This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa
File: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (raw, json)
Hash identifier: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=
Subject key identifier: 9C:6C:F3:24:BE:18:BF:F6:90:39:B1:10:50:72:6D:6D:89:C2:89:54
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 019B7EA547DE3CFA420AA26833CD51AAAC41
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa
Signing time: Fri 02 Jan 2026 12:18:39 +0000
ROA not before: Fri 02 Jan 2026 12:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268581
IP address blocks: 45.140.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:47:de:3c:fa:42:0a:a2:68:33:cd:51:aa:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 12:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c6cf324be18bff69039b11050726d6d89c28954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:f8:b2:be:dc:57:37:d4:a7:b2:91:92:52:
7b:2c:55:9e:3f:ae:12:6c:44:b1:e4:3c:36:30:ce:
e6:12:90:b6:16:29:7c:54:e0:f2:b3:af:db:a2:d9:
ed:6a:b0:bf:f1:58:e1:0e:11:40:b6:1d:2d:6f:cc:
08:bb:7b:04:20:b8:50:7e:83:97:c5:46:90:c8:ee:
ce:52:d5:ec:5b:96:20:86:4f:56:6a:8e:1a:71:0a:
16:48:e9:73:95:e5:1b:ed:70:cc:21:7d:e4:0c:e8:
8a:dd:20:29:cf:92:01:be:93:c3:98:2b:4e:ab:d4:
25:c6:d6:ae:d5:8e:9e:2a:ae:ff:c0:5b:33:a5:5e:
d4:48:86:95:b3:3a:02:d7:a5:96:ca:00:dc:11:2d:
91:3d:48:78:9a:84:57:a8:60:e5:89:ce:7e:81:04:
26:9a:78:bf:b5:0f:8e:74:e9:40:ac:22:91:a5:f6:
91:de:c3:97:9b:ef:63:5a:a9:37:78:ff:b7:45:e4:
a7:25:93:00:74:ab:2f:42:e0:1a:c0:34:ff:5a:5a:
d7:37:a0:22:90:1d:28:c2:75:1e:8e:1d:95:99:72:
f9:fe:65:ac:c2:c9:a8:3e:b5:ee:09:b1:72:ef:82:
43:31:cd:79:69:99:38:ed:ee:37:86:d6:b7:09:da:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:F3:24:BE:18:BF:F6:90:39:B1:10:50:72:6D:6D:89:C2:89:54
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.192.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:c2:65:1f:90:40:5a:70:68:c9:5d:b0:36:b2:7f:70:12:b0:
24:19:08:68:43:9d:4b:f3:c8:6e:93:c0:e5:c3:8c:29:4d:50:
ed:8a:10:e1:3f:95:af:55:9f:89:c7:ae:2c:8d:38:97:a1:35:
b9:2f:f3:7f:70:98:b1:a2:05:9a:d8:66:57:44:ae:12:66:aa:
37:59:8b:6f:09:69:db:0c:7e:70:a5:32:a1:e4:16:6f:b3:62:
32:1d:0a:71:b6:fc:32:f3:4f:19:56:af:c5:de:b7:72:c8:fd:
0e:99:25:87:bd:27:7b:5f:6d:13:0a:c6:55:86:d7:50:f8:e6:
06:1c:03:00:a5:aa:53:35:23:8b:43:ce:22:5f:77:a5:1c:22:
2d:01:35:03:5c:17:71:bd:9d:fd:6f:48:43:cb:a2:87:b7:43:
d2:7b:1c:4a:18:89:b3:81:64:29:43:ee:38:a1:b1:e8:cb:e0:
b8:13:82:1e:d1:f0:7d:f9:e2:93:14:3f:5e:b7:4f:a7:96:ac:
e9:55:60:73:f8:63:b2:b9:63:e4:e3:c3:e6:fe:8e:dc:2f:56:
37:07:a6:63:95:52:e0:d6:92:05:9a:af:c8:65:06:57:4d:62:
c1:92:3c:68:a9:1c:8f:f4:d5:13:78:0e:31:32:fb:15:2f:f4:
ba:b3:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:23 2026 by rpki-client