This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/RLTq3d76GisC1LZTNSb9nCNxxt8.roa
File: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (raw, json)
Hash identifier: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=
Subject key identifier: 44:B4:EA:DD:DE:FA:1A:2B:02:D4:B6:53:35:26:FD:9C:23:71:C6:DF
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019B7BA398C3BBB5873BBF83B44C08B34B6D
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/RLTq3d76GisC1LZTNSb9nCNxxt8.roa
Signing time: Thu 01 Jan 2026 22:17:57 +0000
ROA not before: Thu 01 Jan 2026 22:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206583
IP address blocks: 185.80.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:98:c3:bb:b5:87:3b:bf:83:b4:4c:08:b3:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jan 1 22:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44b4eadddefa1a2b02d4b6533526fd9c2371c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:64:04:b4:fb:2c:31:47:bc:87:b6:5b:40:
5d:80:7a:7b:e8:94:fe:07:40:4c:5e:8c:f5:b8:77:
86:54:80:a2:23:40:20:c1:9b:68:5d:88:8a:20:e0:
cf:01:6b:22:a3:7f:42:a5:42:18:dc:e6:d3:7a:d3:
85:5e:aa:fd:ea:75:43:5e:38:33:f9:29:dd:07:cf:
86:eb:85:42:5f:ad:38:26:40:7a:6d:54:e9:1d:d0:
1b:1a:30:94:b1:6f:94:a7:9c:3e:c2:63:db:b6:3c:
c3:33:45:2b:ac:7b:46:b0:0f:d0:45:ef:8f:ad:5f:
13:ac:5a:ae:73:64:f0:45:29:7c:d0:0d:99:63:ae:
1b:83:1e:6f:b3:c2:57:41:42:3a:b1:37:86:e8:4b:
e6:c3:7d:89:51:6d:b4:d0:9e:fd:e1:51:ac:25:7f:
1b:e1:a0:cf:51:43:83:ab:d7:44:14:d9:2b:3a:19:
db:85:46:74:2d:0a:47:1c:85:01:b1:f4:96:9f:7e:
53:66:d7:7a:fc:88:fc:0f:b0:2a:cd:23:68:8d:cf:
ad:d4:c0:1f:98:7a:00:15:e2:c3:71:3d:9f:54:0b:
dc:82:8d:ab:9b:14:c5:89:65:b4:65:6f:4a:72:00:
c5:c5:b0:87:f0:3c:7d:65:f0:c5:8d:ee:b7:a0:92:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:EA:DD:DE:FA:1A:2B:02:D4:B6:53:35:26:FD:9C:23:71:C6:DF
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/RLTq3d76GisC1LZTNSb9nCNxxt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.147.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f3:3a:43:d4:e3:b1:b8:b0:9d:2a:62:6d:40:dc:d1:5b:d6:
df:e5:45:b5:fe:09:ae:b4:c7:27:e2:f5:c0:af:8a:e9:6e:98:
af:d8:f0:ba:45:25:b8:bd:3c:35:a7:86:29:e1:88:ae:3d:f1:
e1:79:1c:b4:0d:a1:b7:04:c8:d8:6c:d6:4c:b2:f1:57:5d:76:
ab:94:28:5c:a8:1e:d9:94:87:14:27:e8:14:92:3e:ff:83:4f:
92:f4:44:31:d6:62:b6:d0:28:6f:fb:15:0d:7e:30:56:7c:46:
f9:86:e0:27:7f:ab:97:4a:7c:2c:d0:d0:60:fa:5b:71:10:c4:
d9:70:46:3f:1d:9f:f6:37:de:97:13:9b:86:af:0e:e9:f5:d4:
a4:95:67:4c:22:96:3e:93:dd:78:b7:2b:fa:c4:a1:d0:f8:b6:
e9:c0:55:71:0d:87:43:38:fc:0e:d9:b9:be:0e:55:f5:b5:06:
16:53:78:0b:0f:95:e4:a9:73:2e:63:e3:52:5d:44:2a:8d:a4:
26:25:48:c7:6c:e1:85:91:9f:91:5a:19:86:9e:a9:4e:84:d3:
9b:b6:f9:2a:19:fd:bc:d4:2c:e5:9b:0a:20:73:b4:79:04:7b:
3d:81:ac:f6:8d:0c:75:21:e2:03:df:5f:c4:66:13:56:fe:50:
4c:f5:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:13 2026 by rpki-client