This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DXxFsnXwwNOGBcXslTr_wxOHW5U.roa
File: DXxFsnXwwNOGBcXslTr_wxOHW5U.roa (raw, json)
Hash identifier: WbVnLGOKZKrDUXnOGjZKmIubU2SC7h17bYnLNJHVzpE=
Subject key identifier: 0D:7C:45:B2:75:F0:C0:D3:86:05:C5:EC:95:3A:FF:C3:13:87:5B:95
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019B7D5D26E6A7CFCCAE5B79F8CD38A7454D
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DXxFsnXwwNOGBcXslTr_wxOHW5U.roa
Signing time: Fri 02 Jan 2026 06:20:15 +0000
ROA not before: Fri 02 Jan 2026 06:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214275
IP address blocks: 46.107.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:26:e6:a7:cf:cc:ae:5b:79:f8:cd:38:a7:45:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 06:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7c45b275f0c0d38605c5ec953affc313875b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:c6:be:f7:c7:ce:6e:0d:af:47:50:f6:6b:
e6:71:ea:66:b2:c3:04:11:95:84:fc:7e:26:af:98:
b9:c0:2a:67:04:59:a7:75:8a:9f:b4:b5:47:e1:e7:
55:dd:10:11:41:19:cd:3a:57:df:63:bb:4c:eb:83:
b0:43:34:5a:82:d2:b7:8f:ad:f4:94:e0:51:33:6d:
e2:aa:6f:af:b4:14:d2:37:ba:c2:6f:ad:8b:72:26:
a6:a2:d2:4e:bf:53:25:9b:62:8d:f3:0b:9a:74:b6:
f6:7d:78:20:43:12:34:54:48:d0:e2:3e:92:08:5c:
f6:5e:1c:de:57:ff:1b:fb:71:4c:f8:33:c4:fd:57:
12:db:ec:55:d0:6a:3b:62:0f:dc:df:6d:60:0c:08:
c0:3d:83:3a:b5:c5:d0:32:43:2f:21:41:be:e1:c2:
57:69:74:0e:d0:10:3d:92:0f:73:16:59:6c:9c:d5:
a9:0c:53:f1:98:5c:c3:be:f3:a5:8f:69:82:17:31:
fe:8b:63:3a:22:67:dd:22:a2:6f:a1:1d:dc:4d:de:
05:f1:b4:7a:73:ed:93:59:68:32:61:21:5f:7f:73:
c9:c6:91:63:47:98:4d:f0:a0:4f:e4:f2:ef:46:5b:
67:46:a0:2a:29:e6:28:18:4e:98:a5:18:f3:8c:7c:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7C:45:B2:75:F0:C0:D3:86:05:C5:EC:95:3A:FF:C3:13:87:5B:95
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DXxFsnXwwNOGBcXslTr_wxOHW5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c6:00:4d:c2:46:44:16:95:fc:62:ac:a0:8c:37:49:f6:bf:
ae:2a:7e:15:79:ed:d1:de:06:66:bb:25:0b:63:c1:aa:fd:d3:
5b:43:c4:f3:be:d2:8c:90:25:1a:24:12:cf:e0:1a:1f:e5:74:
8e:5f:ef:31:85:ba:52:e0:2e:c3:43:6c:2a:92:83:8d:7c:30:
30:82:5c:14:ae:e7:42:d7:27:a5:27:24:ad:98:1e:69:70:8e:
79:31:df:05:27:e5:22:b2:9c:79:64:aa:99:e6:ee:f8:70:dd:
03:20:da:bd:35:2a:a9:fa:25:a1:7b:13:03:d5:fd:85:30:f9:
69:ab:82:00:3b:9c:5d:25:12:c7:23:55:4d:eb:e2:bc:e8:d9:
6c:4d:ee:13:ef:aa:d5:3b:17:d9:bf:0c:6a:7f:2e:b7:79:63:
35:4b:9b:53:68:ee:af:30:00:5f:e7:b5:fe:68:b3:cd:19:fd:
c8:54:7d:4f:09:e2:c7:80:07:c7:7e:9c:f5:3f:00:e4:f0:92:
35:9a:38:5b:5a:8c:bf:dd:4c:51:0c:2b:70:02:61:52:9a:5f:
70:07:d5:f1:e5:f0:f7:4b:d5:05:74:a8:5f:f3:d8:c1:19:12:
50:59:9d:bf:33:aa:76:53:7c:0d:c9:f6:de:20:0b:60:0b:8f:
02:1c:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:44 2026 by rpki-client