This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa
File: Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (raw, json)
Hash identifier: GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=
Subject key identifier: 46:B9:B7:A1:F0:9C:D0:B4:40:0E:41:6F:BF:9C:F6:9C:B5:35:2D:CE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019B791083ADB5435D9740C402E2388171F4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa
Signing time: Thu 01 Jan 2026 10:18:04 +0000
ROA not before: Thu 01 Jan 2026 10:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203114
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:83:ad:b5:43:5d:97:40:c4:02:e2:38:81:71:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 10:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46b9b7a1f09cd0b4400e416fbf9cf69cb5352dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:f0:b7:1b:48:ca:d6:22:06:bf:0d:c3:65:
66:a0:0d:14:b1:15:6c:6d:ec:7e:77:bd:1c:0c:b7:
aa:f6:d1:58:ba:87:d3:dd:95:89:e6:2a:59:05:79:
18:c1:c5:6b:6a:09:41:55:b5:cd:fe:d3:d3:b3:55:
ee:2b:03:e9:62:20:06:9f:8f:64:cd:dc:e9:55:5a:
43:e9:69:0d:6f:ac:00:56:ad:2c:b4:9e:63:ee:89:
bf:13:d0:bd:ea:2c:ef:6e:1d:6c:46:b7:3e:15:70:
3a:49:95:d0:1e:39:d9:22:02:92:25:2d:77:ef:3d:
14:7d:b9:91:c3:81:7d:53:f6:f3:f6:0e:16:ad:95:
16:67:13:76:8c:94:dd:f7:2a:dd:91:0e:50:cf:4a:
9d:51:54:f1:e1:f5:47:14:d8:0d:00:10:40:0f:11:
0b:6d:c7:4c:02:24:d4:d1:48:75:e5:a2:73:dd:71:
f9:cb:58:7d:72:5d:07:0c:62:39:5b:f3:fd:0c:16:
30:94:03:ca:1c:9c:5b:32:40:8c:59:12:4d:88:dd:
5c:92:32:3b:49:14:63:ba:d9:e1:91:46:cf:09:d8:
31:50:14:9e:e9:a3:8e:44:4c:8c:fe:e0:9c:4b:03:
a8:05:b1:16:69:1a:ba:dd:51:6a:a5:c2:66:b8:e7:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:B7:A1:F0:9C:D0:B4:40:0E:41:6F:BF:9C:F6:9C:B5:35:2D:CE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9a:9e:f7:a7:83:33:d1:af:6f:de:71:bf:d7:5f:81:b0:d9:
67:17:4f:8c:8c:19:f0:b8:22:ee:cd:f2:dc:3d:62:aa:12:23:
41:18:f1:65:08:f3:55:e3:19:e1:7f:be:48:b6:d9:b0:3f:a5:
44:78:20:3e:b4:c8:a3:bd:fd:74:65:8e:3f:ce:f7:8b:49:08:
ed:4a:cc:05:d2:f6:72:e6:3b:7f:bf:fc:b4:dd:f5:90:3d:0c:
d3:eb:f7:e9:98:eb:40:a0:bc:5d:fd:a8:3b:27:29:c3:75:34:
32:1e:60:f4:d8:d6:67:1f:e8:cd:c5:cd:bb:04:50:68:da:0e:
dd:3c:67:75:02:d6:b9:bc:59:fe:50:16:8a:76:ee:5f:1f:51:
9d:34:9b:cf:3d:94:a9:34:78:36:4a:d5:8f:1d:a9:3a:21:02:
4d:fa:81:fe:7d:a5:cd:07:e3:60:14:f6:05:33:cc:0b:e0:31:
33:52:72:ec:97:8e:16:14:54:79:36:0b:54:d6:75:eb:6f:7b:
a6:b6:3b:f5:6d:f5:a7:e0:35:dc:37:2c:5e:32:03:e6:d4:96:
2e:60:b2:fa:31:62:1b:6e:3e:c8:a1:1d:3e:7f:02:55:03:b6:
98:51:7d:91:a2:bd:10:0e:e2:c2:89:ad:2c:d3:b0:8f:54:26:
8c:8d:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:57 2026 by rpki-client