This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/q07AwoeAHG6jHueO7q9HXMyxFjs.roa
File: q07AwoeAHG6jHueO7q9HXMyxFjs.roa (raw, json)
Hash identifier: KbddfU+aGzifwawc6lQ9wXWnokH881+sm51JZkWk/6U=
Subject key identifier: AB:4E:C0:C2:87:80:1C:6E:A3:1E:E7:8E:EE:AF:47:5C:CC:B1:16:3B
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019B7AC7E095F4E8DA9537AAB8B0AE846F1A
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/q07AwoeAHG6jHueO7q9HXMyxFjs.roa
Signing time: Thu 01 Jan 2026 18:17:58 +0000
ROA not before: Thu 01 Jan 2026 18:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206014
IP address blocks: 45.13.156.0/24 maxlen: 24
2a00:6420:ff00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:e0:95:f4:e8:da:95:37:aa:b8:b0:ae:84:6f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Jan 1 18:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab4ec0c287801c6ea31ee78eeeaf475cccb1163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:b6:41:2f:bd:f1:d1:f6:f4:da:da:e3:1c:
ed:a0:0e:1a:bf:a4:3f:2e:3f:17:dd:08:ac:ee:66:
b5:d3:e3:4e:d4:0c:e2:6a:6b:71:22:ee:14:d7:9a:
ce:b0:55:85:a5:a3:3c:cb:35:60:39:6b:f8:15:ac:
b4:2c:c9:50:85:8c:c9:b2:9d:db:d6:c5:87:34:d8:
4e:e5:ed:1d:8a:89:ed:ed:4a:d2:4c:37:ee:b0:29:
24:91:1c:9e:f2:7b:3c:ed:57:12:ab:81:4f:88:4e:
db:34:21:c8:07:0c:7b:43:20:56:70:f8:5e:49:03:
90:eb:dd:44:c4:fe:a9:fd:1d:b1:7b:d7:42:e0:01:
f5:0e:d1:07:28:1c:b2:65:93:a8:1c:45:3e:21:b4:
f5:4d:38:a7:6b:54:7c:f8:7a:26:69:2a:28:f2:c4:
87:99:e4:dc:25:5c:23:3e:e9:45:8f:37:8e:b7:e9:
c9:4e:6c:34:99:90:82:bb:fd:d2:83:fb:70:77:ad:
ce:04:45:9c:fe:96:f0:17:35:77:6e:8b:01:13:6a:
c5:eb:56:7b:90:06:5b:e7:14:46:88:51:f0:ea:26:
35:1a:bf:cf:2e:db:6a:22:a8:c7:fb:09:fa:81:13:
80:9b:3d:79:f6:48:e3:7a:08:8c:67:3e:cb:fb:e1:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:C0:C2:87:80:1C:6E:A3:1E:E7:8E:EE:AF:47:5C:CC:B1:16:3B
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/q07AwoeAHG6jHueO7q9HXMyxFjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.156.0/24
IPv6:
2a00:6420:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
a0:e3:26:c6:1d:d7:e1:8c:14:ec:ae:6b:7d:ef:d1:86:56:53:
13:e2:6f:17:a9:ca:87:f7:3c:d2:15:32:1a:9a:e7:3b:81:bb:
fa:81:b4:07:12:b5:9b:ac:50:fb:e7:19:e3:4d:96:7f:bf:06:
94:d5:e9:0d:67:41:36:c2:c1:72:92:ec:0c:80:a1:5c:b8:d2:
54:d9:f4:cf:ea:c3:44:40:a2:1a:77:48:42:c9:e3:6d:f7:35:
63:3b:27:e2:e4:81:9b:44:61:16:32:18:21:c6:82:c6:7f:cb:
36:4c:ae:8f:ca:00:3e:11:9c:08:f4:45:2b:9b:76:ad:ff:b5:
52:6f:8b:24:1d:3d:33:75:42:2d:13:7e:2a:f3:c6:1a:f2:c7:
c4:e3:ab:94:ea:68:e0:a5:e3:99:52:c8:1f:ef:a0:9c:80:57:
f2:2d:62:e3:cb:8f:b0:33:23:65:98:69:69:a6:37:86:e0:f2:
e3:d2:dc:7b:f9:f5:8e:a7:05:5b:61:e1:ea:28:39:e0:11:b2:
0b:f2:68:21:c2:81:6c:a7:6d:68:eb:2a:ed:83:d5:19:af:05:
52:5f:0b:2c:46:f9:5a:bc:79:09:f0:05:03:18:09:4e:4f:c8:
96:09:10:78:31:41:d9:06:57:46:81:df:e1:3d:fd:63:ac:f5:
c9:64:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:16 2026 by rpki-client