This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa
File: 15CUOGL2FJc4NFMLFki_kL0CjhE.roa (raw, json)
Hash identifier: NRfPNsFdg/IFVE3xwdzbdbl6oOZsz8uVGy01eAf6YJ0=
Subject key identifier: D7:90:94:38:62:F6:14:97:38:34:53:0B:16:48:BF:90:BD:02:8E:11
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 019BBA21DA37C34F085226DDF8C707312A04
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa
Signing time: Wed 14 Jan 2026 01:32:19 +0000
ROA not before: Wed 14 Jan 2026 01:32:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 45.150.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ba:21:da:37:c3:4f:08:52:26:dd:f8:c7:07:31:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 14 01:32:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d790943862f614973834530b1648bf90bd028e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:53:1e:79:27:00:37:69:b4:c9:10:34:d0:
f0:8e:97:72:62:ef:78:01:04:9c:8e:4c:8a:ac:a6:
db:89:48:d1:b7:69:81:cc:9d:46:a7:ac:d9:ae:cb:
58:ad:f7:00:0e:bd:96:0f:ee:da:03:2b:7a:48:2a:
5b:a0:7a:82:fa:e0:57:5e:98:a5:49:0e:eb:10:5e:
5c:5f:f5:83:52:ea:39:99:b4:7f:46:79:57:8e:1f:
50:c6:be:83:63:78:ba:70:57:8e:c0:71:7c:2d:d2:
4c:8e:ec:0e:c4:24:aa:97:42:6a:91:09:b4:78:0a:
a1:7f:cf:15:36:4f:36:1e:49:10:d8:94:b1:73:74:
58:1b:ce:29:fb:1f:d5:7a:ec:63:20:97:16:d9:f1:
19:b6:ab:7c:11:a7:8d:d1:91:b4:b5:11:e4:2c:60:
ee:ee:e7:84:ae:06:5a:14:7c:3b:28:be:46:44:97:
ca:61:66:af:05:90:c3:ef:94:a5:27:7d:84:04:63:
f0:7a:2f:c7:61:83:e8:27:ed:5e:c0:3e:57:40:f4:
aa:08:cf:77:d1:51:9a:85:78:88:4e:90:09:e6:e6:
46:f4:da:e9:02:b1:57:31:e5:d0:75:80:6a:d5:89:
59:27:f3:4c:9f:18:3d:7e:98:43:a1:1c:a5:01:d0:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:94:38:62:F6:14:97:38:34:53:0B:16:48:BF:90:BD:02:8E:11
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f6:2d:4a:1f:50:ac:4e:44:4a:09:cb:f7:f2:9b:0e:4d:39:
1a:a8:5a:b3:55:e8:3b:89:22:d7:f9:c0:20:84:8a:16:19:b0:
ee:82:97:8c:22:7c:7e:0b:8a:33:62:bb:22:dc:ea:6b:f6:7c:
b9:7b:15:ec:db:ff:e3:e0:cc:d4:84:48:df:3e:aa:d7:36:60:
0d:35:f8:28:7f:09:c1:13:29:8b:30:f9:70:f2:9c:ac:58:9a:
89:93:44:a1:55:12:df:34:a4:a6:02:e3:41:06:09:75:86:d9:
60:da:bd:c7:e0:bc:4c:a9:15:27:ab:08:73:b1:89:93:53:05:
36:cc:69:11:69:23:53:0d:8d:87:56:cc:11:e4:66:d8:cb:29:
82:be:a9:3e:9c:03:08:6c:77:1b:dc:56:44:fd:bc:d4:65:81:
16:ea:98:4d:eb:f2:80:5b:ce:7e:56:d2:35:27:e7:a9:cf:71:
2c:46:09:59:c8:95:8c:6c:1f:b5:db:8b:09:09:f1:a7:79:87:
12:06:04:c0:5b:8e:04:d2:6c:e7:f3:b2:84:14:de:9a:12:6e:
5b:f5:58:a4:81:76:2d:b8:4a:f4:3c:84:a8:2c:70:41:34:0f:
5b:c9:97:fe:a4:be:c9:94:72:ff:de:13:f1:0e:83:81:03:f3:
3d:1a:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:50:42 2026 by rpki-client