This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa
File: dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (raw, json)
Hash identifier: X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=
Subject key identifier: 75:81:1C:07:47:F4:10:25:4B:C2:86:FD:01:26:3E:56:5F:9C:36:21
Certificate issuer: /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial: 019B77C6DFCC1149869D32F5B098067441D3
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa
Signing time: Thu 01 Jan 2026 04:18:00 +0000
ROA not before: Thu 01 Jan 2026 04:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197293
IP address blocks: 45.144.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:df:cc:11:49:86:9d:32:f5:b0:98:06:74:41:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
Validity
Not Before: Jan 1 04:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75811c0747f410254bc286fd01263e565f9c3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:65:c2:82:85:fb:b9:b0:48:2c:15:20:f8:
f6:20:36:ea:da:54:fa:4f:89:70:ca:7a:92:13:e9:
70:07:51:3b:77:91:2f:8d:05:ff:59:76:8a:69:85:
71:c9:b1:35:9e:c8:de:2d:a6:3d:29:dc:ca:2b:03:
e7:de:b5:b6:df:c9:82:2f:65:34:b5:9d:1c:55:a8:
68:12:00:bf:d2:ea:08:f3:af:79:c6:b3:aa:89:45:
99:62:c7:de:37:88:b0:ae:cc:ea:a1:8f:c2:10:da:
8b:d7:c2:3b:32:05:de:da:f6:23:2c:35:d6:93:86:
2a:71:f6:4c:e2:9e:73:c9:42:ea:ee:1f:27:08:b9:
b4:a6:0f:2b:93:25:70:e0:87:be:11:fa:f5:f9:cc:
fc:0d:ea:7f:b1:ac:ca:57:dc:62:fd:a3:3d:28:1f:
8a:b0:8a:99:18:11:2f:cd:fb:2b:ff:e1:f2:03:33:
1e:a0:3a:17:43:e5:76:e8:05:01:64:45:e3:65:98:
7c:c5:53:7d:35:f7:dc:6b:77:13:40:3b:3c:66:a5:
c0:e2:95:ad:23:15:de:86:42:4e:56:63:92:81:0b:
db:b2:00:e3:a0:c3:78:0e:8c:f2:59:70:69:ca:c7:
7e:35:88:97:48:7d:0f:92:0b:99:28:4a:37:7a:62:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:81:1C:07:47:F4:10:25:4B:C2:86:FD:01:26:3E:56:5F:9C:36:21
X509v3 Authority Key Identifier:
keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:d6:b2:3c:d7:df:06:d5:0d:9e:0e:cc:8d:48:5e:31:ed:d6:
32:ee:42:66:ff:a9:90:06:03:c8:29:78:f0:94:7e:2e:af:dd:
50:87:55:d7:d2:c4:55:9e:17:3b:e9:68:37:2e:1a:23:72:be:
a6:69:d1:f3:d8:46:ed:0c:c1:3d:72:8d:ee:9b:76:2a:07:5a:
7d:ae:1a:7b:78:d5:2d:4d:c3:a5:a3:ea:aa:1d:08:fe:8a:26:
38:aa:ba:44:53:d3:07:b2:4a:08:a2:93:06:65:28:07:19:6e:
2b:6f:86:58:1b:c7:aa:95:dc:fa:1e:21:f2:de:92:b2:ce:1d:
92:b5:a7:66:62:0f:94:8d:87:2b:44:6a:2a:b7:2b:35:ba:85:
8a:3e:0d:44:0c:d1:8b:68:10:6f:86:33:cc:88:21:ab:5a:e3:
b6:50:35:bc:d7:26:d1:ff:84:1e:b7:d6:fc:e9:48:c2:07:d9:
fc:49:42:55:2b:10:73:81:f9:00:0a:72:c3:fd:49:db:10:b1:
8c:70:99:c6:1d:5c:d9:97:49:1f:dc:26:81:b5:a6:c6:ec:a1:
6e:fc:c8:0f:fd:ea:79:bd:12:f4:4f:26:eb:1b:58:a7:bb:ed:
d4:71:dd:30:eb:34:f3:99:6a:3e:b8:60:62:19:d5:b4:13:f7:
15:be:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:47 2026 by rpki-client