This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/07aASV95hsZ_ajmmyceXjC3Z-_0.roa
File: 07aASV95hsZ_ajmmyceXjC3Z-_0.roa (raw, json)
Hash identifier: 0hw34FzKYEe0BLIoFfVjW80dLTW8rWudfDXK5iJzjqQ=
Subject key identifier: D3:B6:80:49:5F:79:86:C6:7F:6A:39:A6:C9:C7:97:8C:2D:D9:FB:FD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019BBD5E67E50973A36141DA0BC458DC16F1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/07aASV95hsZ_ajmmyceXjC3Z-_0.roa
Signing time: Wed 14 Jan 2026 16:37:19 +0000
ROA not before: Wed 14 Jan 2026 16:37:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273285
IP address blocks: 45.142.41.0/24 maxlen: 24
203.88.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bd:5e:67:e5:09:73:a3:61:41:da:0b:c4:58:dc:16:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 14 16:37:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b680495f7986c67f6a39a6c9c7978c2dd9fbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:91:0c:49:30:47:d0:48:42:9e:ac:e8:77:
b7:46:47:bb:c2:ed:2d:9c:00:27:da:b0:82:13:b3:
6e:75:3a:7c:28:7b:cc:8c:a6:ed:4f:aa:7e:78:28:
ac:4e:9f:6c:f7:07:05:b1:9e:46:f9:3c:f5:0a:d9:
42:f1:f7:2b:2d:2b:95:aa:a3:41:f8:9c:e6:21:db:
65:42:bc:b8:08:50:b2:0c:42:46:30:7d:c9:3a:40:
24:d0:a2:1c:a7:43:34:7a:82:7f:43:57:4d:5a:dc:
d5:5c:5c:39:80:c5:66:41:72:7e:0a:ec:b7:7d:d4:
bd:b4:38:9b:47:c6:fd:e8:25:e8:aa:27:a8:ef:da:
ba:df:47:5b:85:a5:c0:4e:85:6c:88:86:30:15:a7:
75:ec:e9:a4:51:86:da:0f:f5:db:75:a1:bf:3c:82:
39:27:da:d6:42:e2:de:35:f3:ed:c6:d1:e8:59:59:
c1:2a:d8:e2:ac:c2:bf:c6:f5:b1:46:7c:6f:31:00:
32:e5:a8:2f:b5:3b:0a:ab:4e:7b:e2:14:bd:51:10:
10:da:e4:23:83:79:e6:c2:6b:08:9c:f6:57:19:72:
8e:f8:68:66:7c:23:83:f8:82:9e:8c:00:ea:fa:d1:
f1:ed:21:a9:d4:7a:c6:84:53:12:bc:98:3d:08:61:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:80:49:5F:79:86:C6:7F:6A:39:A6:C9:C7:97:8C:2D:D9:FB:FD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/07aASV95hsZ_ajmmyceXjC3Z-_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.41.0/24
203.88.96.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:5a:5d:58:11:07:ff:c1:8e:5c:81:f9:83:e9:23:be:31:50:
76:7b:ad:34:e9:42:05:ad:fe:d3:7c:4a:87:69:91:3b:07:2c:
6f:af:2b:73:44:a9:92:9c:f3:53:68:ad:0d:58:2d:53:6d:47:
99:bd:47:7e:16:a9:0c:ed:a7:1c:83:a2:0c:dc:94:67:0b:9a:
86:98:bb:d5:2d:f2:ac:00:63:6d:f9:34:37:87:94:86:ba:37:
cc:91:f9:c8:7a:c9:e2:e1:9b:bd:e5:1e:9c:97:c6:17:13:13:
4a:a4:21:5d:ae:f9:7d:ca:be:50:60:7b:76:39:d7:79:f5:9b:
d9:5a:b4:ac:27:91:10:76:f5:49:92:5b:7f:94:60:55:fe:94:
bc:f7:4e:19:d8:cb:45:5c:08:64:06:e0:6a:40:15:a2:fa:45:
d4:e9:59:90:f6:ff:c7:e2:bc:a5:32:09:6a:4f:19:d4:f7:7a:
64:a3:1a:69:10:93:28:c7:a7:6f:d9:ec:c3:17:d3:9e:ad:7f:
ac:04:e9:f5:fd:6c:95:4a:c1:fb:de:0a:0c:ad:03:90:de:65:
e9:94:9d:eb:83:81:f5:e1:36:7a:26:df:23:e2:4d:a3:db:74:
74:49:ad:f3:f3:de:1c:4e:0c:50:9d:a0:bd:9f:1c:a4:e7:41:
3a:07:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:36:11 2026 by rpki-client