This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ILSs3yAkZjRmqnrYWL4aAOWsUIw.roa
File: ILSs3yAkZjRmqnrYWL4aAOWsUIw.roa (raw, json)
Hash identifier: YiWgLmGZmLz8iqc/g9QTCu2SwExWzZNXVRxi6DBap9E=
Subject key identifier: 20:B4:AC:DF:20:24:66:34:66:AA:7A:D8:58:BE:1A:00:E5:AC:50:8C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019B7C131DE1705D439D0FE7B761291024E3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ILSs3yAkZjRmqnrYWL4aAOWsUIw.roa
Signing time: Fri 02 Jan 2026 00:19:46 +0000
ROA not before: Fri 02 Jan 2026 00:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28435
IP address blocks: 45.133.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Jan 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:1d:e1:70:5d:43:9d:0f:e7:b7:61:29:10:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 00:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20b4acdf2024663466aa7ad858be1a00e5ac508c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:80:3f:1e:9a:e8:73:b9:da:a0:6c:8e:73:
af:cb:4f:97:da:62:c0:98:65:27:3d:66:ea:0c:a1:
dd:db:87:61:de:5a:11:29:5a:f2:00:3d:73:92:af:
79:20:d1:a9:66:8d:b2:69:af:83:35:b7:63:eb:8a:
19:ed:a1:56:6e:68:4b:40:23:a0:d6:a5:0d:db:80:
d8:d1:e6:79:4f:ee:f9:8f:79:1e:a9:62:96:4f:1b:
cb:9c:64:ea:4b:8b:17:10:2f:59:83:d5:48:c6:62:
d8:1c:96:65:2f:f5:b8:e0:89:d1:63:fe:57:f1:55:
49:f0:ac:89:51:1b:90:90:44:3a:68:34:03:c9:bf:
c0:93:e5:34:c7:c6:ae:ec:19:30:6a:17:57:37:81:
10:e9:75:9f:73:5f:a2:cd:1d:ee:4d:5d:b7:c5:dc:
ae:e0:f4:ae:a7:10:da:8b:06:73:7d:bc:68:74:42:
ec:0d:ba:45:93:a2:a1:6b:e6:cb:80:d5:3b:d1:ab:
79:3e:89:39:3d:a5:7d:b7:3a:b8:28:65:ad:b1:73:
71:01:98:a3:f6:cc:28:01:31:4e:d7:8b:ec:16:28:
e1:21:16:83:63:37:9c:c1:bf:41:15:a7:e0:d5:15:
48:e1:78:35:e5:5f:f5:c4:26:b3:e0:94:73:13:68:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:AC:DF:20:24:66:34:66:AA:7A:D8:58:BE:1A:00:E5:AC:50:8C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ILSs3yAkZjRmqnrYWL4aAOWsUIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:93:bd:71:43:fb:17:d5:b1:4e:80:5d:00:e4:b3:d2:e4:73:
0c:16:15:8a:4c:13:f8:ee:28:90:db:f2:13:c1:bd:69:02:af:
b5:25:6c:d6:01:20:db:f4:22:94:d6:70:7d:9f:0c:69:10:9f:
e1:38:bc:b7:e8:7d:af:e5:8f:56:3b:c6:c2:ac:8c:6f:4b:fd:
02:f0:ec:8a:8a:a2:4f:a9:3e:81:cf:e1:6b:9e:b3:76:37:64:
f6:f9:f1:e4:7e:09:dd:1d:91:17:57:43:aa:f3:33:b8:7a:a6:
98:97:ed:fa:6c:a6:c1:fe:89:5f:ef:2b:88:a0:e8:1c:90:5b:
3b:1e:ea:3a:62:07:ef:34:97:dd:e4:68:ca:5e:25:3d:69:ae:
3d:73:dd:a0:eb:d2:6d:6c:fa:13:38:cd:f2:49:21:3b:c1:12:
8c:d3:a2:74:1d:92:c1:fd:82:d3:9a:55:6a:07:f2:c9:a4:70:
4b:e0:10:f0:f3:de:64:b0:64:9f:e8:f8:39:6d:8f:b4:aa:c6:
22:87:c0:69:6a:5c:45:c9:38:0a:79:70:55:03:2d:80:f0:2b:
1b:8b:2e:63:30:a3:51:d0:b6:e3:f6:49:59:ae:4a:91:f6:b4:
41:26:92:92:31:d8:6a:f2:a7:62:2b:50:a3:e3:f5:c3:ff:74:
92:99:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:34 2026 by rpki-client