This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa
File: Zopjwe1rzd92yl72g_6NHQcrS2g.roa (raw, json)
Hash identifier: nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=
Subject key identifier: 66:8A:63:C1:ED:6B:CD:DF:76:CA:5E:F6:83:FE:8D:1D:07:2B:4B:68
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019B79ED4BDE181FE7B2EC34B24B3B8CB1CC
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa
Signing time: Thu 01 Jan 2026 14:19:13 +0000
ROA not before: Thu 01 Jan 2026 14:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202329
IP address blocks: 45.140.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:4b:de:18:1f:e7:b2:ec:34:b2:4b:3b:8c:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Jan 1 14:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=668a63c1ed6bcddf76ca5ef683fe8d1d072b4b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:cf:17:f4:9a:ce:f4:83:15:b8:fa:8c:14:
98:3f:52:1f:f0:db:b3:05:8d:df:d7:4e:44:20:da:
1e:08:c2:19:ef:b1:3e:e3:a7:70:e9:1d:81:91:ba:
6a:4b:c2:6b:4f:51:70:48:80:20:e0:17:25:d4:28:
76:cb:43:11:87:3d:9a:f1:58:3c:59:9a:a9:5e:38:
ce:3b:2e:af:f0:e9:ed:cc:49:0f:77:7c:17:12:9a:
21:d8:1e:5c:9c:87:d9:d8:2d:1a:95:77:0b:87:b8:
0d:a1:b6:db:d4:fd:1f:d6:21:5e:a3:51:a9:c9:54:
1c:59:98:b6:a3:0d:e3:57:ad:b2:af:88:1a:2c:ea:
4b:e6:69:5f:50:27:39:74:2a:90:52:ec:cf:6d:74:
36:5d:7c:bb:a0:66:c3:85:02:1b:34:e3:27:9f:87:
b5:5e:8b:58:ec:78:49:b7:85:fd:fd:91:7b:8f:b1:
bd:27:b6:df:0b:41:0b:87:5e:d0:f1:37:a1:a2:93:
6b:26:73:77:e8:48:42:4f:b5:1e:f9:f1:c8:a6:c5:
74:93:79:9a:22:60:63:e8:0d:95:a8:4a:d4:bf:e4:
07:ab:bc:8b:ae:10:68:ac:c7:ef:b5:db:dd:30:25:
c8:4c:63:21:75:3c:0c:3e:0f:6d:f6:60:45:aa:74:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:63:C1:ED:6B:CD:DF:76:CA:5E:F6:83:FE:8D:1D:07:2B:4B:68
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/Zopjwe1rzd92yl72g_6NHQcrS2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:98:9f:cc:cf:36:fa:6c:9d:fa:ea:bb:b7:8d:c4:30:69:b5:
7b:b4:5d:d0:01:d9:cb:dc:c6:b3:e2:87:9b:c2:97:05:e2:3b:
f2:ee:fa:58:16:64:21:3a:ab:a4:43:a5:27:b7:ca:5a:fd:0e:
52:cf:c2:01:34:f1:ea:35:15:f3:3c:81:10:af:1a:2f:44:13:
3c:4b:78:b3:ad:cf:8c:97:a8:03:aa:09:7e:2e:a7:24:be:05:
46:2c:53:75:52:6c:0c:a1:54:4d:7a:42:2c:71:68:d2:75:46:
7e:9f:4c:07:76:a7:95:b0:61:71:3a:68:ef:58:18:88:b7:e6:
1f:56:d8:ab:50:7b:4b:ec:d1:42:8c:9a:be:e4:bb:34:ef:48:
6e:55:2b:4b:70:f2:a1:1e:ab:83:5d:69:62:f5:c1:86:d6:61:
c2:21:57:22:14:c4:f3:51:6d:9b:86:b7:09:e6:1f:ae:86:59:
26:6e:2b:c6:be:49:a5:a6:d2:19:2b:89:ff:7a:2b:35:8e:d2:
8b:b7:93:93:ad:99:f2:13:4c:ae:c3:e1:cc:ee:00:10:b1:ce:
91:32:c1:16:78:08:eb:0e:1b:33:77:66:16:8e:2f:bd:f5:2e:
58:b6:99:65:01:91:7a:be:90:e0:54:0f:ec:03:30:04:15:d8:
b4:bb:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:34 2026 by rpki-client