This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa
File: j3SATBVncK2DF4V1G61Us5Sk1zo.roa (raw, json)
Hash identifier: zEb02s6uI3yEOdLkdeGNR+AfUDQ2YjvmMsQ5yaJfovw=
Subject key identifier: 8F:74:80:4C:15:67:70:AD:83:17:85:75:1B:AD:54:B3:94:A4:D7:3A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019B7C8016081015D74E8391EBFF7B0C90BE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa
Signing time: Fri 02 Jan 2026 02:18:47 +0000
ROA not before: Fri 02 Jan 2026 02:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34534
IP address blocks: 45.152.162.0/24 maxlen: 24
45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:16:08:10:15:d7:4e:83:91:eb:ff:7b:0c:90:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 02:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f74804c156770ad831785751bad54b394a4d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:08:68:cf:79:65:ea:66:2c:45:2d:22:76:
9c:5c:b4:10:d8:7b:3d:31:1d:23:df:3b:df:92:89:
fe:56:af:e8:ee:a5:33:22:05:2a:06:07:90:9f:c0:
f1:ed:61:8d:be:20:70:13:b8:ed:39:31:91:f8:e0:
15:13:4b:92:05:25:fb:14:18:8b:b6:11:0e:b0:06:
92:bc:e6:27:27:b6:1f:75:9d:56:26:3b:0d:06:28:
26:8f:66:51:9c:3c:17:e2:8a:5e:c7:67:c3:4d:26:
38:8d:1a:71:71:45:98:2a:83:40:89:a9:28:03:ca:
0a:a7:ba:ac:d1:0a:3a:84:00:21:e2:fc:51:da:cb:
fd:8e:bd:d3:8c:71:96:ca:af:e7:a8:6c:87:db:2e:
a3:99:cc:ab:fa:f5:46:07:e8:b0:c3:ff:81:dd:6e:
d0:41:43:07:b1:43:4a:b4:bb:7d:97:b6:fc:e1:56:
5f:91:0f:e3:87:58:c1:44:a7:f0:72:a9:79:84:5a:
98:0b:6f:2f:48:97:0f:a6:02:94:b2:57:06:1f:80:
ff:0b:74:49:bf:08:a0:39:2b:e4:9a:62:3b:44:33:
3c:f0:01:85:b4:69:5c:66:b6:f1:ba:89:ef:fe:d2:
83:d6:92:60:2d:f0:9b:a1:43:6b:ff:bf:1d:52:88:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:80:4C:15:67:70:AD:83:17:85:75:1B:AD:54:B3:94:A4:D7:3A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
08:26:4c:8f:a7:5a:d5:e9:ad:01:6b:92:4c:34:51:c3:4f:f6:
fd:b9:75:5e:bb:ea:a9:ad:61:6a:93:5f:30:f3:66:62:61:9a:
25:25:dd:86:98:69:5c:fc:54:9d:7d:4f:08:fc:71:a5:05:d9:
d5:0a:a5:89:49:6c:9b:56:14:08:6f:6d:d8:71:30:15:9f:a0:
c1:c6:79:bc:5e:39:e8:63:e3:75:7a:12:06:f8:d4:96:1d:af:
fb:6a:77:58:e3:ab:26:e9:6a:1d:6f:3b:81:b6:db:23:9d:c1:
2f:9e:23:ec:a3:7f:52:40:08:5b:05:12:61:21:29:7e:c3:f5:
1f:98:e6:d4:1b:65:c2:bc:37:04:f7:28:96:e1:60:92:0a:45:
d2:51:af:fe:7b:0b:56:e8:03:48:e3:b5:3d:9e:a0:16:ac:55:
c4:6d:7e:92:fd:14:08:93:2d:6c:18:08:30:5d:0c:11:42:a5:
dd:71:5d:70:f0:53:a1:76:1d:ca:e1:f3:65:db:5b:c4:de:1c:
dd:b9:0f:a8:17:94:15:fa:a6:22:c0:03:29:e2:e6:60:f8:55:
b9:65:da:cf:d6:38:82:44:93:8a:dc:9d:d4:91:59:01:81:3b:
7e:c5:67:23:58:90:f8:20:96:2a:d8:f0:d1:06:70:fe:bf:86:
eb:7a:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:55 2026 by rpki-client