This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa
File: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (raw, json)
Hash identifier: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=
Subject key identifier: 65:DF:D2:ED:35:FB:2B:22:DF:F7:57:FD:D9:B3:3B:D9:0E:66:D6:18
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 019B7B35694F8F6C7F57CEEC96BFC99FFBF0
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa
Signing time: Thu 01 Jan 2026 20:17:36 +0000
ROA not before: Thu 01 Jan 2026 20:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:69:4f:8f:6c:7f:57:ce:ec:96:bf:c9:9f:fb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 20:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65dfd2ed35fb2b22dff757fdd9b33bd90e66d618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:da:d7:f7:d6:a6:06:af:00:06:a8:7a:ff:
cc:b8:b1:b6:9e:5f:a8:ef:bf:37:e6:b6:72:f9:bd:
b6:86:5f:05:2e:3b:b3:51:ec:c5:13:2e:9e:c7:90:
57:ce:20:28:05:c3:ab:b3:61:d8:43:c9:fd:8e:2c:
32:af:17:59:a0:9b:ac:f9:35:71:01:eb:b1:15:7f:
d9:11:a5:a8:77:bd:90:be:8d:40:8d:e6:f0:ee:ae:
ad:8c:35:7b:40:37:e7:fa:c1:a0:49:a7:6c:3d:a2:
e1:59:bd:93:e4:34:67:ac:e6:61:52:80:78:3f:ff:
47:6e:8d:ab:ad:3e:dc:c8:1e:cf:bb:92:96:b5:67:
d9:48:d0:5f:86:f1:1b:7a:d3:b1:b6:20:2e:a3:1a:
5a:73:dd:a2:e0:01:2b:0b:d9:0f:6b:f7:e1:d5:4a:
8c:37:fb:12:c0:32:58:64:03:51:a5:b5:c2:8c:22:
8d:f8:19:b7:60:c1:b2:c9:74:36:52:08:5f:cd:36:
94:2f:90:02:c3:48:03:e5:6a:0d:57:96:56:22:71:
62:cd:68:7b:fa:67:2a:4f:88:0a:13:77:89:3c:77:
ee:8e:61:e9:d2:9f:8d:ca:c0:15:f9:a5:65:86:79:
10:8f:b4:41:c4:6a:0a:d7:af:c5:be:98:27:3c:b3:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DF:D2:ED:35:FB:2B:22:DF:F7:57:FD:D9:B3:3B:D9:0E:66:D6:18
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/Zd_S7TX7KyLf91f92bM72Q5m1hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0d:ba:2b:74:02:07:d2:55:ad:bf:01:90:3e:38:c8:a8:b3:
e0:9d:91:a8:08:3e:dd:63:24:ff:63:32:85:b8:13:f2:11:16:
67:65:a6:a4:a2:2b:d1:f8:93:98:36:15:94:36:d1:a7:7b:ce:
98:95:b5:d5:8a:65:74:cb:c9:e6:ec:bc:72:c3:50:cc:c5:23:
78:66:42:83:c6:66:b7:69:ca:51:29:eb:a3:f5:f5:2e:f8:fa:
ad:9c:27:b1:d0:ad:e4:0b:3e:e9:0b:76:70:f6:c3:51:bf:57:
91:3e:80:9e:3c:e2:b6:3e:64:b0:73:b9:58:03:6a:e7:d1:cf:
55:79:71:a5:c6:08:50:e2:82:21:7e:8c:ea:06:2c:c4:a7:a8:
e6:a1:cd:df:7e:84:4c:62:c9:63:c8:14:43:6c:8e:1b:13:12:
3d:d5:56:a2:ca:a9:65:fa:14:db:c6:a3:a2:01:71:d7:81:b5:
b1:91:81:2b:26:98:5c:89:c0:39:0b:6b:ee:fb:1c:3e:52:b2:
70:04:c3:cf:45:de:d9:5e:68:3d:d1:29:6b:80:16:27:b6:b6:
37:3f:34:53:e4:61:4b:26:48:56:ab:34:60:e2:c9:73:b3:0d:
0a:60:e2:a6:7b:71:fd:cd:73:ec:ab:c9:1d:cf:94:f9:79:82:
90:bd:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:50 2026 by rpki-client