This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/_1gDjO3zyeb5ku_j0UHNCnoUFl4.roa
File: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (raw, json)
Hash identifier: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=
Subject key identifier: FF:58:03:8C:ED:F3:C9:E6:F9:92:EF:E3:D1:41:CD:0A:7A:14:16:5E
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019B77592EEFC0C34B3A7648C1B0E984DAFD
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/_1gDjO3zyeb5ku_j0UHNCnoUFl4.roa
Signing time: Thu 01 Jan 2026 02:18:12 +0000
ROA not before: Thu 01 Jan 2026 02:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39591
IP address blocks: 45.84.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:2e:ef:c0:c3:4b:3a:76:48:c1:b0:e9:84:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Jan 1 02:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff58038cedf3c9e6f992efe3d141cd0a7a14165e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:a7:63:2e:dc:20:30:a4:91:f3:99:cb:bd:
21:ee:dd:b9:43:73:b3:61:3e:c6:6c:62:88:09:8e:
9d:a9:9e:ae:eb:af:cc:f1:15:8a:3f:a7:cf:bc:7d:
ad:e4:ee:a0:ed:1a:a9:26:a6:63:0e:52:79:d7:d6:
2d:ff:a2:61:89:4b:7d:b1:e5:ba:b2:b9:7a:8a:93:
98:2f:e9:e9:c4:f7:f4:16:a0:b0:b7:57:ab:11:1a:
3b:c8:cb:a7:b6:42:35:7d:b2:1a:6f:d4:c8:6e:8f:
74:6e:e6:ae:33:94:a9:b3:84:4d:1b:26:22:7a:c4:
2a:17:b7:9d:a2:98:3c:92:12:44:bd:06:01:08:b9:
53:a5:4f:6d:10:e1:30:72:6e:fd:ec:af:82:92:8a:
ed:80:ae:c3:91:4a:d1:65:8d:ed:fa:8d:ba:ec:3b:
47:04:38:05:c8:1a:51:79:c1:cb:49:f8:60:73:dd:
b6:b4:f6:43:0d:16:2d:c9:05:45:ba:c6:45:89:64:
8c:77:98:ab:28:01:90:a0:49:fa:d9:5d:ef:2c:62:
4c:42:86:4d:eb:33:b0:8b:e2:7e:34:05:89:b9:24:
fe:47:9c:46:01:72:6a:bb:f7:94:40:b0:ed:c3:ec:
d0:80:0f:02:59:c2:a0:b9:09:03:dd:15:d6:cc:c9:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:03:8C:ED:F3:C9:E6:F9:92:EF:E3:D1:41:CD:0A:7A:14:16:5E
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/_1gDjO3zyeb5ku_j0UHNCnoUFl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f6:63:0b:f2:47:19:f5:d7:e3:eb:16:62:da:22:7f:e5:e7:
99:83:5b:d7:c4:2c:41:e6:14:26:2e:93:34:64:21:b5:d6:49:
d3:e0:3d:78:ff:c8:83:3a:e2:a2:58:26:ca:9f:1d:38:5d:f4:
77:30:42:5b:e2:a6:b6:8e:0e:04:78:3b:1f:17:4b:fa:6b:18:
8c:56:bf:5b:f0:7d:7d:e2:33:9d:c6:c4:19:e6:4a:98:4a:01:
b5:ef:4f:e3:e8:7a:05:85:8b:89:71:e7:89:ef:0e:f1:2e:14:
ce:e2:04:71:da:29:49:ba:ea:b5:42:94:da:b0:e6:4b:eb:df:
79:55:38:e5:42:c9:0d:02:5e:83:72:ad:ad:e7:ea:58:9d:74:
e1:d6:5a:f2:a5:89:e9:f2:03:d1:bf:48:ee:eb:c7:44:ce:70:
e5:c0:bd:97:9c:7e:92:b2:d3:3c:1b:af:f7:77:d6:bb:5d:77:
45:3f:94:6a:60:5d:2f:be:f3:76:62:44:cc:76:e6:2b:d8:5d:
84:60:da:95:28:5a:52:51:e6:8d:31:68:59:ac:3c:c6:d6:b7:
bb:48:64:dc:96:36:48:12:d9:a8:f4:f8:8f:e0:f8:8e:3d:c0:
91:7e:e1:fb:d3:f6:f3:64:a2:e0:2b:81:69:6e:fa:06:d9:90:
b8:4a:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:45 2026 by rpki-client