This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rGWX5QqmM8h5FbKrMithhXuOnzs.roa
File: rGWX5QqmM8h5FbKrMithhXuOnzs.roa (raw, json)
Hash identifier: SitXZ41fUZdDHgZajEuAfL4a0/DQobIKr7LxyjHhIyU=
Subject key identifier: AC:65:97:E5:0A:A6:33:C8:79:15:B2:AB:32:2B:61:85:7B:8E:9F:3B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019ABF75BC4348DBF9A87FC759E3B81A0259
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rGWX5QqmM8h5FbKrMithhXuOnzs.roa
Signing time: Wed 26 Nov 2025 09:19:15 +0000
ROA not before: Wed 26 Nov 2025 09:19:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213535
IP address blocks: 45.13.226.0/24 maxlen: 24
45.67.136.0/24 maxlen: 24
45.67.139.0/24 maxlen: 24
45.92.218.0/24 maxlen: 24
45.92.219.0/24 maxlen: 24
45.141.118.0/24 maxlen: 24
92.119.166.0/24 maxlen: 24
185.117.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:bf:75:bc:43:48:db:f9:a8:7f:c7:59:e3:b8:1a:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 26 09:19:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac6597e50aa633c87915b2ab322b61857b8e9f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:5b:f7:e8:db:b1:4b:55:65:0c:25:bc:ac:
73:9b:59:ed:db:b6:72:28:26:9f:09:21:d1:ad:38:
07:64:c9:87:b0:dc:b0:85:7a:35:99:e7:d2:88:37:
17:fd:6c:04:5e:e3:65:73:85:c1:c3:7e:b7:15:99:
9b:ca:fc:89:46:e5:62:70:b5:59:d5:3b:ed:39:b2:
14:22:0f:04:dc:68:d2:20:d4:a0:48:9a:58:79:29:
63:be:2b:a5:49:35:3f:49:95:e8:1a:ba:fa:74:9b:
8c:b2:ff:9f:35:55:2b:53:62:ba:73:b2:89:f7:03:
f5:de:c6:eb:df:9a:e2:59:3a:b7:ab:e5:4c:ba:ad:
86:23:9a:04:51:90:5d:6e:13:2f:3f:68:08:e6:1b:
1b:fa:4d:f6:5c:21:89:a4:c2:eb:60:51:04:4a:d7:
16:b3:cf:d9:a0:8c:1d:34:89:27:6c:c0:ce:ae:01:
23:56:0e:0a:f7:16:f3:17:d8:c1:cc:e4:d3:f1:dc:
34:0d:87:92:46:7d:78:50:9f:97:22:0b:48:26:87:
2f:25:5e:53:b8:43:43:81:03:14:b7:a7:ff:88:d0:
0a:e2:3f:04:e9:3c:f2:0c:63:b1:f9:87:54:2a:2b:
3f:72:7e:36:30:94:aa:2d:66:1d:6d:24:90:c5:67:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:97:E5:0A:A6:33:C8:79:15:B2:AB:32:2B:61:85:7B:8E:9F:3B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/rGWX5QqmM8h5FbKrMithhXuOnzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.226.0/24
45.67.136.0/24
45.67.139.0/24
45.92.218.0/23
45.141.118.0/24
92.119.166.0/24
185.117.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d8:7d:e8:4d:30:06:80:c9:a5:d5:ad:1f:de:0f:fb:65:6f:
e7:bb:ac:d3:6c:ba:89:a6:86:30:b1:7c:df:12:f4:10:a8:24:
63:7c:06:fa:8b:b2:fc:16:bb:61:b7:26:54:bc:cc:ec:cc:59:
af:88:17:d0:c6:cc:39:5e:ad:a4:82:b1:de:e7:7e:b6:d4:ea:
e3:f5:b1:10:91:6b:1b:6b:f8:15:e8:ef:5b:0f:04:6c:4c:3e:
0d:eb:81:76:d1:da:f0:19:91:d9:ec:e6:34:9e:8d:be:ab:6e:
e4:3f:87:d4:b0:04:01:a9:c8:1b:5c:15:0f:04:a0:15:f3:bd:
41:40:42:c9:9d:66:b6:47:75:cc:52:9a:74:3d:c7:1b:97:9a:
71:01:ec:22:e7:a6:a4:8b:00:f0:a2:05:74:98:41:cb:f3:f0:
88:e8:a5:71:e5:35:3e:bc:9b:90:25:7e:d1:8a:9b:87:4a:b2:
e1:e4:6c:69:05:2f:9b:3a:a8:68:10:97:37:db:50:0c:f2:b0:
38:85:48:84:5d:45:c0:f5:42:d9:5b:ed:f1:fe:e4:c8:08:47:
30:36:27:aa:5d:ff:cb:42:95:58:88:8a:7f:9a:1c:d4:b2:37:
97:e0:0d:7b:41:10:91:ff:65:6b:ea:20:f3:83:e0:28:60:9e:
2f:b8:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 16:31:56 2025 by rpki-client