This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa
File: BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa (raw, json)
Hash identifier: 22eUg+cF+ZiwjQk0TqdP64rLfrQEXvEkQaY+niB35NQ=
Subject key identifier: 04:8B:93:E5:B2:5F:2A:02:3A:7D:39:F4:74:E7:37:A1:99:F4:0A:A9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019B7C802E2BA2B83425C7011B06D7611822
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa
Signing time: Fri 02 Jan 2026 02:18:53 +0000
ROA not before: Fri 02 Jan 2026 02:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214915
IP address blocks: 45.84.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:2e:2b:a2:b8:34:25:c7:01:1b:06:d7:61:18:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 02:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048b93e5b25f2a023a7d39f474e737a199f40aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:ed:ae:9c:48:a8:37:3c:98:b9:93:e0:fc:
c8:7a:73:20:74:de:54:19:d0:e2:c1:d6:fa:1a:5e:
b8:44:db:3e:9e:be:58:6e:97:6c:af:32:de:3a:6d:
8f:7c:19:1f:0b:47:eb:19:c5:90:b1:f6:b7:6f:44:
3c:4c:af:04:20:65:28:dc:15:6e:27:d2:ea:1e:d6:
ad:15:50:77:77:6a:e5:96:fd:a5:bd:ed:14:92:66:
eb:dc:1a:f4:26:49:98:87:7d:17:47:b9:a0:81:d3:
b7:ef:9d:8a:09:69:8e:f5:39:be:66:02:5b:f4:08:
d9:64:b7:ea:f6:80:45:9d:de:54:33:7c:9b:d5:51:
1c:b8:95:ab:e1:4e:27:f6:a3:ae:0d:be:d0:52:80:
54:0f:78:0f:71:4a:fa:e3:c9:49:2f:dc:15:42:7e:
e3:34:b8:25:0b:e6:79:80:42:6b:13:a0:ce:8c:0a:
52:72:bc:df:36:44:0f:d6:00:ad:3e:0b:e2:5e:41:
90:6d:5b:2b:65:e9:61:65:0c:c5:71:e7:bb:b0:71:
60:62:e2:21:5f:df:2e:61:82:d4:ca:5b:29:48:3c:
f7:e4:46:be:8e:12:3c:89:15:f4:11:4e:63:4a:8e:
80:83:d5:41:9c:93:dc:bf:e9:3b:b4:cb:55:35:aa:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:93:E5:B2:5F:2A:02:3A:7D:39:F4:74:E7:37:A1:99:F4:0A:A9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BIuT5bJfKgI6fTn0dOc3oZn0Cqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.197.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ce:af:e2:19:aa:a3:f3:f8:64:52:11:8d:c5:b9:49:e9:fb:
bb:b8:b8:c7:8b:4e:a8:1c:36:b3:25:e6:87:55:69:e4:cd:9f:
af:ee:9a:32:2b:a1:3f:72:8c:be:d4:58:85:4c:bd:2e:e5:5e:
1b:03:ca:5e:e8:98:77:02:d4:00:42:b2:85:da:db:4f:73:36:
e8:6c:df:40:f8:04:97:d9:08:fa:70:b8:d0:ed:f1:17:28:3a:
f4:5e:6b:d3:3c:d3:31:07:c1:05:c4:3d:6f:96:6a:c6:a7:a6:
df:e9:43:2e:73:e2:bf:2e:7b:66:1a:53:4a:09:41:21:2b:c0:
16:b9:d9:74:e2:71:3e:41:cc:9a:be:ff:6f:9b:f3:4c:c7:6b:
5a:30:17:6b:12:b2:f9:01:f9:fd:ec:8b:10:2a:d8:9f:bb:7f:
54:6b:24:5a:2d:12:cd:07:b8:75:31:64:82:8e:40:99:cf:b7:
70:90:87:56:fd:38:0b:59:7b:cd:16:a7:84:49:25:98:4e:78:
c7:86:8d:1e:aa:88:d8:0b:a8:19:d0:75:0b:f6:7c:8d:08:ac:
c6:45:7a:ac:c2:71:8d:1f:02:e4:e3:29:c3:70:c6:bb:1b:c9:
ec:a5:08:59:8b:79:1b:4c:9d:46:18:64:74:de:7c:c6:49:2f:
16:0a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:04 2026 by rpki-client