This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/fHIbUXJ3rD_afDUuW7bvGqQS8No.roa
File: fHIbUXJ3rD_afDUuW7bvGqQS8No.roa (raw, json)
Hash identifier: Yby7itCujVRNXmIlVSEQ+hFevmdlv8cBYO5F1K3cxJs=
Subject key identifier: 7C:72:1B:51:72:77:AC:3F:DA:7C:35:2E:5B:B6:EF:1A:A4:12:F0:DA
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 019A7C2C6D16B7E6A9A67D2F9C34D4CA6BE8
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/fHIbUXJ3rD_afDUuW7bvGqQS8No.roa
Signing time: Thu 13 Nov 2025 07:44:37 +0000
ROA not before: Thu 13 Nov 2025 07:44:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207190
IP address blocks: 45.141.68.0/22 maxlen: 22
45.141.68.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
45.141.70.0/24 maxlen: 24
45.141.71.0/24 maxlen: 24
103.145.86.0/23 maxlen: 23
178.236.40.0/21 maxlen: 21
178.236.40.0/23 maxlen: 23
178.236.40.0/24 maxlen: 24
178.236.41.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.42.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.44.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7c:2c:6d:16:b7:e6:a9:a6:7d:2f:9c:34:d4:ca:6b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Nov 13 07:44:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c721b517277ac3fda7c352e5bb6ef1aa412f0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:be:9c:7f:81:c7:b9:e4:2e:cd:dd:55:88:
5f:76:71:a2:01:97:7b:4f:75:fc:e5:9f:45:2e:20:
d8:d8:84:4b:e1:88:67:8f:c5:71:71:96:c1:2d:c4:
12:30:eb:58:fb:0b:f9:02:94:59:35:68:4c:fd:fc:
d0:c1:39:39:82:03:ca:a1:07:ba:18:fb:e9:1f:9f:
41:dd:35:a5:7c:e6:78:be:60:fa:f8:8c:b1:d0:39:
89:d5:ca:87:f6:4f:bc:f4:f5:8d:b0:04:c3:55:5d:
70:8c:29:df:f6:f2:b8:6c:60:e5:65:ef:c4:d9:78:
da:9b:5d:0d:0a:df:2b:25:63:06:8d:8d:ce:91:9c:
1f:6b:a1:c5:ab:80:5e:c4:6c:b4:84:38:64:4f:9e:
66:1f:5e:e9:99:74:7a:f0:30:0f:f0:5e:74:1e:0c:
9c:30:e2:70:48:c5:56:3b:e9:b5:76:39:00:83:23:
50:30:81:3f:44:5b:d5:09:28:76:85:83:51:c5:ba:
20:55:7a:1e:f1:33:f0:0a:de:2e:cb:f8:14:86:f9:
fc:e4:d2:97:28:e1:b3:6a:47:78:a1:c1:de:fe:dd:
f8:4f:33:4c:a7:3e:5b:02:77:79:f3:24:9e:10:f7:
90:fd:16:3a:b1:54:8e:4a:69:62:d5:5a:22:d5:99:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:1B:51:72:77:AC:3F:DA:7C:35:2E:5B:B6:EF:1A:A4:12:F0:DA
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/fHIbUXJ3rD_afDUuW7bvGqQS8No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
103.145.86.0/23
178.236.40.0/21
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
28:09:04:eb:4d:71:c4:cf:ea:58:8a:65:94:66:81:f4:a8:c9:
48:bb:de:7c:4c:f5:ae:1c:f9:2b:13:fb:6c:13:1c:f2:98:b3:
73:8b:ec:52:9a:59:a3:68:a9:27:0d:63:1c:c5:f9:09:bd:c0:
9b:cd:b9:c8:e7:26:e2:38:be:f6:fb:ef:61:56:52:bd:69:34:
9c:e5:c0:62:65:ba:41:4c:c6:b1:2c:3d:dc:3b:69:6f:69:dd:
9d:44:2b:51:c3:62:ff:69:ab:84:7c:0b:1e:e8:9e:4d:29:a4:
bc:43:e0:fe:c7:e8:7d:df:a0:3e:32:65:48:e1:ed:e1:e0:10:
1d:34:96:ed:ff:92:28:54:99:88:91:88:32:ba:a1:fc:90:37:
e2:9e:e2:61:47:0a:2e:22:c3:3e:07:c2:15:e2:97:12:fb:fb:
c5:29:35:a6:71:eb:2d:ab:d7:63:71:93:42:3a:1e:95:fd:22:
7a:35:0d:8d:9a:7a:71:f3:96:8d:15:10:20:3f:60:43:ef:d9:
bd:49:3c:f2:65:96:78:66:7b:87:06:fb:d6:7e:32:6f:5a:b4:
24:af:88:53:32:de:83:83:8e:d2:82:89:f6:49:e0:91:56:92:
be:ab:36:73:9d:8a:20:68:7c:e7:98:3b:bd:54:e1:70:47:7d:
33:89:b5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:42:47 2025 by rpki-client