This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa
File: haTrs_5tpUyACklPcJ9fH1LslHE.roa (raw, json)
Hash identifier: PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=
Subject key identifier: 85:A4:EB:B3:FE:6D:A5:4C:80:0A:49:4F:70:9F:5F:1F:52:EC:94:71
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019B7CECD5DABFDE351B66097D4605E808B2
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa
Signing time: Fri 02 Jan 2026 04:17:34 +0000
ROA not before: Fri 02 Jan 2026 04:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 146.19.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ec:d5:da:bf:de:35:1b:66:09:7d:46:05:e8:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 04:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85a4ebb3fe6da54c800a494f709f5f1f52ec9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:3d:98:73:ce:4a:a9:08:b3:da:01:3e:4b:
13:c8:9e:48:cf:71:2e:e9:5a:71:9f:03:ca:ee:98:
61:2a:9f:b5:47:fc:f9:c7:05:37:14:63:ee:ca:b6:
45:73:ed:68:b4:14:44:a0:d1:56:09:03:e3:ec:97:
67:f7:2c:a4:09:dc:6f:7d:5b:c5:3c:cd:38:44:bf:
ea:2f:11:c1:a4:72:35:3f:52:45:e9:55:0c:65:6d:
41:e9:9c:7b:c3:9f:bb:20:29:27:50:d8:ff:4b:fb:
55:bb:88:71:6a:b0:2e:bf:79:28:63:45:cf:56:dc:
f5:d3:57:a0:f2:f8:d8:96:b9:92:d3:9e:b7:c9:e8:
14:06:f2:17:19:6a:2f:a8:4d:5f:0f:5b:51:44:71:
b3:da:92:e3:7e:fd:76:2b:b6:e4:74:d8:2d:46:d4:
9d:0f:fd:79:f9:f7:db:55:c4:29:96:83:11:e8:08:
1b:af:ab:fb:41:cb:b4:9c:23:12:9e:1e:a8:4f:48:
0b:4e:f9:20:00:5d:76:3d:17:c6:66:a8:e2:af:47:
54:d1:be:e3:88:29:bf:2c:93:b3:9e:7a:6c:e1:4d:
d2:ef:82:b0:2f:2a:21:97:90:bc:17:09:4f:d1:6e:
76:53:14:9b:44:19:d7:36:f8:d4:c4:83:b2:0a:74:
f5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:EB:B3:FE:6D:A5:4C:80:0A:49:4F:70:9F:5F:1F:52:EC:94:71
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6a:b6:8d:41:5d:73:27:58:ce:94:df:fd:48:7f:31:62:58:
0c:8a:ad:66:5e:66:05:75:5e:a4:42:fd:65:ce:c3:c4:b8:63:
92:70:07:7d:36:76:99:15:8b:aa:a1:7e:18:bd:fc:f9:17:8a:
4f:2d:49:08:bb:54:f5:07:89:46:8f:05:e4:e7:d4:88:cf:8e:
d0:a1:79:34:98:a2:04:88:8b:ab:a0:16:3b:cc:0c:4c:b2:57:
dd:1a:87:a1:56:39:34:c3:59:ab:7d:29:7b:5a:aa:b5:d8:10:
f7:50:2e:91:c5:27:f5:f4:f5:7b:e1:85:2c:c5:0b:00:4d:c2:
34:fc:8a:9f:3f:85:9a:de:bc:7a:8a:82:c0:e6:37:ca:4e:52:
04:e6:67:5a:ca:d1:12:f8:5f:2a:f3:8f:24:b7:1c:e2:27:06:
a5:c3:3f:22:27:37:69:92:4c:24:a1:d8:2b:6c:28:29:29:90:
28:7e:50:90:67:21:75:84:67:69:48:45:db:da:cc:d0:3f:f8:
7a:12:8d:d9:89:93:98:a3:7c:fa:e4:5c:ce:d9:ec:08:e7:fd:
b1:d1:82:66:f6:d2:52:d8:92:63:c3:d8:58:ee:e4:76:fb:8c:
f6:27:be:53:2d:77:d1:20:a1:f5:34:00:4b:31:de:c3:e8:81:
41:fe:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:46 2026 by rpki-client