This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/iFx733veg3ipe2CPmZh-NgC00sw.roa
File: iFx733veg3ipe2CPmZh-NgC00sw.roa (raw, json)
Hash identifier: ARVPN7QhpTy4ny+iZlR3c2ozBbWmapoyIfsnLbx+goA=
Subject key identifier: 88:5C:7B:DF:7B:DE:83:78:A9:7B:60:8F:99:98:7E:36:00:B4:D2:CC
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 019B7834E8E1E36F5314D4613BD087C5D2D2
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/iFx733veg3ipe2CPmZh-NgC00sw.roa
Signing time: Thu 01 Jan 2026 06:18:11 +0000
ROA not before: Thu 01 Jan 2026 06:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204272
IP address blocks: 45.155.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:e8:e1:e3:6f:53:14:d4:61:3b:d0:87:c5:d2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Jan 1 06:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=885c7bdf7bde8378a97b608f99987e3600b4d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:1d:5b:af:59:2b:ce:49:0e:2e:5e:f6:e2:
7c:2d:9f:c1:66:98:c7:a7:db:e6:44:51:24:df:4b:
cd:a0:fc:27:87:12:a8:8b:39:25:95:e2:02:39:9e:
17:03:00:8b:a0:36:17:17:29:12:36:a4:1e:ba:0d:
bf:5d:5c:04:bc:dc:91:73:32:b8:fa:cd:95:59:38:
a2:fb:8f:88:f0:06:18:8f:03:cc:48:63:8c:b2:53:
cd:5d:37:c1:21:9a:dc:34:78:2e:46:60:9c:4e:b1:
29:ad:20:96:cb:c4:b2:7a:a7:03:77:62:ee:8d:df:
a0:02:0b:1f:ef:f3:f6:7d:fb:9a:11:c9:8d:27:d6:
42:d5:57:b4:db:f1:ed:87:61:42:b6:c4:65:75:8a:
10:7a:10:6e:17:9d:fe:5f:e2:4e:65:9c:34:d4:45:
07:4c:04:b8:ff:ad:6d:db:90:cd:81:47:94:e7:fa:
62:4e:91:df:1e:b4:4c:07:fc:b7:fd:44:4d:6f:32:
a4:6a:fc:6d:0a:a2:01:64:d7:a8:26:e0:10:97:50:
36:f2:ee:3f:6d:31:60:fb:82:5e:5c:66:9c:58:e0:
0d:fd:c3:37:15:64:5d:d5:4b:fe:95:89:0e:85:99:
e2:e0:b8:4e:01:56:12:11:ed:de:75:34:89:e1:ff:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:7B:DF:7B:DE:83:78:A9:7B:60:8F:99:98:7E:36:00:B4:D2:CC
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/iFx733veg3ipe2CPmZh-NgC00sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:d5:47:5b:c0:df:b3:eb:25:40:f8:04:05:9b:6c:fe:01:90:
31:ff:40:f4:8a:2d:57:11:59:ab:3d:e2:08:03:7d:0b:83:b7:
6c:98:13:39:29:36:53:76:48:08:13:67:50:5b:03:1d:1e:ac:
b9:a9:e1:64:e1:9d:dd:7d:bf:0c:c9:5b:e8:40:fb:e1:a1:70:
ca:ca:b9:11:ec:73:9d:b7:f3:ab:73:d9:e1:f2:49:2e:03:af:
a1:86:d7:dc:5a:77:36:59:0e:4f:e8:08:40:94:41:a0:54:ed:
74:c2:ce:d2:44:d1:f1:22:a5:e0:29:5b:c1:74:35:d2:9e:0d:
34:58:a4:3f:ff:18:53:19:3f:25:5d:5f:f0:7e:50:e6:da:fb:
b5:5f:b0:69:c4:ff:41:91:cd:b6:1c:c1:d6:b8:c8:98:71:4c:
4d:2e:f9:6f:32:15:33:7b:ab:f5:3c:95:35:71:99:f8:63:95:
e5:e7:4e:67:0d:c2:0f:61:6c:21:e0:19:09:50:4a:be:fa:c3:
8b:d6:a9:09:c1:f9:68:e0:c3:c4:41:fc:72:02:f7:c0:92:28:
86:39:0d:61:79:7e:ac:c7:5b:24:d7:d4:37:ee:ae:1c:05:99:
c1:d6:a4:b1:92:ec:84:a8:50:a1:d2:bc:4d:2f:25:e9:c0:fb:
63:1f:a7:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NOjh429TFNRhO9CHxdLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2MzNjNhODgwZmM3MWYzMjJkMTcwZjc0N2VjNTJhMmE5
Y2MwZDUwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODVjN2JkZjdiZGU4Mzc4YTk3YjYwOGY5OTk4N2UzNjAwYjRkMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ngdW69ZK85JDi5e9uJ8LZ/BZpjH
p9vmRFEk30vNoPwnhxKoizklleICOZ4XAwCLoDYXFykSNqQeug2/XVwEvNyRczK4
+s2VWTii+4+I8AYYjwPMSGOMslPNXTfBIZrcNHguRmCcTrEprSCWy8SyeqcDd2Lu
jd+gAgsf7/P2ffuaEcmNJ9ZC1Ve02/Hth2FCtsRldYoQehBuF53+X+JOZZw01EUH
TAS4/61t25DNgUeU5/piTpHfHrRMB/y3/URNbzKkavxtCqIBZNeoJuAQl1A28u4/
bTFg+4JeXGacWOAN/cM3FWRd1Uv+lYkOhZni4LhOAVYSEe3edTSJ4f/PhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhce9973oN4qXtgj5mYfjYAtNLMMB8GA1UdIwQY
MBaAFG48NjqID8cfMi0XD3R+xSoqnMDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAt
MjAyMjJhMDRkMzUzLzEvaUZ4NzMzdmVnM2lwZTJDUG1aaC1OZ0MwMHN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kNTc4MTAtNDQ2Zi00Y2Y1LWJmNTAtMjAyMjJhMDRkMzUz
LzEvYmp3Mk9vZ1B4eDh5TFJjUGRIN0ZLaXFjd05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZuQMA0G
CSqGSIb3DQEBCwUAA4IBAQAt1UdbwN+z6yVA+AQFm2z+AZAx/0D0ii1XEVmrPeII
A30Lg7dsmBM5KTZTdkgIE2dQWwMdHqy5qeFk4Z3dfb8MyVvoQPvhoXDKyrkR7HOd
t/Orc9nh8kkuA6+hhtfcWnc2WQ5P6AhAlEGgVO10ws7SRNHxIqXgKVvBdDXSng00
WKQ//xhTGT8lXV/wflDm2vu1X7BpxP9Bkc22HMHWuMiYcUxNLvlvMhUze6v1PJU1
cZn4Y5Xl505nDcIPYWwh4BkJUEq++sOL1qkJwflo4MPEQfxyAvfAkiiGOQ1heX6s
x1sk19Q37q4cBZnB1qSxkuyEqFCh0rxNLyXpwPtjH6dK
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:48 2026 by rpki-client