This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/C4dhhSdCne6HfKBYrO0fMDCR52U.roa
File: C4dhhSdCne6HfKBYrO0fMDCR52U.roa (raw, json)
Hash identifier: uDVsLBMCBkiLe3jkQqb41lNCpW9vDxKBn3Ey847tq5w=
Subject key identifier: 0B:87:61:85:27:42:9D:EE:87:7C:A0:58:AC:ED:1F:30:30:91:E7:65
Certificate issuer: /CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Certificate serial: 019B78A24E64F94557CFD89148EA6FE01860
Authority key identifier: D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/C4dhhSdCne6HfKBYrO0fMDCR52U.roa
Signing time: Thu 01 Jan 2026 08:17:41 +0000
ROA not before: Thu 01 Jan 2026 08:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208859
IP address blocks: 45.81.144.0/22 maxlen: 22
45.81.144.0/24 maxlen: 24
45.81.145.0/24 maxlen: 24
45.81.146.0/24 maxlen: 24
45.81.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:4e:64:f9:45:57:cf:d8:91:48:ea:6f:e0:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d546e24430dba89bdce22c6bf32818cbde6bbca0
Validity
Not Before: Jan 1 08:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b87618527429dee877ca058aced1f303091e765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:e7:b5:71:5c:34:b4:0c:2c:f4:5f:38:26:
7e:41:ed:e0:65:47:a2:2c:a1:85:87:af:3f:2a:a3:
11:83:96:32:e8:67:1f:48:ee:e8:7f:09:a1:af:51:
a2:03:80:b7:83:4e:04:4a:c2:f5:e9:bb:a5:d4:6c:
b7:f8:21:c9:60:2a:09:55:9b:c0:fe:7e:aa:51:58:
18:4a:c7:5f:c6:22:85:91:ed:5c:b0:02:20:eb:67:
19:83:c7:cc:63:2c:64:19:d4:7d:08:05:18:18:2c:
7c:d1:b1:40:9b:05:6d:be:5d:d3:25:d4:1c:01:a7:
d9:1e:d9:72:93:7c:8e:19:9a:0e:f8:f0:dc:35:62:
3b:29:6a:63:48:31:46:ad:eb:4d:ed:4b:4e:ba:b2:
7b:5c:b1:ad:15:7a:9d:1a:3e:dd:d7:f4:e7:96:ec:
d6:60:48:98:31:ff:53:85:36:e6:4b:ab:18:8f:80:
6e:1f:ce:fa:ed:4e:87:87:b1:68:58:65:57:f3:16:
80:d5:cb:0d:0a:b1:22:de:5e:a1:99:66:16:7f:b5:
b6:87:fd:95:68:8c:b0:99:4e:55:7b:9e:80:50:cf:
db:dc:60:0a:92:6a:49:ef:65:bc:01:b7:54:ec:d5:
c2:71:fc:7b:71:c9:4d:95:5f:d8:f7:1a:01:48:c6:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:61:85:27:42:9D:EE:87:7C:A0:58:AC:ED:1F:30:30:91:E7:65
X509v3 Authority Key Identifier:
keyid:D5:46:E2:44:30:DB:A8:9B:DC:E2:2C:6B:F3:28:18:CB:DE:6B:BC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UbiRDDbqJvc4ixr8ygYy95rvKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/C4dhhSdCne6HfKBYrO0fMDCR52U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ece2c4-015a-4bfa-b2b9-d06cfa226c64/1/1UbiRDDbqJvc4ixr8ygYy95rvKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:82:87:1d:7c:e6:65:ad:1d:d5:89:ee:26:bf:96:fb:a1:df:
86:eb:32:e3:ea:83:4c:7b:f4:a0:d3:ac:f9:bc:16:51:71:88:
0b:12:37:36:3f:96:48:81:f2:a2:d7:af:51:36:0a:d2:6a:db:
dc:33:22:91:3d:9a:01:df:87:72:1b:90:6e:1c:4a:c1:82:eb:
41:22:5c:11:65:62:b3:b0:81:4b:cc:90:45:85:86:38:64:a1:
29:ab:85:78:e1:90:7d:fc:3b:c6:13:5e:34:20:2d:3b:b2:f9:
1f:47:3c:7f:62:04:30:87:5f:63:03:c0:ed:0d:2b:4d:9b:9d:
89:6d:e2:5e:86:33:60:f6:bb:75:a2:18:40:43:90:26:40:70:
b5:98:1a:70:05:46:8f:e8:e9:57:b5:4f:30:6f:4c:61:38:eb:
95:6f:89:c8:4b:d4:8d:80:67:7b:40:0b:87:bf:b3:e1:ec:9e:
33:19:19:28:5a:1d:2a:a4:d8:ea:d8:67:1a:31:cb:30:bb:ad:
50:8c:ef:73:09:8e:2f:c0:ad:56:fc:81:4b:08:71:12:72:95:
9a:18:5b:6b:4f:06:b8:6d:a8:9f:94:fd:a8:98:5c:32:c3:fa:
57:8e:6f:19:1b:7b:16:e6:22:9c:2f:aa:5a:22:2a:c2:2e:0f:
37:8b:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:08 2026 by rpki-client