This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa
File: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (raw, json)
Hash identifier: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=
Subject key identifier: 6A:03:56:14:9E:A5:61:3F:5C:60:CF:50:10:D1:13:BC:E2:D9:3C:8D
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019B7D5B3B4408E4CF5828FB764EE2AF3FD6
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa
Signing time: Fri 02 Jan 2026 06:18:09 +0000
ROA not before: Fri 02 Jan 2026 06:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 45.81.149.0/24 maxlen: 24
185.202.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5b:3b:44:08:e4:cf:58:28:fb:76:4e:e2:af:3f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 06:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0356149ea5613f5c60cf5010d113bce2d93c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:85:1b:b2:b8:73:42:11:5d:36:93:15:f0:
fe:35:d8:46:80:0f:e6:3a:ab:e4:15:0a:69:86:28:
1d:66:84:38:fd:bc:37:8f:fa:e2:94:c1:be:b9:05:
da:2c:77:55:68:fb:d7:75:a2:2c:7d:e7:0a:04:28:
0d:9d:97:6b:ab:7f:dc:27:ec:4c:48:f5:d2:06:86:
5c:78:46:5b:bc:bb:70:ea:ca:d2:d1:99:d6:03:61:
2e:34:bd:75:94:f8:01:6e:57:7b:24:e9:cc:d7:f4:
d4:af:06:3e:0c:f1:9d:81:a9:bb:da:dc:a7:9e:a6:
cb:d0:8c:e5:1b:d0:c2:ba:47:2c:4a:49:e2:52:29:
d3:54:5e:09:24:b5:33:41:8b:90:12:04:7c:94:ff:
7e:b8:68:7a:9d:c0:e6:73:05:c7:be:8a:39:81:33:
cb:94:18:c2:3b:08:bf:e4:32:f4:a4:bf:03:e9:99:
74:fd:a9:e6:cf:bd:a7:ac:da:b6:1f:84:3f:df:69:
5e:a9:46:98:4e:bd:53:b2:92:c0:c2:cb:94:fd:1a:
a8:a8:a3:70:99:e0:61:26:48:f3:b3:13:0c:42:7c:
fb:7c:3d:5a:66:30:b3:fc:e7:b3:3a:9b:25:30:7f:
47:67:44:1d:cb:3f:d9:a2:88:a3:f4:65:78:66:ab:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:56:14:9E:A5:61:3F:5C:60:CF:50:10:D1:13:BC:E2:D9:3C:8D
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
185.202.175.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7c:b5:f6:e2:4b:d2:84:96:17:a3:ae:f3:f6:2a:87:1e:f7:
af:dd:90:af:ab:2a:6b:9a:78:8a:a1:27:a7:2c:b2:a3:3e:07:
f6:ad:b4:de:5c:33:81:5e:59:a4:87:39:18:e6:8a:dd:56:5c:
ac:22:36:02:fc:2a:c4:43:d2:7d:a7:7f:c1:f5:cb:a9:8a:d9:
81:64:a9:98:ab:d6:65:66:79:21:99:88:08:a7:2a:1e:af:3d:
7e:4d:dc:d6:40:a9:64:6a:6d:95:94:2b:a4:85:5c:e4:79:45:
c1:bc:ab:89:98:51:2f:22:e7:7c:a8:e2:11:d2:35:3f:1d:25:
b6:3d:1a:32:1c:14:6f:d4:d7:a0:38:08:1b:eb:e8:db:f0:be:
d7:b3:f0:5f:39:27:77:1d:96:d3:f6:92:a6:b9:38:f3:c5:8a:
2b:a0:b8:be:c1:65:c8:3c:df:73:74:e7:e5:e0:3c:6c:e0:bf:
c3:04:e3:f2:d2:5f:83:70:96:cc:9c:7f:f8:5e:85:b2:d2:79:
30:61:2e:b9:a1:a5:81:35:fa:55:71:df:13:b4:0c:70:7c:52:
0a:2a:8d:8b:1f:d5:21:d0:97:fa:1b:7c:1a:bd:1b:48:78:96:
83:2e:5b:02:41:38:f2:be:03:3e:8e:9e:16:7a:f5:50:04:6b:
74:61:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:44 2026 by rpki-client