This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RzcQQN3J1luJAlLlgNUf1A84-_k.roa
File: RzcQQN3J1luJAlLlgNUf1A84-_k.roa (raw, json)
Hash identifier: 7128s63xVp0t5eIuzfEyzczv7h/jW9GUiVXT2sZiO8Q=
Subject key identifier: 47:37:10:40:DD:C9:D6:5B:89:02:52:E5:80:D5:1F:D4:0F:38:FB:F9
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019B7C801C0ED020A6F0E37E62D106E7D48F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RzcQQN3J1luJAlLlgNUf1A84-_k.roa
Signing time: Fri 02 Jan 2026 02:18:49 +0000
ROA not before: Fri 02 Jan 2026 02:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49434
IP address blocks: 45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:1c:0e:d0:20:a6:f0:e3:7e:62:d1:06:e7:d4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 02:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47371040ddc9d65b890252e580d51fd40f38fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:3e:c7:94:30:01:14:20:f9:00:fd:00:e1:
3f:c6:96:d6:2b:01:44:ac:96:11:e8:44:7b:e5:f2:
a5:13:3b:5b:9c:8a:ed:0e:51:49:31:3f:ac:b3:f6:
d8:e2:b1:fe:e9:fd:11:0a:2c:08:91:6a:a8:23:69:
ba:e6:3a:62:42:de:a0:65:a2:4c:b6:12:23:ac:42:
16:c1:e5:08:41:6a:55:59:a7:37:ba:5c:ce:4a:f9:
ca:13:60:a0:b5:56:4f:e0:f7:9b:84:f7:a6:31:e2:
8c:1a:24:3f:a0:e8:32:1b:3e:58:82:7c:bc:1c:36:
75:4c:29:5f:9b:fe:6f:2c:47:8f:62:a7:3f:7a:a9:
77:d0:9c:d6:d0:58:b4:03:10:77:d9:3d:58:5c:30:
3c:18:29:a9:3c:39:19:bb:a2:06:93:61:78:bc:14:
31:d3:5e:c3:0f:b2:b2:19:2f:9f:6d:f8:f7:25:ff:
ed:ba:4b:c2:70:1f:52:56:5f:1d:9f:8a:20:02:c0:
36:26:1f:a4:76:3e:e2:9a:4e:cb:2c:47:eb:34:26:
ac:36:76:22:96:5f:78:ad:cd:e3:cd:aa:da:5d:7c:
2e:6f:65:12:52:f2:cb:6f:b8:54:bb:dc:56:fd:f3:
0f:0c:5f:94:b1:86:19:0a:51:fc:f2:8b:a1:db:c4:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:10:40:DD:C9:D6:5B:89:02:52:E5:80:D5:1F:D4:0F:38:FB:F9
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RzcQQN3J1luJAlLlgNUf1A84-_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.163.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ef:88:cf:8d:42:4c:ea:30:f0:05:e6:02:f8:c2:b5:a1:12:
03:ec:5b:cc:77:b7:42:b9:cd:98:22:57:4a:a4:53:50:69:ba:
16:38:01:53:44:b2:74:bf:27:87:b8:fc:0a:ac:c9:bb:5f:c8:
f7:d7:7d:17:d4:84:eb:5e:20:6d:3b:cc:ea:64:cb:47:9e:8f:
94:d7:bd:29:0e:9b:49:77:ab:89:cc:04:3c:84:ad:e0:be:72:
55:b6:8c:91:85:bd:f4:d3:1e:53:4d:7e:56:6f:4b:9a:7c:f3:
e6:b8:7f:4b:1f:95:0f:b9:79:8d:f6:23:99:e3:78:23:13:7b:
49:0e:e4:09:49:04:5f:2d:7d:4d:15:6d:8e:f2:82:5e:c7:50:
4e:89:09:92:ab:ce:7d:d0:74:21:92:47:73:13:fd:7b:f7:a6:
7a:4b:da:8e:3a:d6:51:8b:f7:8b:75:42:78:3e:57:bd:3a:78:
5e:83:ca:04:39:cd:b7:1c:d9:72:24:06:75:33:a6:37:3c:06:
02:85:c4:4c:32:8b:5e:0d:dc:47:17:4a:60:02:68:8e:b0:1c:
66:a7:51:f1:4d:16:c8:e9:72:2b:31:ed:69:b3:ae:a0:32:a1:
52:84:67:5a:86:bb:ea:1e:ba:d3:39:98:d5:22:73:17:e4:80:
9c:dc:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:53 2026 by rpki-client