This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa
File: xmvSP8pUB1Ym57D-0sGr9DdSye4.roa (raw, json)
Hash identifier: UE38+8HRiUR1RdFDjV2njpRyloF1JsZqfYgliz8SXFE=
Subject key identifier: C6:6B:D2:3F:CA:54:07:56:26:E7:B0:FE:D2:C1:AB:F4:37:52:C9:EE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019B797DEFA5DE0A82249C41C532F1F2CDD3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa
Signing time: Thu 01 Jan 2026 12:17:35 +0000
ROA not before: Thu 01 Jan 2026 12:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7d:ef:a5:de:0a:82:24:9c:41:c5:32:f1:f2:cd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 12:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c66bd23fca54075626e7b0fed2c1abf43752c9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:51:f0:07:db:2c:23:a3:f4:00:bf:64:08:
c4:98:13:a9:9f:96:fc:ce:c5:e9:6c:7f:21:6e:eb:
6f:e0:2f:1c:c2:10:a0:57:6a:c0:1a:81:4c:78:e0:
a1:83:c8:f2:8a:3b:f9:a3:38:03:40:b2:b2:8b:7f:
c7:b9:46:38:37:e0:71:be:8b:03:df:f5:85:e0:12:
14:2d:69:2a:6d:a3:75:d9:4f:fa:80:80:cd:1b:95:
c2:b8:ce:d3:51:e8:90:20:d1:7c:c0:7d:13:3f:29:
e6:f2:2f:17:ac:5b:06:5d:95:b7:0a:00:0e:ce:b0:
dd:79:e3:21:bf:b4:2e:82:73:1a:e8:5f:2b:5e:49:
dd:16:f2:39:7f:4c:b1:4a:00:2d:b4:a1:e5:34:e0:
57:c8:dd:90:17:40:a8:76:c3:ee:60:2f:1f:37:5f:
13:82:a3:64:42:93:9e:c1:18:44:c1:12:7f:b4:03:
62:fc:86:c5:42:ad:fd:51:43:49:a0:6f:ba:c5:2c:
42:a1:ba:e3:62:78:90:83:67:e0:8b:9b:8e:21:f2:
5f:4b:62:bb:67:c9:13:bd:45:6b:b9:da:49:82:05:
92:d4:b2:64:ed:b2:84:de:95:07:00:59:a8:de:72:
35:87:04:b6:74:06:31:66:8b:48:cd:1d:f0:a7:b7:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:D2:3F:CA:54:07:56:26:E7:B0:FE:D2:C1:AB:F4:37:52:C9:EE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ff:c6:93:33:a1:05:da:65:10:cb:61:5e:7c:b4:68:30:c6:
ef:49:20:c7:06:b6:bc:8e:95:4a:03:33:a0:cd:8f:c2:ae:63:
65:0b:be:bd:c6:12:47:5a:bf:75:98:e4:cc:73:0f:2d:ff:71:
e9:c8:4a:7a:e8:b0:38:2f:bc:c1:0a:a1:55:d3:09:66:77:80:
f0:d8:1a:a1:ac:dd:54:e7:99:79:ac:1c:6f:66:cb:49:44:65:
04:19:f2:ab:c3:1a:36:27:7f:13:59:0b:5b:80:8a:a6:de:15:
df:27:f9:8d:31:ea:ea:37:ea:7d:6c:52:23:ea:b7:31:82:c7:
9a:75:ec:f7:ec:81:01:0f:d6:b7:aa:80:1e:e1:25:b1:02:4e:
d9:bc:b4:bb:85:72:e4:8f:e2:74:81:04:e3:02:4f:44:77:a3:
9d:57:7d:93:cb:a8:60:08:f1:f9:1c:b0:4b:ad:34:ca:60:dd:
9b:04:35:3d:4b:64:e4:1b:2e:99:e0:ec:0e:97:7e:f3:c7:55:
0c:f3:b8:8a:fa:1a:51:66:c2:f4:73:24:f0:eb:6e:9b:86:9d:
8c:5e:57:e8:bf:df:0d:97:da:64:07:bb:31:df:0b:e5:38:59:
1b:d7:bb:15:ce:98:23:13:c4:f1:87:2a:63:77:bb:44:eb:f1:
c0:73:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:54:40 2026 by rpki-client