This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/RLTHCNVsHHa59u_OLOD-BY98XIM.roa
File: RLTHCNVsHHa59u_OLOD-BY98XIM.roa (raw, json)
Hash identifier: /4P5/TVl7dn9mtDrJhCSmSp/VCxhHR3xnDXrEVq8GTk=
Subject key identifier: 44:B4:C7:08:D5:6C:1C:76:B9:F6:EF:CE:2C:E0:FE:05:8F:7C:5C:83
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 019B79107E2CC70CDABA8994FA0CEE7CA72C
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/RLTHCNVsHHa59u_OLOD-BY98XIM.roa
Signing time: Thu 01 Jan 2026 10:18:02 +0000
ROA not before: Thu 01 Jan 2026 10:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212942
IP address blocks: 176.105.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:7e:2c:c7:0c:da:ba:89:94:fa:0c:ee:7c:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 10:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44b4c708d56c1c76b9f6efce2ce0fe058f7c5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:4e:f9:19:29:19:42:52:4b:c1:1b:37:1b:
f7:59:27:34:7b:79:b6:c0:4c:2a:af:5b:b8:31:fa:
3d:16:c2:97:fb:da:0b:f6:23:d0:d1:04:9b:4a:b4:
3d:2b:30:33:7d:2a:90:14:e9:ec:ea:26:f0:be:3d:
16:37:61:e1:a0:4c:cc:26:81:d9:ef:45:ad:67:3f:
bc:02:d2:ca:f4:51:c8:f1:b4:c5:cf:72:23:e4:00:
52:fa:6f:ee:d6:69:37:eb:19:0f:c0:95:5c:95:87:
28:14:8d:0d:e8:8d:e2:74:18:7a:cd:34:51:27:8d:
75:b0:a6:8a:16:3d:92:b9:37:9c:a5:89:4d:81:c7:
d0:23:f5:89:a8:32:d2:4b:a7:fc:7f:3e:4b:a4:29:
99:bf:00:3b:97:aa:a0:e2:fd:3a:75:2c:4b:01:91:
2d:50:db:b9:72:aa:94:c4:52:ff:21:06:f6:e7:66:
4a:9b:22:a1:d4:02:d0:5c:52:ab:08:97:8c:2e:19:
80:8e:7b:ea:b3:7e:94:5e:98:31:fd:a6:c0:34:91:
01:16:3e:ed:c7:6a:5f:32:27:4f:6a:d1:ab:bc:6b:
ae:73:a4:bc:6c:7f:23:95:99:87:d6:2d:33:53:72:
27:7b:ab:ae:11:5b:fb:89:9c:a1:71:8f:ba:12:ba:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:C7:08:D5:6C:1C:76:B9:F6:EF:CE:2C:E0:FE:05:8F:7C:5C:83
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/RLTHCNVsHHa59u_OLOD-BY98XIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.167.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c2:03:2e:eb:41:65:c1:2d:2a:d7:bc:fb:76:5f:46:72:3b:
1c:67:55:6b:28:d3:60:31:8d:8e:37:75:00:52:32:90:74:50:
2c:ff:19:25:8e:c0:54:af:6e:3f:9b:56:ca:a7:77:b3:99:cc:
da:8b:d1:c0:a8:e4:1d:47:24:04:52:a1:c3:6e:30:71:b1:b6:
8b:f5:6e:e3:b0:d4:66:fd:1a:94:f0:d4:c0:3c:aa:64:e8:3c:
ae:78:70:fd:d6:1f:28:d9:e0:7e:22:cf:64:5e:20:55:82:83:
23:d1:79:85:cc:50:03:ce:ee:24:e7:7d:4e:ac:f0:fa:5b:63:
20:17:4d:da:64:cf:8c:7f:a0:d0:97:51:37:0d:7d:af:13:8e:
40:06:07:b1:80:85:5d:13:46:bd:3f:5d:d9:1a:b2:0c:9a:1a:
c1:47:c6:0a:e1:78:09:6f:24:96:77:6d:c6:03:2f:97:74:dc:
ed:84:a6:a7:77:6a:1d:b4:c8:6a:f2:54:a6:0e:55:00:0b:4a:
1c:c9:bb:89:13:bd:6b:47:5d:2c:e3:92:a4:31:25:96:3b:14:
54:b5:5e:45:fb:87:b7:19:ce:39:06:71:ec:ac:c1:09:0a:5d:
d8:31:8e:73:f7:b8:eb:e5:d7:bf:b6:a5:df:ab:e9:6d:22:57:
78:cd:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:16 2026 by rpki-client