This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa
File: r30a_HSpEMxu4ml0DY6HnohMS3c.roa (raw, json)
Hash identifier: 5aekVe+t3S9A1hcR3BgA46v7PVY1wUswoYPrIwPg0Ag=
Subject key identifier: AF:7D:1A:FC:74:A9:10:CC:6E:E2:69:74:0D:8E:87:9E:88:4C:4B:77
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 019B79ED202EB4396C0592F0985C414021C2
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa
Signing time: Thu 01 Jan 2026 14:19:01 +0000
ROA not before: Thu 01 Jan 2026 14:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48873
IP address blocks: 45.142.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:20:2e:b4:39:6c:05:92:f0:98:5c:41:40:21:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: Jan 1 14:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7d1afc74a910cc6ee269740d8e879e884c4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:b9:ee:45:45:e3:96:84:3f:43:b7:5e:27:
ee:0a:7a:fd:d5:a9:05:6f:5a:70:8b:36:aa:2a:1e:
81:ed:7d:16:81:92:63:fd:81:3c:6f:1e:d9:f3:8a:
48:f4:7d:90:25:e9:34:1d:12:67:3a:91:e7:da:a2:
48:24:e8:ae:14:9a:4e:a9:c2:36:7a:46:a0:ee:70:
67:99:3c:c9:e2:9b:93:7c:3e:ee:cd:c5:ed:47:9b:
34:5c:8f:4b:f8:83:a0:79:33:89:87:f0:21:1a:b6:
38:84:f8:de:65:0b:22:a1:1e:87:54:00:e1:94:5e:
01:c7:c5:89:fa:5d:24:ef:71:80:89:8b:8d:be:ed:
4b:44:c2:b7:d7:2f:c5:f7:77:07:c7:b7:f6:6e:63:
d1:99:39:25:f3:de:62:29:af:1f:39:39:d5:4b:6d:
27:e5:7e:06:c0:c9:9a:83:d3:1f:53:1c:2d:90:b6:
04:dd:e6:60:f9:5a:38:11:99:4a:ef:39:c2:ff:a2:
5f:60:e2:82:cb:54:e2:e6:f2:38:4d:ee:fa:cb:e6:
58:d2:e9:59:ca:d3:5f:36:0a:23:38:d5:f9:82:a7:
5b:21:9a:35:fd:d1:5b:a1:f1:f4:9a:41:b9:36:be:
7c:0c:91:b3:37:95:68:e3:a5:b1:94:6c:50:aa:16:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:1A:FC:74:A9:10:CC:6E:E2:69:74:0D:8E:87:9E:88:4C:4B:77
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:5c:ae:8c:68:7b:31:79:01:11:1e:24:0e:7e:a2:a4:63:c3:
9f:8a:2f:0c:1e:55:63:fd:76:37:eb:82:bb:09:40:18:71:b5:
cf:70:97:a5:da:9d:ee:5c:58:4e:9e:00:9e:b5:23:86:0b:19:
2d:7a:33:cf:25:b4:63:e6:a0:77:35:4f:11:87:0f:b8:b2:4c:
f3:6c:8a:82:0c:d2:e1:c4:f7:52:6d:20:a6:50:6b:87:3f:e9:
92:c7:8f:a6:62:2b:a2:32:a0:0f:cf:3d:45:e4:17:dd:c6:6d:
86:a4:0f:8c:f2:db:86:91:62:25:00:c1:cc:67:6a:13:b6:7a:
28:3e:8d:fb:31:73:2c:86:8f:39:bc:db:26:04:12:f0:f3:6c:
14:32:b8:33:37:40:fd:c9:35:c9:70:5c:ed:ca:67:a0:cc:96:
5e:8c:d8:7f:11:b2:b6:f6:b3:2e:67:24:d6:04:c3:b5:09:93:
e1:0d:81:1f:cd:88:1e:de:f4:9a:aa:9c:e0:60:15:ad:b9:b9:
f2:c0:0d:2f:7c:1c:a1:b6:a4:6c:8f:80:87:20:15:0c:bb:12:
e1:0d:62:ac:7e:fe:e4:e8:d2:7c:35:c4:d9:8d:5e:c7:8d:dd:
0b:de:b9:52:d8:05:02:22:fe:e5:7b:a1:ec:dc:6d:3b:e0:31:
4f:48:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:58 2026 by rpki-client