This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa
File: 40mGcXCMHPuRla1zKGXyXZBVzvs.roa (raw, json)
Hash identifier: WfYQcn+9zI1kuNsKzotUcFlUBcLcTv4/3QyWYbcWs7o=
Subject key identifier: E3:49:86:71:70:8C:1C:FB:91:95:AD:73:28:65:F2:5D:90:55:CE:FB
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 019B7B36E08A3277BCAEF4FB697C9A645F64
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa
Signing time: Thu 01 Jan 2026 20:19:12 +0000
ROA not before: Thu 01 Jan 2026 20:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214273
IP address blocks: 45.94.184.0/24 maxlen: 24
45.94.185.0/24 maxlen: 24
194.164.176.0/24 maxlen: 24
194.164.177.0/24 maxlen: 24
2a01:f680:10::/48 maxlen: 48
2a01:f680:11::/48 maxlen: 48
2a01:f680:20::/48 maxlen: 48
2a01:f680:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:e0:8a:32:77:bc:ae:f4:fb:69:7c:9a:64:5f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Jan 1 20:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3498671708c1cfb9195ad732865f25d9055cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:a5:63:6f:cf:1b:8c:c9:9d:f5:58:fd:29:
e8:6b:d9:9f:3f:1d:93:cf:0b:65:7a:8e:e8:73:ab:
7d:60:77:c1:bc:f8:14:5f:74:6d:fd:cc:29:2d:e9:
75:71:ef:b9:56:c3:2b:51:5f:b2:a5:6e:8e:c3:ca:
70:c9:99:77:e1:04:45:bf:3c:55:d5:25:c7:8c:1d:
bf:77:31:81:1b:c5:99:4b:ce:aa:87:32:22:1e:8b:
ea:ff:cb:33:d2:b2:1a:d2:4e:2b:98:9e:cc:e0:a4:
be:c3:76:7c:85:aa:d6:a1:37:6a:04:b3:59:8f:b9:
6b:52:f7:6d:2d:d2:47:47:a5:fc:dc:e4:03:53:d9:
3b:e9:a4:dc:3e:44:dc:4e:5b:f0:8f:7c:c6:42:6d:
74:a2:a0:66:d4:71:ee:38:de:f7:62:07:bf:8d:d6:
af:ba:62:67:6c:ef:1c:34:1d:63:81:8d:f0:0a:d1:
cc:2a:c5:60:26:3c:22:13:29:fe:42:8a:35:56:72:
a2:42:11:c8:a4:7e:a6:2c:a2:39:ef:f7:27:a1:f8:
ae:e3:8e:b7:67:a2:7e:2b:cf:59:1f:e1:af:17:17:
da:c0:9f:f6:35:f1:2a:9c:e6:cf:d2:31:f8:69:50:
39:5d:0b:1b:15:71:81:1c:ea:49:30:8c:2f:49:95:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:86:71:70:8C:1C:FB:91:95:AD:73:28:65:F2:5D:90:55:CE:FB
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.184.0/23
194.164.176.0/23
IPv6:
2a01:f680:10::/47
2a01:f680:20::/47
Signature Algorithm: sha256WithRSAEncryption
90:8d:63:ec:ec:86:f6:07:e9:f8:2d:f0:d3:9d:21:c8:8e:29:
8a:55:c7:a0:6c:de:56:ba:0f:4f:65:9f:9a:59:94:4e:7a:88:
62:1a:a5:6b:49:3b:2b:ab:61:b7:02:10:bb:48:76:dc:df:73:
42:8d:82:1b:66:57:99:31:e2:4f:17:9a:46:53:34:ec:f2:ad:
7c:25:68:73:30:9d:ab:05:8e:c7:5a:9a:69:16:aa:52:fc:63:
31:57:b1:22:83:da:5c:da:f9:8d:aa:77:3b:b2:44:2d:30:42:
1c:b7:6f:99:1f:df:80:30:6c:18:be:21:dd:d7:b3:41:75:b7:
fa:ee:95:bd:5e:43:a1:15:ad:97:40:53:1a:10:af:48:32:a6:
1c:f6:2a:dd:99:8e:ea:c5:30:99:ee:9f:c6:f2:29:1c:d2:fd:
a3:9d:b0:a8:7c:30:eb:85:0e:46:d6:1b:93:65:da:ce:4c:aa:
22:b6:31:1f:fa:29:7c:db:60:50:0c:23:d3:33:c9:74:05:e6:
e9:8f:f0:25:bd:ed:43:b2:95:07:ab:34:aa:02:90:b8:22:7c:
2f:66:36:6c:54:6e:8b:9d:c9:1c:15:0a:e0:2b:cc:21:6d:b6:
1a:1b:6d:40:70:72:85:61:3b:de:0c:14:92:f0:6a:35:54:57:
44:46:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:35 2026 by rpki-client