This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/xqLMI4n3mv1T0FOyglej7wVFdYE.roa
File: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (raw, json)
Hash identifier: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=
Subject key identifier: C6:A2:CC:23:89:F7:9A:FD:53:D0:53:B2:82:57:A3:EF:05:45:75:81
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 019B7759455EACA8A94E81F332554895CD7E
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/xqLMI4n3mv1T0FOyglej7wVFdYE.roa
Signing time: Thu 01 Jan 2026 02:18:17 +0000
ROA not before: Thu 01 Jan 2026 02:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214279
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:45:5e:ac:a8:a9:4e:81:f3:32:55:48:95:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 02:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6a2cc2389f79afd53d053b28257a3ef05457581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:19:d4:a3:9c:2f:ff:1b:34:45:ae:22:18:
d3:f1:dd:7e:5a:d4:0e:e2:21:37:24:87:be:a9:30:
53:d6:77:b4:11:32:8a:19:94:b4:17:02:0e:ec:a9:
e5:b9:72:50:1c:20:69:e0:da:1d:43:63:32:be:91:
81:7c:b1:e7:f0:ed:25:76:87:ff:86:42:71:9f:71:
50:d6:d5:30:79:b3:c0:0d:a2:e1:62:b9:2e:f2:dd:
f8:1f:0f:5e:e6:36:e7:f0:1c:78:59:38:fa:79:f8:
40:9b:fd:08:47:11:5a:30:7a:5c:f8:91:1d:aa:be:
65:80:f2:96:00:bd:5e:b4:3e:b1:79:00:41:85:f5:
f3:f9:c4:37:ff:c0:b7:fc:a2:77:44:85:36:02:f0:
b4:a4:07:15:94:7c:57:b9:bc:04:f8:96:7a:ba:db:
80:02:d0:f5:81:d1:0e:42:96:4f:0f:29:17:f7:60:
43:94:64:2d:df:78:d1:00:05:2d:5c:2b:c4:60:80:
75:5e:a8:78:78:3d:6d:b6:56:50:d2:6d:64:57:58:
b5:17:e9:72:01:01:99:b2:07:75:5b:81:d5:09:8f:
ab:7d:b3:14:d9:78:37:21:bd:95:7f:84:e4:01:b8:
7d:17:96:44:33:23:dd:2b:53:15:6e:92:e6:d2:f4:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:CC:23:89:F7:9A:FD:53:D0:53:B2:82:57:A3:EF:05:45:75:81
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/xqLMI4n3mv1T0FOyglej7wVFdYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d8:8e:13:5c:f0:2b:db:83:a2:38:de:99:9a:99:ad:84:63:
26:2a:69:62:bb:0b:7a:e1:b0:88:41:99:10:13:fd:86:0a:15:
99:72:b7:ca:3d:e9:b7:e6:13:1d:aa:8f:f1:bb:13:00:8c:9e:
a9:ca:2a:5a:3a:8f:7b:68:e0:86:d7:1f:64:0f:d0:a0:52:d7:
a2:4d:ba:ba:d5:03:2d:9f:48:78:9d:5c:f3:5b:a2:50:ba:34:
b0:19:9e:57:a0:06:9c:8a:7c:ae:3d:fe:ef:20:a1:7f:d2:b0:
fc:78:06:aa:67:33:73:98:ac:84:da:51:19:e7:2d:1d:dc:5b:
0e:be:6d:10:84:35:15:fc:0d:02:96:34:a7:e6:8c:89:e8:31:
e2:53:af:fb:9a:51:bd:65:6c:7a:16:42:e7:2f:81:2e:9e:80:
fc:54:3a:23:47:12:c5:d7:6c:a7:d6:26:3c:bd:65:7f:4f:b3:
30:ca:2d:5f:69:d0:cf:13:d8:61:e0:17:20:67:12:0d:44:a9:
1d:16:1b:5f:6c:d5:17:47:15:04:98:07:b2:5c:28:79:88:ea:
d4:24:1c:62:1f:3c:10:b0:b1:02:54:23:75:67:f7:5b:5f:08:
f1:fb:f9:6c:f2:35:0f:4e:6c:91:f6:00:6b:49:5d:0e:4c:db:
89:c5:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:04 2026 by rpki-client