This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa
File: V6buM46oTkuzY7NwYxWxAbQckt0.roa (raw, json)
Hash identifier: E8NZ4wtYWkW4BcIUOswsxRnMKDUz5vq6hnHyCmSgulc=
Subject key identifier: 57:A6:EE:33:8E:A8:4E:4B:B3:63:B3:70:63:15:B1:01:B4:1C:92:DD
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 019B7F82E1174B5B2C27D2C7E4554A58942B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa
Signing time: Fri 02 Jan 2026 16:20:42 +0000
ROA not before: Fri 02 Jan 2026 16:20:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214383
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:e1:17:4b:5b:2c:27:d2:c7:e4:55:4a:58:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 16:20:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a6ee338ea84e4bb363b3706315b101b41c92dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:b2:c2:79:5c:31:49:bf:73:50:f1:0d:7e:
4a:64:52:81:2f:ed:4a:9c:1d:b8:31:5f:4f:72:d9:
c8:a5:02:51:69:ef:82:1a:f2:e2:b6:78:a5:03:65:
c9:95:c1:ce:f6:88:13:99:a7:70:d6:b7:93:08:f9:
34:1b:cb:7a:df:f5:63:41:ef:57:c5:79:b8:93:6f:
c4:ae:56:16:5b:0d:83:c1:43:b7:30:ea:db:cc:9a:
16:bd:e3:84:d4:08:0f:a8:75:e0:3b:d8:eb:f1:d1:
7d:04:5a:75:c5:c7:61:ef:91:9e:04:cc:de:a0:7b:
64:be:d4:93:ba:d8:43:8a:2e:ba:44:38:68:e0:58:
e0:c2:e1:c5:fa:74:09:00:99:a8:07:36:c5:49:4a:
e8:dc:ae:0e:8c:fd:bc:bb:90:83:93:c6:e2:b5:a3:
a5:15:0f:23:75:b4:ea:fb:30:42:82:cf:0e:9c:df:
fb:18:2c:8a:3a:a2:aa:aa:c6:64:f0:43:05:24:63:
6c:12:98:ee:11:a8:07:04:3b:2a:bb:2b:1a:51:01:
3b:dc:c6:ed:01:cf:94:8e:1e:16:68:e9:46:96:33:
e4:c4:64:51:e9:d5:27:d2:22:34:f9:ac:9c:87:17:
44:6f:93:0b:8b:50:dc:d1:69:86:94:a5:56:2a:12:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:EE:33:8E:A8:4E:4B:B3:63:B3:70:63:15:B1:01:B4:1C:92:DD
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b3:0c:1f:0f:f8:0c:a3:74:b9:21:f0:9c:1f:24:df:97:1e:
a8:0a:ea:ca:7f:e1:58:f8:18:f5:59:1a:c9:2e:ca:71:b4:c5:
98:12:d4:a7:ac:e1:b5:9d:5d:a7:92:e5:1f:69:ab:e9:5f:86:
33:19:b7:f7:12:2c:e2:cf:23:10:52:db:8e:12:fd:99:01:25:
8e:46:08:e6:9e:ce:31:00:62:3d:fe:0a:95:19:42:e4:2b:30:
2d:f4:ef:69:65:bd:53:de:d1:b6:f4:81:3e:74:39:b7:a6:cf:
12:c9:4f:59:8d:f0:93:2f:56:c3:78:3d:97:e2:89:30:43:e6:
ec:5b:01:3b:6e:e3:05:5c:46:fb:44:f9:50:1f:6f:0e:ba:52:
d8:bd:5b:50:27:79:5f:ca:cb:1a:a6:e4:58:41:1e:52:25:7b:
58:07:69:18:83:69:94:cf:f1:4b:01:9c:89:e5:b0:80:2b:8d:
32:25:f9:c4:3e:6e:6b:a0:e3:c4:47:9c:2e:db:f0:4d:9e:d6:
a0:f8:58:6b:c7:0b:c6:ae:ae:68:a3:d5:c0:4f:ed:f6:5d:04:
b6:03:5d:56:a4:9e:4b:5a:a5:27:b5:f0:46:4c:6f:7d:80:43:
db:4e:2e:18:37:2a:c1:13:f9:4a:ed:07:c8:13:1f:b2:c6:ee:
55:8c:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:21:17 2026 by rpki-client