This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa
File: deTEkBZi5H7AIejV16ysjHwAbxY.roa (raw, json)
Hash identifier: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=
Subject key identifier: 75:E4:C4:90:16:62:E4:7E:C0:21:E8:D5:D7:AC:AC:8C:7C:00:6F:16
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019C002ACBEE152131B2C078E0E8E58A6416
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa
Signing time: Tue 27 Jan 2026 15:55:30 +0000
ROA not before: Tue 27 Jan 2026 15:55:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210538
IP address blocks: 45.133.36.0/24 maxlen: 24
185.169.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:00:2a:cb:ee:15:21:31:b2:c0:78:e0:e8:e5:8a:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 27 15:55:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e4c4901662e47ec021e8d5d7acac8c7c006f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:a9:2a:48:36:19:cf:13:c2:65:7d:fc:b0:
d2:a2:23:74:56:c5:18:f4:7c:58:ff:2e:b4:e1:74:
bc:f1:19:c5:59:e8:8b:e7:9b:a9:a9:eb:45:c0:48:
36:ec:fc:54:76:99:f6:5b:ab:50:a9:92:5d:8e:d7:
b0:bd:a1:12:cd:66:f4:33:6d:2d:9d:b3:cb:8f:73:
c9:80:94:8f:e3:c0:89:e4:61:d8:38:b4:8e:ba:82:
3c:b5:a6:4e:20:50:99:b7:59:9d:0a:04:c8:61:24:
59:9b:33:73:85:32:33:66:67:65:e5:11:a5:ef:55:
49:47:94:cf:c4:18:87:4f:60:f4:54:88:73:d7:71:
0c:f1:04:32:62:6c:8b:07:7e:bd:c6:a2:f6:fb:51:
f5:91:c2:6f:a9:f6:6a:cd:6c:84:82:42:8c:dd:54:
e2:20:7b:0e:55:5b:8a:69:30:0d:cb:47:36:45:57:
d4:a4:99:2a:ce:48:72:75:09:3a:ed:10:c9:03:8f:
c4:28:98:4b:89:59:4a:df:43:80:aa:03:8c:11:93:
ac:62:3c:25:a3:ca:fe:bc:c0:ab:a3:bb:57:99:bc:
63:9f:26:ed:7b:e0:c9:34:12:b0:1a:47:ab:53:08:
b9:d6:22:24:a4:34:1b:1d:d5:84:cb:d9:ec:4b:50:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:C4:90:16:62:E4:7E:C0:21:E8:D5:D7:AC:AC:8C:7C:00:6F:16
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0/24
185.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
36:16:e1:7d:c4:c8:b8:67:df:22:d5:10:b7:1f:e2:c4:c2:1b:
c5:42:0d:1b:6d:9a:bf:f2:59:17:93:51:46:a1:7f:6f:c4:83:
10:3f:de:b0:87:dc:05:b4:32:03:8d:13:3b:44:31:50:eb:80:
48:e0:93:42:4a:06:3b:78:b3:af:90:e1:b5:3f:5f:b6:1c:43:
c7:b7:42:5e:44:03:bd:47:bd:5a:d9:c9:07:c7:ec:e5:cc:ad:
ca:1f:45:ea:75:9f:55:21:3e:7a:10:b9:76:8f:39:fa:88:2b:
a1:96:35:95:ce:c4:27:92:9b:fe:fc:cf:56:b8:11:3b:b4:74:
c2:53:12:84:ab:59:b1:c1:57:dc:c4:39:9f:26:35:1e:2b:ee:
0a:a8:75:0f:bb:8b:3a:17:44:20:13:01:8f:a8:0a:d0:fa:3d:
3d:ce:0a:37:c5:12:83:f7:cc:47:1e:03:c3:5b:fa:fc:0e:9e:
da:4f:17:f4:8c:51:0d:9a:a3:19:a6:b2:7a:ba:45:0d:a8:c8:
21:0b:43:14:9b:e6:70:34:8b:d9:c7:e7:6b:8e:02:aa:b0:8d:
38:f5:bc:cd:fb:96:d0:bb:e3:75:ee:77:ed:51:71:d3:5e:cc:
78:33:51:16:88:90:7a:a5:8f:78:db:b2:81:58:8e:b6:ef:37:
a5:86:90:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwAKsvuFSExssB44OjlimQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjYwMTI3MTU1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWU0YzQ5MDE2NjJlNDdlYzAyMWU4ZDVkN2FjYWM4YzdjMDA2ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOpKkg2Gc8TwmV9/LDSoiN0VsUY
9HxY/y604XS88RnFWeiL55upqetFwEg27PxUdpn2W6tQqZJdjtewvaESzWb0M20t
nbPLj3PJgJSP48CJ5GHYOLSOuoI8taZOIFCZt1mdCgTIYSRZmzNzhTIzZmdl5RGl
71VJR5TPxBiHT2D0VIhz13EM8QQyYmyLB369xqL2+1H1kcJvqfZqzWyEgkKM3VTi
IHsOVVuKaTANy0c2RVfUpJkqzkhydQk67RDJA4/EKJhLiVlK30OAqgOMEZOsYjwl
o8r+vMCro7tXmbxjnybte+DJNBKwGkerUwi51iIkpDQbHdWEy9nsS1DmiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHXkxJAWYuR+wCHo1desrIx8AG8WMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvZGVURWtCWmk1SDdBSWVqVjE2eXNqSHdBYnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYUkAwQA
uam0MA0GCSqGSIb3DQEBCwUAA4IBAQA2FuF9xMi4Z98i1RC3H+LEwhvFQg0bbZq/
8lkXk1FGoX9vxIMQP96wh9wFtDIDjRM7RDFQ64BI4JNCSgY7eLOvkOG1P1+2HEPH
t0JeRAO9R71a2ckHx+zlzK3KH0XqdZ9VIT56ELl2jzn6iCuhljWVzsQnkpv+/M9W
uBE7tHTCUxKEq1mxwVfcxDmfJjUeK+4KqHUPu4s6F0QgEwGPqArQ+j09zgo3xRKD
98xHHgPDW/r8Dp7aTxf0jFENmqMZprJ6ukUNqMghC0MUm+ZwNIvZx+drjgKqsI04
9bzN+5bQu+N17nftUXHTXsx4M1EWiJB6pY9427KBWI627zelhpBQ
-----END CERTIFICATE-----
Generated at Tue Feb 3 17:43:17 2026 by rpki-client