This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa
File: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (raw, json)
Hash identifier: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=
Subject key identifier: 96:59:A9:BE:C2:69:EA:22:65:96:AF:1A:3F:30:87:89:7C:BB:A4:32
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019B7C803957925A7D0879449A99B01792C8
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa
Signing time: Fri 02 Jan 2026 02:18:56 +0000
ROA not before: Fri 02 Jan 2026 02:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268581
IP address blocks: 45.157.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:39:57:92:5a:7d:08:79:44:9a:99:b0:17:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jan 2 02:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9659a9bec269ea226596af1a3f3087897cbba432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:26:19:df:21:1a:db:e8:09:2d:1d:22:01:
57:70:d4:ad:aa:2e:f4:ca:3e:e9:e1:66:6f:d3:3d:
de:48:a2:ba:f8:76:0d:64:a4:97:b2:2c:81:39:88:
04:02:c3:5f:a4:37:92:4e:28:38:4e:49:de:d2:60:
8e:66:76:80:2e:06:68:03:5b:58:38:c8:5c:29:f8:
e9:ef:26:be:a2:b8:ac:cd:86:e7:fc:61:0c:a1:81:
6b:12:63:7e:45:df:5c:7e:0c:5e:1f:72:27:b1:2b:
72:00:98:40:de:f1:e1:c9:4b:66:d1:28:a0:c9:e5:
6f:b4:13:3e:b2:c0:70:a7:83:ef:46:38:df:92:7a:
3a:19:3d:8a:64:ec:bc:df:e2:fc:5f:2e:eb:a9:6f:
32:7a:66:87:d2:dd:0b:7e:e7:dd:15:07:62:d6:25:
e8:62:92:26:90:fc:d8:38:e8:39:e4:a1:1d:f2:29:
e4:41:64:a1:8b:4d:6c:49:de:2c:d8:62:3f:2f:03:
a6:1e:b7:96:8e:6b:ab:c7:cb:2f:95:fa:9d:1f:24:
21:1c:4e:b5:f5:19:6b:4a:de:b1:dc:a6:a8:4d:91:
4e:d4:58:7f:68:a2:37:7f:57:af:01:1d:44:78:fa:
22:42:1d:4a:e9:2f:37:4e:93:b1:2d:b3:c6:32:18:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:A9:BE:C2:69:EA:22:65:96:AF:1A:3F:30:87:89:7C:BB:A4:32
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:64:f0:cf:aa:65:23:44:7c:5f:db:56:72:64:b9:d1:99:45:
9b:d7:05:50:7c:fa:cc:71:b8:bd:d7:80:a1:dc:d1:a5:bc:aa:
86:42:b7:18:65:01:b3:70:77:71:b5:e0:92:49:59:1a:f3:2e:
ac:88:a5:e5:69:fd:90:a3:76:19:7a:cf:ba:07:fd:9f:f0:e8:
65:3f:1e:9b:5d:fd:1a:41:2c:d0:af:55:a5:8a:d3:18:89:35:
bb:65:e7:e7:d1:70:e5:bf:05:4f:09:76:98:46:19:f3:d8:da:
e6:81:87:2c:6f:f4:61:26:c6:97:e1:b1:a6:b5:4f:d9:a6:9e:
72:5e:d7:46:f7:d1:90:92:ac:2c:5d:13:fd:9d:24:15:8c:3c:
87:50:a8:7c:a7:03:73:20:66:3e:8f:eb:98:7b:ef:db:89:c2:
c1:c3:36:bf:10:0e:8a:1f:e1:f5:24:40:8a:5a:1c:9e:94:99:
77:a6:c3:a8:e2:0e:8f:07:e3:ff:67:2b:c8:ba:47:16:0b:23:
63:bb:b5:41:4b:3d:f4:11:e9:e1:48:f3:b5:d2:37:9e:f4:a0:
f8:99:0f:b2:60:87:3b:f2:a0:23:b6:f1:44:26:66:45:c3:6b:
d1:fa:8d:e2:a5:16:81:57:7c:5d:01:46:6c:6c:42:a1:b9:f7:
bb:e3:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:52 2026 by rpki-client