This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RSlrMSXsYQqD5_X3qdeusHBjTV8.roa
File: RSlrMSXsYQqD5_X3qdeusHBjTV8.roa (raw, json)
Hash identifier: rm68bm8MwPNoLfEzVKTjK5KhGKZaNdAMKVt15UbeVB8=
Subject key identifier: 45:29:6B:31:25:EC:61:0A:83:E7:F5:F7:A9:D7:AE:B0:70:63:4D:5F
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019C09F92B2EE54DD4FEFD444BC0BEA14D4D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RSlrMSXsYQqD5_X3qdeusHBjTV8.roa
Signing time: Thu 29 Jan 2026 13:37:30 +0000
ROA not before: Thu 29 Jan 2026 13:37:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 77.246.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:09:f9:2b:2e:e5:4d:d4:fe:fd:44:4b:c0:be:a1:4d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 29 13:37:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45296b3125ec610a83e7f5f7a9d7aeb070634d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:36:cf:e4:f7:9c:da:fa:1f:bc:2b:5c:83:
04:12:17:32:62:97:7b:83:7d:28:51:ae:ef:6a:2f:
65:7c:7e:df:4b:7f:8e:6d:c0:b3:5d:fc:9c:d2:3e:
49:d0:0c:10:bc:f2:cb:e8:b3:77:34:6b:7c:c6:41:
d5:8e:49:8f:23:55:e1:77:92:55:bc:f0:49:9a:89:
b3:bc:1e:3e:61:79:f1:a6:d1:bc:78:58:b8:02:dc:
d7:50:a9:77:18:6a:22:ae:55:fa:32:81:4f:7c:72:
ee:5b:e9:c2:b4:fa:37:b5:3e:bc:73:a6:3a:2e:87:
01:d5:e6:b3:83:8e:5b:ab:e5:51:3d:38:b0:5b:6d:
ab:77:0e:fd:b3:fc:b4:79:8d:ec:a8:b9:b2:cf:f8:
5b:de:9d:a8:e9:e0:0d:ff:e4:ef:f4:3e:39:4c:39:
3d:96:ab:02:5a:67:1b:d1:78:68:95:36:37:bb:40:
7f:f3:b1:db:72:95:f7:8b:16:92:a4:49:84:2c:2b:
13:68:66:a7:a3:19:6b:5c:f0:9d:19:38:4e:de:c2:
3c:1c:3b:2d:c5:a0:5a:22:8d:0b:ae:1d:75:ee:cd:
f6:e6:3d:cd:5f:63:fd:9e:51:12:53:39:3a:29:86:
da:c7:74:9e:3e:2b:35:f1:1b:1e:8c:7d:4a:dd:b2:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:29:6B:31:25:EC:61:0A:83:E7:F5:F7:A9:D7:AE:B0:70:63:4D:5F
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/RSlrMSXsYQqD5_X3qdeusHBjTV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:66:da:e9:ce:4c:f4:e3:f6:43:1c:9a:49:38:25:9e:8a:84:
9d:69:33:b2:c2:a1:c7:4e:03:36:23:fe:09:52:76:42:ca:db:
89:76:38:e5:a0:2d:e6:7f:47:9e:a3:a3:ef:ef:2e:73:b3:35:
9f:fb:6a:5d:2a:79:6e:7a:14:53:0f:99:42:bb:7c:38:d4:2f:
eb:64:e6:68:15:e1:0c:9a:80:d8:e8:69:73:cc:c2:b7:77:28:
69:89:c1:1a:80:fa:5d:60:9c:36:8e:2b:c0:f7:91:fc:82:d5:
cf:1a:50:74:cd:26:8c:18:32:bc:d7:2d:0b:d6:ee:02:3c:9d:
2b:47:1e:a3:34:de:d3:84:f3:80:2f:00:fb:88:7c:c7:13:aa:
d4:d9:e7:cc:22:aa:d8:2e:c1:df:a4:ec:dd:16:84:20:61:a4:
27:1b:f4:94:15:61:37:fa:a3:57:6a:4f:69:fe:04:e2:0f:ec:
ea:9d:87:ec:48:14:b6:69:d9:4b:db:74:c1:c9:58:7a:79:9b:
7f:fe:c1:1c:4b:5b:7d:09:e2:f2:0a:bf:02:9f:4d:37:13:70:
93:51:7f:f0:a9:e9:ea:1b:75:15:0d:15:b5:2c:38:f8:5b:d6:
4d:c4:72:6f:c1:f8:39:72:04:f6:dd:aa:1c:80:45:53:12:02:
8a:f9:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 17:49:00 2026 by rpki-client