd:06:a5:4b:5d:28:00:fb:7e:f1:
82:2e:5f:6e:49:d2:2a:a4:83:b1:16:96:03:8a:c5:24:ef:cc:
9c:02:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:37:56 2026 by rpki-client