This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Agm4zUXj9MGziDlMu1Ne9f8fVUU.roa
File: Agm4zUXj9MGziDlMu1Ne9f8fVUU.roa (raw, json)
Hash identifier: ogbA0PGLY5PUkErlr8tqpMezV5wpt1rH4NQJrPw4+a4=
Subject key identifier: 02:09:B8:CD:45:E3:F4:C1:B3:88:39:4C:BB:53:5E:F5:FF:1F:55:45
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019B9BA1DB1671A53C18E56304947167D8E6
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Agm4zUXj9MGziDlMu1Ne9f8fVUU.roa
Signing time: Thu 08 Jan 2026 03:23:54 +0000
ROA not before: Thu 08 Jan 2026 03:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 45.135.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9b:a1:db:16:71:a5:3c:18:e5:63:04:94:71:67:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 8 03:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0209b8cd45e3f4c1b388394cbb535ef5ff1f5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:56:07:fa:04:ee:0a:b2:4e:0b:b9:a2:57:
93:6b:02:e8:21:a9:0c:f1:cd:cc:36:5a:7e:03:25:
e0:ab:3d:6d:31:70:e6:4c:8a:9d:a6:fc:64:47:a7:
54:33:09:f2:da:67:6f:31:47:87:3e:42:19:3f:04:
b8:16:ef:f5:e1:d1:6e:fa:e2:c0:ba:d6:cc:a9:92:
8e:e4:07:8d:1b:32:aa:8d:c8:4e:a2:26:b7:04:66:
33:29:02:5f:f4:33:a7:30:73:cc:6e:4a:6c:20:ec:
1b:56:db:1b:23:48:d2:0a:96:5a:08:ff:71:32:ee:
af:b7:79:55:87:01:1b:ca:2d:53:59:1d:f5:f5:39:
24:df:d6:cb:93:66:71:94:b1:c1:09:6d:84:2d:6d:
44:25:47:f7:72:15:42:d1:6d:87:df:81:df:88:99:
85:56:d6:2c:3a:ca:96:44:84:e3:93:51:df:8c:2f:
36:91:de:bb:22:10:6a:c3:19:ca:e1:c8:ca:83:0b:
f2:f3:3b:4c:68:ad:dc:f4:1b:b1:21:d6:22:30:f3:
13:2d:7b:41:ba:c7:d3:7b:d4:64:e6:36:91:9b:18:
61:76:c3:03:f2:2e:81:7f:03:2a:4e:c8:c8:67:68:
66:71:b1:84:25:dc:d0:38:fa:7e:1b:3e:68:e7:a3:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:B8:CD:45:E3:F4:C1:B3:88:39:4C:BB:53:5E:F5:FF:1F:55:45
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Agm4zUXj9MGziDlMu1Ne9f8fVUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b9:b1:8f:c3:98:85:9c:a5:02:75:ba:4f:39:12:da:f4:8d:
e6:46:e1:0c:ed:e6:e9:64:2c:43:14:5c:0e:3c:e5:1b:00:02:
e9:b7:76:95:35:6b:da:97:0b:24:f5:ee:ce:7c:24:31:4b:17:
30:ed:cd:81:0e:10:27:7a:3f:86:a6:b1:1c:3c:a2:25:f3:96:
8a:a8:63:f2:48:35:3f:14:0d:b5:56:fb:26:cf:30:76:9d:a6:
dd:57:cb:cd:41:56:dc:b2:7e:f8:bd:85:17:b5:68:db:e2:83:
d5:c6:92:a5:70:87:11:d2:9f:03:cc:3c:3b:8c:a8:03:a5:f4:
ba:e7:3c:e5:4a:2a:4e:f2:95:0d:40:72:4b:fe:d3:7b:c8:76:
8e:8f:f8:8e:9d:a2:aa:cb:ff:fb:10:44:a8:60:ea:cd:96:e9:
70:7d:ff:46:85:37:19:3b:ab:56:20:cc:42:ca:38:96:d3:28:
a5:2a:f7:06:bd:02:55:11:95:e5:7a:95:9b:21:97:5c:47:80:
39:ce:ec:97:93:09:d2:52:38:22:c8:e1:25:42:95:93:e9:0d:
fd:57:8f:0a:22:5e:af:4f:c3:5a:57:19:f1:49:1c:5b:57:6e:
1c:4e:31:a3:e4:7d:43:7d:26:b0:20:81:a4:ff:81:53:9f:f0:
36:ca:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:22:09 2026 by rpki-client