This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa
File: ExufsLq2JafGt9v_vHY46Z_MbY0.roa (raw, json)
Hash identifier: oL1Bx4iDdRZS3AGbouRdV9jlLHKuOqspb/EMUICH45w=
Subject key identifier: 13:1B:9F:B0:BA:B6:25:A7:C6:B7:DB:FF:BC:76:38:E9:9F:CC:6D:8D
Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial: 019B79106D3FD191F1B0404F008ABAECCF8C
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa
Signing time: Thu 01 Jan 2026 10:17:58 +0000
ROA not before: Thu 01 Jan 2026 10:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43073
IP address blocks: 45.128.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:6d:3f:d1:91:f1:b0:40:4f:00:8a:ba:ec:cf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
Validity
Not Before: Jan 1 10:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=131b9fb0bab625a7c6b7dbffbc7638e99fcc6d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:dd:c3:39:97:0f:5f:8a:2b:9a:98:4b:45:
dc:ec:86:7e:fd:ff:8b:44:86:11:73:23:49:51:19:
ad:e7:58:41:e1:ff:c8:5f:17:70:b0:1e:f5:44:45:
91:6e:1c:08:68:58:3a:e0:a9:be:76:c4:dc:2f:77:
88:d0:3c:64:43:2d:55:9a:14:db:fc:f0:d5:bb:e1:
d2:2b:14:12:4f:a1:94:af:85:c3:cf:db:67:7e:1a:
00:43:e6:b7:a2:73:1b:fb:1a:7f:ea:c0:5e:4b:37:
06:43:84:61:8a:0f:6f:5d:1c:d5:f4:72:b0:d0:6e:
1a:a0:13:fd:14:2d:5c:c4:21:58:4c:d8:68:41:f9:
09:cb:e4:2c:42:2c:54:8b:21:c6:76:4c:59:ee:0a:
13:1a:42:50:aa:cf:e3:18:78:d3:3f:3d:4a:da:1a:
06:fe:4e:6f:cf:d5:3c:c5:a7:27:31:38:f6:ad:8a:
a4:0a:a8:af:33:66:9a:70:1f:be:0a:b0:9b:b8:9b:
cf:07:ac:1e:c5:a4:e3:71:fd:a1:6f:31:6c:e0:42:
89:dd:07:bf:f2:c8:54:2b:de:c6:7d:4c:04:1c:0c:
0b:74:18:8a:ac:13:bf:44:b0:d2:e8:bd:82:a7:57:
a3:a8:20:74:00:eb:f6:ad:0f:bd:a8:07:0f:f8:04:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:9F:B0:BA:B6:25:A7:C6:B7:DB:FF:BC:76:38:E9:9F:CC:6D:8D
X509v3 Authority Key Identifier:
keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:97:a4:36:9a:26:3e:ee:4f:37:24:8f:13:a8:31:39:f8:6c:
90:27:37:f5:df:32:df:9b:d4:dc:79:0d:43:8a:93:37:05:5f:
64:c4:7b:81:ba:50:13:52:f6:34:f8:c5:00:64:8c:c8:51:11:
39:d2:fd:7d:b4:1e:26:64:7b:f1:5b:99:bb:dd:75:a7:f9:58:
cd:cf:64:f2:42:f2:e4:f8:a1:27:f0:77:98:91:d0:d3:31:94:
8e:ac:99:b4:17:fd:47:b6:43:21:ca:79:a3:34:f3:79:29:76:
8d:6d:49:f4:9c:4c:7e:4f:ce:bc:3f:64:09:20:8e:32:25:07:
70:3a:f6:05:bf:97:36:8c:28:3b:c1:88:e1:88:81:91:32:41:
a1:a6:04:bf:9e:ed:ad:56:37:e0:8f:ae:7c:a4:23:ea:51:2d:
b7:3a:2e:84:8c:fc:46:af:d2:2f:9e:3f:ca:09:a9:2d:d7:b3:
fb:10:03:37:00:61:39:6a:4f:ed:39:d4:50:96:fa:50:81:90:
07:44:af:90:e1:39:c6:7f:51:70:52:b8:52:d9:89:70:96:b1:
09:9c:cc:26:24:8e:d9:87:68:b1:43:aa:34:48:4c:58:e1:37:
bd:c0:fa:f2:81:b1:e5:c3:ee:01:79:7a:6b:a9:5b:8a:c2:94:
aa:19:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:02 2026 by rpki-client