This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa
File: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (raw, json)
Hash identifier: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=
Subject key identifier: D1:53:13:F3:7E:31:A5:21:F9:3F:FB:8E:85:CA:39:45:1D:1C:9E:86
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 019B797F3304D78AE5111B0BE92DC1B1D678
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa
Signing time: Thu 01 Jan 2026 12:18:57 +0000
ROA not before: Thu 01 Jan 2026 12:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.80.175.0/24 maxlen: 24
2a13:7c40:1::/48 maxlen: 48
2a13:7c40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:33:04:d7:8a:e5:11:1b:0b:e9:2d:c1:b1:d6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jan 1 12:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d15313f37e31a521f93ffb8e85ca39451d1c9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:d8:12:87:30:79:a9:29:b1:e3:d3:70:fb:
db:37:70:f7:8a:8d:6c:d1:d4:29:0a:08:5a:c4:c0:
5f:48:16:65:9a:df:f6:e5:7d:b5:c7:e1:95:de:8a:
f5:d3:77:6d:b0:5c:02:a0:bf:c8:d6:19:fc:4c:e7:
f1:f2:3c:01:d5:15:9c:de:bf:ca:ab:5e:ff:bb:e8:
51:be:82:f8:77:08:45:4f:3f:1d:4a:11:7b:62:6d:
63:8b:44:d0:2f:47:af:f9:58:5c:57:51:10:84:b7:
78:e0:2f:2c:54:40:2a:c0:a6:1d:5f:8b:98:91:11:
4f:69:bc:6c:26:83:90:e0:5b:76:a4:07:d0:6c:bf:
b6:b7:47:e7:38:d3:1a:de:32:2c:ef:3a:24:5d:e0:
d9:cf:62:5b:ae:af:4d:94:69:db:67:ee:cf:99:8f:
84:ef:cc:64:4a:42:3e:5b:4b:c7:2d:b2:ad:e7:2b:
b1:8b:62:b2:d4:61:b2:2c:c3:f4:3d:b9:37:89:d3:
1e:bc:8f:67:1b:d5:f7:3c:f7:22:c3:84:5f:45:e7:
75:1e:7e:2d:e9:4a:3b:c1:ca:6b:80:0b:2f:36:fe:
42:68:25:a6:ec:4f:4f:1f:cb:26:2a:f3:fc:0b:a6:
8b:ea:dc:18:f1:6d:a9:26:06:b1:85:0a:28:b8:36:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:13:F3:7E:31:A5:21:F9:3F:FB:8E:85:CA:39:45:1D:1C:9E:86
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.175.0/24
IPv6:
2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:51:aa:b0:7a:25:99:31:49:8d:07:42:26:73:19:10:3c:0f:
e4:a3:d4:11:c6:4f:83:08:04:c4:ee:f6:c3:01:19:51:c9:5f:
c2:53:51:fd:8d:96:2f:2a:de:0e:ca:f8:5f:a8:ed:09:80:43:
e7:7d:80:ff:eb:3a:f2:a8:74:cc:38:e5:16:73:29:68:03:f9:
b8:0a:d5:9d:73:c3:aa:ce:db:c8:0e:f3:e0:39:f1:fa:52:0b:
53:45:79:60:4c:c5:cf:7a:2d:38:a0:03:df:bb:dc:3b:68:af:
9b:95:2f:8c:27:d5:8f:21:c1:62:f7:40:01:7e:cb:9d:f4:ce:
49:bb:d0:64:7e:4b:82:db:12:8f:c0:cd:cd:37:ac:e7:68:0a:
92:65:57:55:c7:00:e8:6c:ba:b5:74:78:ad:26:3c:0e:0a:4e:
06:d2:ac:b5:b9:b0:ed:b3:c0:37:35:df:ab:62:20:2d:d9:59:
46:c2:25:8a:79:2e:11:d2:42:37:aa:fe:2e:46:f1:1f:04:87:
8f:19:a4:a9:5b:46:5b:1e:d4:45:1b:0f:24:b4:37:9e:20:17:
e1:b4:f2:e2:18:bf:a9:17:d9:c7:d0:b9:1a:1d:3f:37:9a:90:
ab:c4:be:93:42:9c:97:13:b0:8e:ca:35:f6:ed:d7:43:db:78:
99:ad:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:31 2026 by rpki-client