This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa
File: o-d6O05K7BPSIDagH_dA7QNFluU.roa (raw, json)
Hash identifier: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=
Subject key identifier: A3:E7:7A:3B:4E:4A:EC:13:D2:20:36:A0:1F:F7:40:ED:03:45:96:E5
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 019B7A5B2A0083740D82BD9ACF3A4BC0E0B0
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa
Signing time: Thu 01 Jan 2026 16:19:13 +0000
ROA not before: Thu 01 Jan 2026 16:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204544
IP address blocks: 45.129.36.0/22 maxlen: 22
45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/23 maxlen: 23
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
185.53.140.0/22 maxlen: 22
185.53.140.0/23 maxlen: 23
185.53.140.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/23 maxlen: 23
185.53.142.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:2a:00:83:74:0d:82:bd:9a:cf:3a:4b:c0:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 1 16:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e77a3b4e4aec13d22036a01ff740ed034596e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:5d:09:ca:14:2a:7a:c8:33:13:66:8e:3a:
e8:45:85:b3:4b:86:12:d8:be:0c:ba:bf:22:6a:4f:
eb:9c:ab:37:26:7b:6a:8c:e5:0e:67:70:94:8a:dd:
61:3b:32:17:09:e9:a3:3e:12:60:44:11:5d:0c:ef:
e8:cb:a4:b1:3d:09:86:e0:aa:0b:da:cd:26:30:9a:
03:d4:7a:95:ed:9e:a6:cc:fc:61:59:e7:9c:d0:4b:
0e:2a:55:71:75:91:51:3d:81:e4:fa:3d:2c:c9:c6:
6d:2d:c4:66:46:ab:3f:7d:8d:60:c7:28:d4:ee:f5:
de:8d:e5:82:63:6d:39:a8:06:10:82:4c:72:33:51:
2a:0f:35:10:db:f7:36:00:6e:6e:ce:3d:cc:2f:2a:
f5:1d:d9:33:03:df:96:23:19:72:9a:af:88:92:f4:
0e:fa:5a:7e:fc:ab:04:c6:e7:3a:8f:e3:18:48:a3:
9b:fa:01:e4:1e:e7:39:c1:56:80:f6:10:46:39:d2:
28:da:94:24:31:59:29:14:a3:78:55:eb:59:7a:c3:
8e:fe:52:a8:70:e3:e4:bd:3c:8f:ee:bf:79:52:01:
d0:f0:bd:1f:e1:9b:e5:a9:b8:f4:19:d1:26:af:6b:
8d:56:75:c3:fd:fa:c2:56:bc:ea:20:69:ab:73:8c:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E7:7A:3B:4E:4A:EC:13:D2:20:36:A0:1F:F7:40:ED:03:45:96:E5
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:c7:52:cd:8b:d3:0e:5e:c3:75:f4:04:95:f4:46:3f:3e:b9:
52:88:45:82:af:43:a9:88:e4:14:0a:b3:2c:53:2d:a6:2e:0f:
c3:8b:60:f5:b5:51:ca:cd:32:98:44:a5:85:46:1b:5e:b2:b5:
6e:f9:63:dc:aa:62:68:0a:f0:96:fa:79:70:76:23:44:55:4e:
c8:b7:1b:de:18:b2:b2:51:b9:00:27:8d:2d:38:0e:5b:ec:8b:
58:30:f9:52:9b:bc:0b:34:69:1d:e4:65:47:07:16:45:11:d7:
af:c8:f7:25:91:8c:57:fb:8b:04:10:2c:67:73:f3:49:ca:17:
9f:00:d0:a1:22:45:61:ef:a6:85:06:e5:6d:69:62:7b:b3:d7:
ba:8a:6d:13:b4:bc:a1:08:ec:03:4c:58:14:13:6d:c6:90:6b:
88:9b:16:35:b6:60:a0:6e:0f:18:41:f2:c2:f4:ff:6b:5e:96:
90:07:11:32:98:34:e6:09:7a:be:8d:1e:8c:2f:ac:67:4d:cc:
b3:ef:75:9f:09:b3:52:ba:04:d0:48:12:0d:91:82:fc:92:b2:
72:0d:e8:96:c2:c4:10:4a:81:19:a2:f8:a1:59:7f:7e:65:a8:
51:5f:00:95:18:cd:c7:ea:24:95:24:ba:47:bf:1e:d9:8e:a7:
fb:05:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:44:09 2026 by rpki-client