This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa
File: A3holTySzikt80r_qVKjjeuc5o0.roa (raw, json)
Hash identifier: vqBDtNK41Wi0cyX9dVklRZc5KLb1M55xUagg9Nj9B/c=
Subject key identifier: 03:78:68:95:3C:92:CE:29:2D:F3:4A:FF:A9:52:A3:8D:EB:9C:E6:8D
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 019B7CED0729C1DD510731AAE03A9114E065
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa
Signing time: Fri 02 Jan 2026 04:17:47 +0000
ROA not before: Fri 02 Jan 2026 04:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136268
IP address blocks: 45.154.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:07:29:c1:dd:51:07:31:aa:e0:3a:91:14:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 04:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=037868953c92ce292df34affa952a38deb9ce68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:85:57:c3:24:81:0d:b1:ac:72:54:49:32:
82:7d:a7:61:3f:54:29:84:a3:5d:21:0f:8d:bd:87:
a0:1c:08:8f:4c:02:55:0e:e4:58:12:32:26:7d:22:
e7:49:3e:97:a5:28:8a:31:3b:b3:c8:0c:c0:6b:af:
2b:d6:a3:01:2c:28:0d:8d:03:2d:bf:cb:c2:a5:5f:
9e:dc:98:40:e9:cb:7d:a5:75:a2:6b:dc:a3:f5:c8:
26:a8:20:fa:29:08:54:18:c9:99:a6:41:37:9d:54:
1a:49:25:64:a3:d1:e5:2e:3c:95:08:5b:85:38:b0:
2b:3f:49:f8:1c:59:d6:99:54:e9:b7:e9:85:60:c6:
5d:e3:60:ca:30:3c:b4:48:f5:c6:25:0b:07:a8:e8:
85:32:d3:0a:ba:2d:30:5e:91:5a:1b:70:48:bf:75:
42:69:c6:cf:77:1f:84:a0:f1:f9:f4:bb:65:f9:9a:
a2:bb:07:3d:2c:44:39:28:a1:3d:27:75:54:b2:d0:
fb:9a:26:d3:cf:a7:b3:22:b3:63:db:c8:4a:32:32:
8c:eb:e9:16:4e:33:db:ff:93:24:d3:36:c6:2f:e8:
1f:5e:64:b7:37:ae:48:c4:fc:d6:92:fb:3b:38:5f:
86:1e:28:09:40:57:30:05:17:ff:3d:80:a2:0f:75:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:68:95:3C:92:CE:29:2D:F3:4A:FF:A9:52:A3:8D:EB:9C:E6:8D
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.205.0/24
Signature Algorithm: sha256WithRSAEncryption
80:00:3e:46:d6:37:f8:22:16:48:fa:7d:76:79:fe:2b:4a:39:
bd:84:3f:57:39:d1:21:4a:8d:e7:c0:c0:cf:1d:db:57:84:cb:
ff:36:5a:bd:7e:2d:5e:01:f8:17:9e:71:0b:dc:eb:89:28:02:
41:df:54:06:24:3c:c3:ce:02:f9:50:d9:bc:19:be:4b:fa:8b:
e2:9b:92:d2:97:da:bb:8c:58:07:34:ac:6f:93:16:c9:81:7c:
62:60:00:e0:ad:62:5a:1f:49:ae:31:95:0c:12:16:58:87:e2:
7a:13:f4:ca:7e:80:e7:5b:cc:25:ee:93:60:89:51:97:29:3b:
32:28:b4:4c:c7:7a:c3:07:35:e3:d8:61:90:4f:5a:2c:17:0e:
59:cb:07:e1:cd:72:bb:78:93:ea:9f:e4:76:21:58:36:c3:e3:
e0:33:13:d1:f0:b0:27:d1:58:e1:00:37:9d:61:e4:03:db:bf:
f4:6e:59:de:26:91:cd:5c:2d:f2:96:0b:e8:91:19:dd:c2:a2:
f3:02:1f:76:d4:37:76:c0:5d:ed:bf:6b:fe:ab:ff:3f:ca:8a:
26:67:3e:e4:10:66:8e:be:c8:47:2c:3d:3b:05:ef:47:97:fd:
91:b6:d9:f1:df:b1:05:9a:ee:6f:a0:ad:a9:70:be:a4:bb:5d:
b8:33:8d:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87Qcpwd1RBzGq4DqRFOBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzc4Njg5NTNjOTJjZTI5MmRmMzRhZmZhOTUyYTM4ZGViOWNlNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyFV8MkgQ2xrHJUSTKCfadhP1Qp
hKNdIQ+NvYegHAiPTAJVDuRYEjImfSLnST6XpSiKMTuzyAzAa68r1qMBLCgNjQMt
v8vCpV+e3JhA6ct9pXWia9yj9cgmqCD6KQhUGMmZpkE3nVQaSSVko9HlLjyVCFuF
OLArP0n4HFnWmVTpt+mFYMZd42DKMDy0SPXGJQsHqOiFMtMKui0wXpFaG3BIv3VC
acbPdx+EoPH59Ltl+Zqiuwc9LEQ5KKE9J3VUstD7mibTz6ezIrNj28hKMjKM6+kW
TjPb/5Mk0zbGL+gfXmS3N65IxPzWkvs7OF+GHigJQFcwBRf/PYCiD3UB3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAN4aJU8ks4pLfNK/6lSo43rnOaNMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvQTNob2xUeVN6aWt0ODByX3FWS2pqZXVjNW8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrNMA0G
CSqGSIb3DQEBCwUAA4IBAQCAAD5G1jf4IhZI+n12ef4rSjm9hD9XOdEhSo3nwMDP
HdtXhMv/Nlq9fi1eAfgXnnEL3OuJKAJB31QGJDzDzgL5UNm8Gb5L+ovim5LSl9q7
jFgHNKxvkxbJgXxiYADgrWJaH0muMZUMEhZYh+J6E/TKfoDnW8wl7pNgiVGXKTsy
KLRMx3rDBzXj2GGQT1osFw5ZywfhzXK7eJPqn+R2IVg2w+PgMxPR8LAn0VjhADed
YeQD27/0blneJpHNXC3ylgvokRndwqLzAh921Dd2wF3tv2v+q/8/yoomZz7kEGaO
vshHLD07Be9Hl/2Rttnx37EFmu5voK2pcL6ku124M40v
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:06 2026 by rpki-client