This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/90JSn0fwHb1_0d3-vxWlsVn8IbA.roa
File: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (raw, json)
Hash identifier: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=
Subject key identifier: F7:42:52:9F:47:F0:1D:BD:7F:D1:DD:FE:BF:15:A5:B1:59:FC:21:B0
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019B7C128199F93F86DEC2CC552198E1ED18
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/90JSn0fwHb1_0d3-vxWlsVn8IbA.roa
Signing time: Fri 02 Jan 2026 00:19:06 +0000
ROA not before: Fri 02 Jan 2026 00:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214295
IP address blocks: 45.142.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:81:99:f9:3f:86:de:c2:cc:55:21:98:e1:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 2 00:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f742529f47f01dbd7fd1ddfebf15a5b159fc21b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:bb:81:04:20:7a:bf:70:9a:8f:4d:01:ae:
f9:0a:46:ed:fd:10:dc:20:f9:62:3e:10:93:6d:13:
55:e1:2b:c0:24:90:d4:c9:40:b3:5e:02:73:3d:96:
5d:46:2f:0b:88:38:9d:43:25:da:60:85:fe:50:63:
ae:60:10:db:ea:c3:02:ed:7a:f7:b5:4f:46:b2:6b:
92:af:5a:2e:96:4d:4d:a6:8b:9c:f9:68:48:93:fc:
0b:ca:a5:f5:ab:1f:bc:b6:73:1f:1b:17:04:4a:cf:
ab:3b:01:fb:3d:dd:35:37:d1:db:26:2c:cb:63:95:
2c:d2:be:f7:3e:fa:33:df:63:44:d1:48:ce:01:fd:
ec:c4:fa:87:3d:c6:ca:7a:56:9d:5a:a8:ce:6d:6e:
f7:a0:ef:45:03:c0:b7:81:34:9d:e4:f9:41:c2:35:
e4:67:26:96:7a:df:b4:03:01:07:2e:e5:64:67:6a:
4e:9a:f0:88:03:2f:81:0d:bd:27:73:2d:01:e8:32:
e1:a2:92:2a:4e:09:33:df:c6:2a:f0:0d:b1:8f:73:
76:9e:f5:29:2a:69:f5:a4:eb:9a:76:dd:28:7f:00:
c9:a7:32:25:8a:6c:bf:22:fa:30:76:0f:3c:d9:f3:
90:7e:21:1f:02:08:d9:e1:09:d8:6a:01:4f:74:cf:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:42:52:9F:47:F0:1D:BD:7F:D1:DD:FE:BF:15:A5:B1:59:FC:21:B0
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/90JSn0fwHb1_0d3-vxWlsVn8IbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.193.0/24
Signature Algorithm: sha256WithRSAEncryption
36:fa:b6:8c:d6:8f:7d:28:76:88:32:6e:76:2a:c4:21:9f:3f:
52:b1:b5:65:26:76:37:9a:96:b5:5a:fa:4e:da:ad:9d:8f:58:
e0:14:5b:9c:7d:df:45:64:f3:70:14:73:bc:fa:93:a8:82:7d:
f6:d7:fd:52:e2:6c:bc:ba:ed:89:c1:46:83:c0:70:ae:f2:59:
80:5f:46:22:d9:a3:11:a8:75:0d:c7:4c:52:dc:db:31:14:fc:
2e:26:76:b4:0c:3d:f1:fd:8f:11:33:de:cd:b3:55:a3:3d:f5:
12:27:7b:74:ec:7b:50:cd:3a:b1:c2:9f:8c:6b:d0:4f:8e:0f:
d8:64:f6:f8:d5:2e:25:a3:1b:a3:98:fe:19:39:e0:e1:51:54:
3c:60:57:9c:9d:be:1a:5a:a7:8c:28:65:75:f3:e9:59:c4:b3:
f9:e3:fd:71:e7:43:1f:77:78:78:ba:b1:ef:24:30:06:16:c6:
3e:f1:10:37:73:6d:d3:df:a9:ae:19:71:0b:9b:e0:e2:04:62:
7f:79:75:e1:5d:50:31:78:ee:68:4e:45:e5:a3:b0:21:1c:0a:
1e:a2:ee:f2:20:5f:86:9a:86:06:08:62:d5:d7:e4:ca:14:50:
4c:9c:da:ca:1e:6a:ee:e6:75:6e:b8:59:08:77:3b:35:9b:80:
af:11:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:13:42 2026 by rpki-client