This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa
File: an1Tdbj5z52i760TcgMy1zpUrg0.roa (raw, json)
Hash identifier: hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=
Subject key identifier: 6A:7D:53:75:B8:F9:CF:9D:A2:EF:AD:13:72:03:32:D7:3A:54:AE:0D
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 019C4CB5DEEB0342ACA4B0BB3F1C9F29891C
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa
Signing time: Wed 11 Feb 2026 12:38:33 +0000
ROA not before: Wed 11 Feb 2026 12:38:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.83.238.0/24 maxlen: 24
45.150.196.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:b5:de:eb:03:42:ac:a4:b0:bb:3f:1c:9f:29:89:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Feb 11 12:38:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7d5375b8f9cf9da2efad13720332d73a54ae0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:de:9c:f3:74:4c:bd:3c:9e:66:7b:63:01:
9a:d8:c2:08:ba:8f:e2:62:77:7d:a6:56:e0:fe:b9:
4e:8e:e1:ca:f0:cf:da:6d:b9:a8:63:da:dd:aa:3d:
94:03:78:52:94:11:3c:cc:a5:2f:b7:fe:1c:cd:4d:
a4:c0:99:b5:2f:8e:2e:22:01:3a:13:3d:50:5e:ef:
5d:f5:5c:cc:36:11:d2:4b:d9:e6:c5:c3:18:78:e2:
d2:81:37:41:50:80:70:30:bb:94:6b:97:68:0f:40:
b1:68:3e:ac:21:6e:72:b1:ca:ba:1b:2c:7b:dc:90:
18:c2:68:b6:c8:64:fd:3b:92:ce:bd:0c:71:c2:19:
34:14:d3:85:64:d4:33:e8:1c:80:7c:2e:f5:d1:3b:
f3:fd:73:56:92:c8:44:21:43:46:9d:ed:e7:1f:53:
c1:70:69:31:ab:4d:58:5b:3f:54:2e:0a:64:fd:1c:
54:20:50:1a:50:b5:18:e9:61:9e:01:b1:a3:b2:8e:
b8:7a:e8:bb:bf:9b:61:86:86:ce:09:06:2f:8d:e8:
1a:c4:d0:28:65:21:c0:e8:ad:54:69:62:6e:2c:ce:
fd:28:43:71:c1:a7:f7:a3:4c:aa:e7:a5:fd:70:bc:
94:0e:63:fb:11:53:1b:f3:66:e1:5c:7a:62:30:dc:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:53:75:B8:F9:CF:9D:A2:EF:AD:13:72:03:32:D7:3A:54:AE:0D
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
45.150.196.0/23
Signature Algorithm: sha256WithRSAEncryption
80:59:87:b3:7f:85:55:02:3a:bb:51:e8:18:08:b8:90:40:66:
86:fa:c5:e1:96:7b:01:19:65:eb:a1:af:15:97:f6:96:bc:be:
44:ab:df:a1:f5:9a:82:3a:79:70:b7:27:bb:0f:20:38:04:be:
a2:44:4d:8e:ef:4a:34:17:ed:fa:c2:64:1b:e7:f2:1c:e4:9c:
23:2d:69:39:ac:07:5d:a1:1b:65:9a:a3:39:7e:8a:a1:9c:ca:
4b:92:96:81:ee:c4:69:68:22:b2:6c:61:62:1b:cb:b1:83:31:
9f:9a:78:02:47:c1:c2:20:88:0e:95:be:73:47:5e:72:81:84:
38:65:6c:2a:7c:0d:e3:f7:8f:2e:ad:0e:f0:b8:f5:2e:eb:b0:
85:49:55:88:17:92:b5:9d:87:b6:51:c3:b4:7d:05:73:f6:6a:
e9:af:16:23:9f:1f:47:76:2a:25:9b:09:52:54:09:96:a9:d1:
d0:71:81:20:3d:00:bc:bc:b8:1e:a6:22:c2:4f:e2:83:d1:0a:
3c:c6:3a:d3:17:85:11:b2:26:fc:2f:e9:63:17:41:98:8e:5e:
db:cd:b0:98:97:a1:88:56:39:b9:5d:28:79:90:9f:22:95:8f:
f2:62:5c:f7:37:74:b9:d6:df:e2:40:6a:21:6a:32:e9:6d:fb:
69:24:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:30 2026 by rpki-client