This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/xzeSROAZ4o5YtWLRSODt0z_nT28.roa
File: xzeSROAZ4o5YtWLRSODt0z_nT28.roa (raw, json)
Hash identifier: ewTMl0RKi+Myrcx5oJN4DOCA09oZLzVzmbs3wk5czR8=
Subject key identifier: C7:37:92:44:E0:19:E2:8E:58:B5:62:D1:48:E0:ED:D3:3F:E7:4F:6F
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019B7A5A9F80CAE4090E4044E328663C411A
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/xzeSROAZ4o5YtWLRSODt0z_nT28.roa
Signing time: Thu 01 Jan 2026 16:18:37 +0000
ROA not before: Thu 01 Jan 2026 16:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201800
IP address blocks: 45.159.104.0/22 maxlen: 24
45.159.104.0/24 maxlen: 24
45.159.105.0/24 maxlen: 24
45.159.106.0/24 maxlen: 24
45.159.107.0/24 maxlen: 24
188.68.188.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
2a0f:7580::/36 maxlen: 36
2a0f:7580:1000::/36 maxlen: 36
2a0f:7580:2000::/36 maxlen: 36
2a0f:7580:4000::/36 maxlen: 36
2a0f:7581::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:9f:80:ca:e4:09:0e:40:44:e3:28:66:3c:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Jan 1 16:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7379244e019e28e58b562d148e0edd33fe74f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:2b:fa:0d:bc:8e:b2:9e:78:a4:6a:f5:f5:
96:bc:c3:0e:d3:a8:a4:6c:c0:56:9a:a9:33:02:b5:
fb:20:da:65:e0:28:ac:6f:e6:91:60:02:a3:7f:aa:
b7:e5:cf:5d:20:43:4a:26:ec:6f:cd:ea:d0:92:58:
7a:88:a5:23:a7:af:5e:c8:1f:ae:17:92:da:e9:d6:
fb:4a:fd:af:fb:a3:8c:de:e8:a8:49:36:57:75:9d:
24:be:92:2c:17:8e:cf:27:a9:d0:5e:be:04:81:6b:
6b:19:bf:cf:4d:70:31:92:1b:e7:2f:9d:64:fd:43:
d2:3d:67:2d:31:94:8b:34:ea:ea:7b:78:dd:70:d7:
01:d9:8b:bf:e4:df:3f:08:58:03:16:19:96:1d:40:
7c:f5:d4:08:d3:11:c0:2a:d2:c3:d9:ad:95:bb:a6:
2b:39:aa:8f:8e:95:0b:42:7c:af:33:0b:18:23:aa:
3d:2f:9f:63:39:c9:3c:98:82:cc:0c:f4:3c:f3:7f:
f5:5b:30:39:70:7f:6e:1d:8a:b2:06:53:16:ba:8d:
a7:ec:b2:37:12:84:87:d3:b0:cb:3c:44:9b:a2:e6:
03:90:82:b9:d9:72:e6:83:94:f3:ae:aa:fc:d2:eb:
53:2f:e8:a3:00:17:1e:92:b5:9a:c7:5a:62:0f:12:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:92:44:E0:19:E2:8E:58:B5:62:D1:48:E0:ED:D3:3F:E7:4F:6F
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/xzeSROAZ4o5YtWLRSODt0z_nT28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
IPv6:
2a0f:7580::-2a0f:7580:2fff:ffff:ffff:ffff:ffff:ffff
2a0f:7580:4000::/36
2a0f:7581::/32
Signature Algorithm: sha256WithRSAEncryption
9f:17:51:6e:3a:4d:12:b1:fb:2f:31:b2:af:6e:c9:91:74:b6:
66:2c:34:d6:0d:2e:c9:86:3f:fb:07:2d:6f:70:96:d6:0c:c2:
20:ea:92:01:46:dd:6a:fc:a6:81:49:01:95:c2:3d:74:5c:6e:
ad:bb:cc:fb:9c:43:58:45:b7:c4:94:d9:04:e6:76:e6:48:51:
16:37:0e:78:59:66:10:b3:fa:f7:24:0b:a6:4b:99:01:92:6a:
0c:70:61:52:8d:df:51:a5:40:2c:be:7d:71:9f:c7:ce:ea:a2:
11:28:3c:c8:f1:fc:15:5a:30:c1:87:e0:d2:95:a4:a6:28:f7:
f3:eb:5d:b5:5f:59:d3:63:5a:cd:58:c7:8d:38:43:af:7b:15:
ae:17:8d:da:78:6f:4b:ec:b0:58:f7:c9:9a:8d:2f:21:c8:26:
42:4a:cf:8b:1c:2b:cd:06:8f:c8:b8:4a:3c:8d:65:cf:e0:66:
a6:4d:31:51:66:b7:23:ac:b3:7c:3c:b5:f2:f1:82:cd:d2:04:
51:90:14:1f:00:28:58:97:e0:0e:9f:e9:fb:41:30:82:72:99:
b1:01:1f:d2:05:5c:36:e9:dc:04:83:85:6e:7e:8c:92:33:09:
6d:32:28:8f:c7:c6:88:1f:2c:21:67:98:0b:94:9a:c5:92:ca:
19:ea:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:48 2026 by rpki-client