This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa
File: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (raw, json)
Hash identifier: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=
Subject key identifier: AC:3B:5E:4C:41:86:3F:1B:7B:09:A2:46:06:02:AB:D4:02:CB:81:33
Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial: 019B77592FAC6527EAC24E4AFABD02669BDA
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa
Signing time: Thu 01 Jan 2026 02:18:12 +0000
ROA not before: Thu 01 Jan 2026 02:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 2a14:fc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 08:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:2f:ac:65:27:ea:c2:4e:4a:fa:bd:02:66:9b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Validity
Not Before: Jan 1 02:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac3b5e4c41863f1b7b09a2460602abd402cb8133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:85:87:4e:d9:33:70:d7:3a:a4:2c:47:9d:
cc:38:b5:11:8d:40:ae:27:77:91:c4:a5:e6:89:50:
7d:21:75:25:d7:09:eb:f2:e4:d8:81:70:da:22:2a:
fd:78:39:5c:45:74:f5:17:3b:61:39:4b:5f:80:69:
1a:37:f6:c1:0a:b1:e0:a5:9c:5e:62:78:bd:32:b6:
be:67:58:76:3b:d3:68:d3:5d:b3:a8:dd:33:d0:ef:
b3:33:c9:e5:99:10:40:05:53:a1:5e:a2:fc:9a:b7:
5c:ae:49:36:30:32:8f:09:54:19:cf:9a:69:b2:a9:
2a:fe:33:f1:ff:7d:74:a3:98:a2:39:b0:b1:6a:61:
6b:8a:5f:9b:2c:68:6f:84:a0:2e:ea:9f:d5:d5:a7:
85:b0:cd:a6:6a:3c:70:a3:88:d1:4e:c8:cc:22:f3:
a5:41:1f:e7:8b:bf:8e:31:5d:0b:e3:52:07:a3:5f:
7c:3d:12:67:02:be:1f:5d:fd:45:9b:a2:93:e3:5e:
2f:8d:42:1b:22:85:21:57:21:73:b2:42:4b:24:4a:
6d:e5:08:6a:3f:04:16:05:da:da:85:fe:44:45:ac:
87:5a:8a:fe:c7:7c:27:7b:21:6a:73:a3:0b:6b:c7:
c2:49:8c:81:1b:f3:32:f0:36:16:64:c6:09:fe:fd:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:5E:4C:41:86:3F:1B:7B:09:A2:46:06:02:AB:D4:02:CB:81:33
X509v3 Authority Key Identifier:
keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
29:af:26:45:89:97:98:dc:cf:8f:76:3f:4d:66:66:a4:5c:5b:
92:85:cc:1b:a0:59:7f:10:07:e0:2d:51:f4:e6:8f:a2:e5:a6:
87:7b:25:27:d7:08:9b:ad:b4:64:8a:e8:7a:bc:7b:79:b4:64:
cc:31:82:b0:c8:7f:66:63:b1:7c:3c:2a:a3:4a:ba:d8:4a:ef:
e1:4f:f3:af:7f:7f:c1:d6:4c:54:17:10:0d:0f:c5:e7:e6:a7:
09:7d:35:99:30:c8:1f:d3:b2:80:e2:7d:43:93:26:f4:6a:9a:
4d:7b:da:58:b9:32:2e:ea:89:8b:67:3d:90:47:31:a5:4c:57:
5e:21:1b:39:df:0f:3c:c5:3b:9b:67:7e:c8:2b:ff:62:dc:3c:
19:7b:df:5d:42:b5:c6:cd:cd:4d:f0:99:0f:4b:12:6d:16:17:
ee:6b:94:30:de:6d:81:1e:6d:65:c9:d2:39:2c:cb:ec:f4:2f:
10:da:fb:48:06:ee:83:fb:c3:c6:9c:96:fe:13:ff:b6:4b:8c:
94:b6:b3:6b:2b:0c:3a:9a:53:0a:8e:36:3f:24:73:25:01:b2:
2f:dc:b7:cf:57:ed:14:21:3d:33:43:b0:92:7b:c8:2f:bb:78:
6c:80:0c:5b:5c:3b:2c:1f:67:d2:95:34:c7:2e:02:aa:44:4a:
58:64:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:32:16 2026 by rpki-client