This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZxWtSEgTugwgKy6TKTc0q3FuG20.roa
File: ZxWtSEgTugwgKy6TKTc0q3FuG20.roa (raw, json)
Hash identifier: GP+RYxxg8bipDHU+DaIj/XyjSq5SmSwrA67otdqOnlk=
Subject key identifier: 67:15:AD:48:48:13:BA:0C:20:2B:2E:93:29:37:34:AB:71:6E:1B:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCBB29512CF64EC43357E5FBE4D5082
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZxWtSEgTugwgKy6TKTc0q3FuG20.roa
Signing time: Fri 02 Jan 2026 08:21:00 +0000
ROA not before: Fri 02 Jan 2026 08:21:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 151.241.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:b2:95:12:cf:64:ec:43:35:7e:5f:be:4d:50:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:21:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6715ad484813ba0c202b2e93293734ab716e1b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:9e:25:4c:4d:d1:6a:a9:b5:bb:c1:98:c5:
8f:b5:f8:23:b8:eb:e9:82:5f:9e:3a:66:32:45:29:
23:b1:6f:98:76:cb:74:a5:83:b3:77:43:41:ae:bf:
41:3f:48:71:f4:c2:82:3e:9d:78:05:65:17:b1:b3:
ee:fd:5b:ae:34:d4:0c:01:db:53:71:b5:a1:a2:66:
46:1c:b9:37:c7:bd:fd:0a:95:2a:cf:76:fb:4e:47:
98:ab:03:9f:56:28:79:54:d9:a4:7f:22:bd:4a:ac:
8e:a7:bd:0a:f3:08:fa:c4:9f:89:9b:d8:c5:ba:9d:
0b:f9:4c:d7:e2:3f:c5:02:eb:e1:25:41:37:45:24:
1d:4e:6d:17:20:92:a4:97:d0:aa:1f:bd:6b:2d:62:
1c:13:6e:57:3d:d1:d2:b6:c9:5d:dc:18:f0:07:ee:
df:ba:ba:ed:af:70:68:3b:04:71:a5:33:11:5c:42:
00:79:c7:fd:28:ef:ad:b7:d9:dc:38:bf:6a:d6:07:
27:d2:ea:0e:87:3f:cf:20:d0:17:15:af:b3:3c:36:
8c:94:6c:17:1f:eb:8b:3b:24:11:5d:74:1c:3d:6d:
ff:8b:6b:16:a8:bd:f6:55:c8:be:fc:6f:f5:56:f5:
42:6b:26:31:d3:79:7e:20:bd:2f:e2:ae:9c:63:e0:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:AD:48:48:13:BA:0C:20:2B:2E:93:29:37:34:AB:71:6E:1B:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZxWtSEgTugwgKy6TKTc0q3FuG20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.18.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4d:a9:8e:6f:31:21:81:7d:8e:84:af:23:46:05:4a:82:ea:
e6:15:8b:5b:04:b9:b7:0e:01:c4:0b:a1:fd:5c:f7:5e:79:8d:
cc:23:d7:d6:f4:59:be:a0:6b:e6:d0:c9:35:41:65:74:3e:fc:
4f:a8:e5:50:da:62:b3:6b:94:a2:85:12:97:86:65:2f:7d:d1:
8e:65:c5:b9:70:73:96:8a:91:74:25:e2:cc:16:f1:1a:5b:f0:
22:43:f1:25:9f:48:17:4c:13:94:8f:a7:95:06:3c:43:bc:41:
58:32:25:3e:8c:54:28:aa:ff:a0:4b:13:d7:af:7d:53:51:74:
10:f6:29:7a:9f:8d:47:cb:ce:0f:0b:d1:0f:19:7d:8e:80:38:
e3:d8:e8:a5:d5:59:ad:f8:3d:10:e7:df:e1:29:e2:55:c0:a4:
1c:84:af:56:17:e8:8d:80:ed:86:ce:0a:5d:19:f1:47:d7:be:
96:c4:16:3f:d6:99:30:aa:7c:53:ff:7e:bb:28:53:14:d6:d3:
95:88:da:88:11:12:83:d3:58:9d:28:be:e5:78:ba:30:db:ea:
7c:22:c0:c8:ff:17:b7:40:46:b7:eb:79:2f:eb:43:ef:b9:68:
d5:ca:07:80:14:3c:d7:7f:5a:1f:3e:9d:40:34:a4:73:9e:91:
a0:2d:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:13 2026 by rpki-client