This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa
File: DIHoHIFGJRZtddi2IYfzR_PA3S0.roa (raw, json)
Hash identifier: CgeECnVxEx0Z7wXvSDtmqYoZsUcQ8ALqdCSIEMMqtzw=
Subject key identifier: 0C:81:E8:1C:81:46:25:16:6D:75:D8:B6:21:87:F3:47:F3:C0:DD:2D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019B797DE5E4530017BCB7B0E1D8C3B21C9B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa
Signing time: Thu 01 Jan 2026 12:17:32 +0000
ROA not before: Thu 01 Jan 2026 12:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 206.245.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:e5:e4:53:00:17:bc:b7:b0:e1:d8:c3:b2:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 12:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c81e81c814625166d75d8b62187f347f3c0dd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:d3:f3:e0:4e:b6:da:b0:3a:20:55:f0:85:
49:93:78:ed:73:92:f8:68:3e:f1:4e:10:da:b2:16:
7b:89:7d:af:9c:d2:70:55:da:a4:5c:9b:db:4e:27:
f8:56:89:86:c3:e8:91:e0:13:67:2d:36:99:73:ce:
68:9a:39:72:7a:df:7b:e2:eb:4a:08:63:75:a6:12:
cc:7f:bb:ac:28:23:86:14:2d:89:06:c8:b1:f2:6b:
d9:60:11:62:9e:56:d2:b4:11:ab:9d:4e:2e:ae:25:
8e:56:88:a9:f3:ea:69:19:3b:b1:6c:57:bd:7b:51:
01:2d:a7:52:fb:79:28:35:82:bb:e3:7a:ca:45:84:
ba:15:3f:20:53:87:76:30:19:76:66:a9:fc:40:26:
d4:27:1d:8d:5e:aa:f4:4e:ed:37:ea:cc:eb:79:0c:
ca:10:c7:f7:31:f6:9c:d8:76:a9:37:26:47:3f:32:
1d:9e:42:08:9d:9d:de:5b:4c:d6:b2:43:e5:b5:d7:
55:c2:26:71:ae:be:00:1c:b9:be:06:29:8d:6f:07:
64:d6:75:b7:62:fd:58:19:3a:44:1c:75:65:0f:42:
2b:bc:e2:4d:36:cd:ce:36:27:0b:d7:53:df:14:46:
d6:d9:46:11:2e:c6:0d:29:cc:2f:37:6d:50:9f:60:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:81:E8:1C:81:46:25:16:6D:75:D8:B6:21:87:F3:47:F3:C0:DD:2D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:af:9b:18:3c:da:8c:36:5e:85:22:96:49:69:ac:be:b4:2e:
2c:42:52:9d:8a:4f:9d:28:96:48:e6:3c:e4:83:1e:81:f3:d7:
4f:e8:a6:6e:fd:ab:42:9b:a5:9b:fe:4a:af:e0:cc:74:9a:bb:
6d:1b:d9:7a:43:b7:17:16:0d:3d:94:40:77:aa:8e:07:62:25:
2c:79:b8:7e:91:a8:6a:fc:87:f7:b2:b1:d8:1c:74:3b:6e:a3:
98:6c:f3:b5:e2:6d:da:ed:e8:0f:3a:72:9b:9c:81:e9:b2:54:
7f:29:29:8f:60:6a:c2:3c:61:d9:79:f4:1d:4c:6e:05:77:2f:
c4:7e:1e:6a:14:a6:fb:9d:af:2e:aa:71:ff:11:cc:08:29:26:
72:2b:0a:87:a1:69:74:82:6a:dd:70:01:bf:15:4f:59:73:32:
f1:39:cf:7c:11:75:dc:e9:1d:15:64:a9:c3:d6:ed:b9:f6:18:
56:35:dd:2e:10:bc:7a:96:46:10:b5:3b:74:50:0b:38:20:21:
cb:9e:19:7f:bf:61:a3:ca:d6:0d:22:9e:f7:e6:84:ea:e4:b4:
93:33:d8:0e:cc:d9:21:1c:41:89:7f:30:0d:87:23:4a:34:10:
91:6c:9c:12:63:51:7d:48:71:cf:4f:e0:b0:6c:26:14:e0:ba:
2c:42:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:26 2026 by rpki-client