This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7VqDdHAthhlCBVTS8k-hAkSCShU.roa
File: 7VqDdHAthhlCBVTS8k-hAkSCShU.roa (raw, json)
Hash identifier: aTU01Vumck5Zs4wjBdGoAUue6jowN8B07bHBqEhv23I=
Subject key identifier: ED:5A:83:74:70:2D:86:19:42:05:54:D2:F2:4F:A1:02:44:82:4A:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019ABAF6EEC82D739BEE2DAB40B71378C20B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7VqDdHAthhlCBVTS8k-hAkSCShU.roa
Signing time: Tue 25 Nov 2025 12:22:16 +0000
ROA not before: Tue 25 Nov 2025 12:22:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 45.151.91.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ba:f6:ee:c8:2d:73:9b:ee:2d:ab:40:b7:13:78:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 25 12:22:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed5a8374702d8619420554d2f24fa10244824a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0b:f9:86:c5:fc:f6:dc:8b:04:9d:85:39:d1:
76:86:32:d4:e6:d7:ee:ce:90:72:ba:ba:59:a6:2a:
4d:b6:34:cb:6e:57:48:fe:cf:7f:17:73:11:b9:2e:
b5:ae:c3:95:4f:b4:56:f3:51:61:e6:d6:bf:45:52:
77:3d:17:75:69:83:2a:50:0c:bd:90:6f:02:34:9c:
3e:aa:55:cf:89:42:70:2d:5f:08:92:75:6c:8a:82:
f8:cb:b0:19:6c:8e:f7:e1:e7:89:4b:a8:ed:2a:bd:
31:c1:5e:f5:5e:cb:5f:fc:ba:d0:3f:79:f9:a7:10:
99:d7:ff:84:8e:b2:02:d4:30:82:a6:63:aa:82:ae:
46:5a:49:6b:ff:a2:5d:8d:40:01:72:37:e8:f5:44:
bb:63:2c:f8:22:59:24:4d:a7:27:c5:ba:63:47:cb:
da:a2:9c:1c:97:cd:27:0c:64:57:25:e3:9a:e7:4c:
af:da:c4:68:62:cf:79:48:28:6b:5b:c4:ed:54:d7:
8e:99:ac:a4:aa:cd:39:59:27:6f:d0:c7:0c:0a:96:
49:07:68:96:af:75:69:e3:58:2e:53:0b:dd:90:af:
66:98:a2:76:a1:5e:c2:82:cc:a4:4d:47:c9:84:e9:
5e:ef:53:3e:98:86:11:f3:c6:8e:b7:17:0c:f6:7b:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5A:83:74:70:2D:86:19:42:05:54:D2:F2:4F:A1:02:44:82:4A:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7VqDdHAthhlCBVTS8k-hAkSCShU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:dd:ec:fb:56:e8:ac:59:9b:18:a4:a0:d4:08:d1:37:d4:0f:
57:6d:d9:f4:50:bc:ab:ba:30:25:cd:48:f6:7f:ad:d7:fe:09:
65:4e:6e:26:93:eb:9b:84:24:9a:58:e9:e2:04:bc:d5:7d:3c:
7b:01:bd:6c:96:d7:01:41:0f:a4:31:a0:2d:f3:b6:e8:25:77:
3c:e0:1f:69:8a:b2:1b:40:f2:43:67:9b:7c:d8:53:d4:5d:af:
7f:fa:fe:4c:19:56:57:8e:27:4f:e8:33:a4:a0:39:5a:d8:6f:
d8:1f:b6:d7:12:37:ce:00:4c:99:f5:6a:17:d5:73:7d:ca:49:
05:1e:19:03:cb:6c:71:17:09:8b:b0:88:57:6f:32:54:e5:29:
0c:d7:a0:0e:c6:ed:7a:f5:cd:1c:83:b7:89:9e:f4:64:57:f8:
8f:09:55:d6:f9:0e:0f:ad:a5:c0:fd:b3:6f:f3:a0:f4:20:b5:
0d:4f:56:98:55:aa:39:59:38:6f:92:24:5d:3e:73:2a:f6:51:
8d:fc:60:db:38:53:6e:5a:99:69:f7:35:e1:22:85:6c:74:ef:
e3:98:70:ca:9f:f1:e2:54:15:9f:b7:a6:89:31:c3:c8:81:ec:
f8:af:18:e3:a5:12:67:ca:20:b0:2b:26:87:fe:c3:62:72:ef:
14:c3:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 17:35:58 2025 by rpki-client