This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa
File: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (raw, json)
Hash identifier: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=
Subject key identifier: B9:40:C5:CF:10:71:A4:FB:40:ED:48:C0:0D:15:0E:4D:01:0F:63:F6
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019B791021CFB56E47E9C61F393B6861073A
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa
Signing time: Thu 01 Jan 2026 10:17:38 +0000
ROA not before: Thu 01 Jan 2026 10:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56563
IP address blocks: 45.154.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:21:cf:b5:6e:47:e9:c6:1f:39:3b:68:61:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 1 10:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b940c5cf1071a4fb40ed48c00d150e4d010f63f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:48:c3:ab:e6:bd:1e:da:4e:5a:1a:19:d7:
ea:88:f7:fb:79:f8:00:62:6a:dd:2e:d0:e7:6b:05:
e0:58:e7:f6:28:9b:c9:06:31:d0:58:71:a7:08:55:
51:cb:99:7f:3a:3c:1b:dc:a5:05:36:b7:ce:a3:ee:
56:42:51:3b:50:38:a2:8d:ce:67:0f:64:e2:52:8a:
64:0f:a2:7c:47:ee:1d:ea:95:27:d5:fb:74:3e:00:
fa:49:9c:22:6e:27:9d:e0:6b:d3:8d:66:61:14:3e:
32:7a:de:7b:bf:53:dd:b7:bc:0c:4f:2e:80:ee:f7:
b7:79:aa:10:21:a8:d1:68:21:d7:b4:62:36:97:82:
03:98:9a:c2:0c:e1:ab:15:0e:cd:c8:b8:38:04:94:
47:32:c7:7b:a2:d2:dc:96:75:e3:07:ad:f4:84:31:
66:3b:d5:16:56:ab:88:fd:5c:3c:48:3f:fc:47:af:
22:90:3e:f8:17:11:28:70:6f:ba:c1:ab:c2:61:18:
ed:d9:01:33:cf:87:f0:20:8f:36:82:41:dd:ea:b5:
ea:13:4b:ab:ad:1f:49:e4:d4:a5:69:24:7a:e4:5e:
dd:58:e2:a4:43:73:68:db:88:d7:d4:a8:44:02:be:
82:6b:be:4c:41:8e:91:9b:23:9a:e2:5f:4a:31:07:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:40:C5:CF:10:71:A4:FB:40:ED:48:C0:0D:15:0E:4D:01:0F:63:F6
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.31.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a6:6e:6c:72:3b:3b:a1:18:f5:f8:f8:e7:92:56:19:ab:76:
a3:78:a5:71:d7:02:52:87:08:fa:6b:2e:36:6e:8e:76:e4:b3:
2e:55:8a:8c:60:32:f5:44:fb:a5:c2:16:00:a9:66:3c:2a:5d:
81:4b:50:9c:9c:3f:3f:45:1c:f7:a5:6e:c4:8d:91:25:06:9c:
cf:1a:51:bb:41:e9:72:17:85:cb:15:13:5d:c0:bd:9f:5f:6f:
6c:b7:5d:2d:46:bb:db:a4:53:3e:c1:5b:24:8c:27:9f:4c:d2:
46:d1:75:ea:80:fc:56:00:7f:f5:6f:bc:8c:41:48:04:8a:d4:
ee:de:c8:36:23:b3:64:e5:f1:2b:e1:a6:8a:ed:e9:04:f2:b0:
d6:05:67:2b:8c:9d:53:a6:ac:2f:bd:80:4e:f3:c3:3a:e8:3a:
3c:d5:cc:69:00:81:81:f9:e0:be:27:81:6b:33:64:92:b7:59:
62:44:0e:62:3a:7c:9e:9e:2f:fb:04:62:6d:14:b6:8b:d8:a8:
60:8f:38:f3:da:03:f0:15:ea:16:ea:3d:ef:c7:12:b9:25:45:
90:d6:22:ed:0d:0c:82:f2:28:cf:c1:ee:03:bb:d1:7f:9f:3d:
d6:ee:9c:0c:f5:b9:2f:06:6e:c3:e3:ad:c1:5b:55:9c:78:5c:
8a:ca:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:39 2026 by rpki-client